Your data,
your control.

We collect only what we need to make the app work, never sell your data, and give you full control to delete everything at any time.

Last updated: May 2026

No ads, ever

Never sell your data

Delete anytime

Encrypted at rest

Jump to section

Information We Collect

Account information: your name and email address when you sign up via email or Google OAuth.
App data: tasks, deadlines, courses, grades, focus sessions, and calendar events you create.
Billing data: if you subscribe to Premium, payment is processed by Stripe. We store only your Stripe customer ID and subscription status, never your card number or full billing details.
Usage data: page views and session counts collected via Google Analytics (anonymized).
Device data: theme preference, sidebar collapse state, and focus timer state stored in your browser's localStorage.

To provide and improve the Taskoo service.
To send account-related emails (password reset, billing receipts, important updates).
To process subscription payments via Stripe.
To generate AI responses when you use AI Chat, Syllabus Import, or Study Plan - your context is sent to our AI provider only to fulfil your request.
We never sell your data or share it with advertisers.

When you use AI Chat, Syllabus Import, or Study Plan generation, your message and relevant context (deadlines, courses) are sent to OpenRouter to generate a response.
OpenRouter routes requests to AI model providers. Data sent is not used to train models.
We do not permanently store the contents of AI conversations beyond your session.

Premium subscriptions are processed by Stripe, Inc. Stripe handles all payment card data under PCI-DSS compliance.
We receive webhook notifications from Stripe to update your subscription status. We store your Stripe customer ID, subscription ID, status, and renewal date.
You can manage or cancel your subscription at any time from Settings > Billing.

Your data is stored in Supabase, hosted on AWS infrastructure.
All data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
Access to your data is restricted via row-level security policies - only you can read your own data.
We retain your data for as long as your account is active.

Authentication: secure HTTP-only session cookies managed by Supabase Auth.
Preferences: theme, sidebar state, and focus timer are stored in localStorage on your device only.
Analytics: Google Analytics uses cookies to measure aggregate usage. No personal data is linked to analytics cookies.
We do not use advertising or cross-site tracking cookies.

Access: view all data you've created directly within the app.
Deletion: delete your account and all associated data from Settings > Danger Zone. Deletion is permanent and immediate.
Export: email team@taskoo.ca to request a copy of your data.
Correction: edit or delete individual tasks, deadlines, and courses directly in the app.
EU/UK residents have additional rights under GDPR/UK GDPR. Contact us to exercise them.

Taskoo is not directed to children under 13. We do not knowingly collect data from children under 13.
If you believe a child has created an account, contact team@taskoo.ca and we will delete it promptly.

We may update this policy as the product evolves. The 'Last updated' date reflects any changes.
Material changes will be communicated via email at least 14 days before taking effect.
Continued use of Taskoo after changes constitutes acceptance of the updated policy.