Privacy Policy
Effective date: October 11, 2026
This Privacy Policy explains how ecoTask handles information in connection with the ecotaskapp.com website and the ecoTask desktop application for Windows and macOS and the ecoTask mobile application for iOS and Android (together, the “Service”).
1. The short version
ecoTask has no application server. Your tasks, notes, and attachments are stored on your own computer. If you turn on cloud sync, your data travels between your devices through your own Google Drive account — it does not pass through, and is not stored on, any server we operate. We cannot read your task data.
2. The website
The ecotaskapp.com website presents product information, documentation, and a blog. It does not ask you for personal information and sets no analytics or advertising cookies.
Our hosting provider, Vercel Inc., processes standard server request data (such as IP address, user agent, and requested URL) as a necessary part of delivering the site and protecting it from abuse. This information is handled by Vercel under its own privacy terms.
When we add a launch-notification signup form, this section will be updated before that form goes live.
3. The ecoTask application
Everything you create in ecoTask — tasks, projects, notes, attached files, and your completed history — is written to a local database on your own machine. In a single-device setup, the application works fully offline and your task data is not sent anywhere.
We do not operate a backend service that receives your task data. To improve the product, the application collects anonymous usage statistics — whether the app was started, a randomly generated installation identifier, the app version and operating system, and your approximate region (country and city) — processed by Google Analytics. You can turn this off or on at any time in Settings.
4. Google user data
Cloud sync and calendar integration are optional. They are off until you explicitly connect a Google account, and you can disconnect at any time.
4.1 Scopes we request
| Scope | What we do with it |
|---|---|
openid, email | Sign you in and show which Google account is connected. We receive your email address and a Google account identifier — nothing else from your profile. |
https://www.googleapis.com/auth/drive.appdata | Create and maintain ecoTask’s private sync folder in your Google Drive, so your tasks can move between your own devices. This scope opens only a hidden folder that belongs to this application — your own files are not visible to us. |
https://www.googleapis.com/auth/calendar.readonly | Read events from the calendars you choose to subscribe to, so they can be shown alongside your tasks. |
https://www.googleapis.com/auth/calendar.app.created | Create a secondary calendar for ecoTask and manage the events on it. Limited to calendars this application itself created — no access to your existing calendars. |
https://www.googleapis.com/auth/calendar.events.owned | Change events on calendars you own — used when you reschedule a subscribed event from inside ecoTask. |
We deliberately do not request the broader calendar or calendar.events scopes, which would grant access to every calendar in your account, nor the broader drive or drive.file scopes, which would reach files you did not create through ecoTask.
Because desktop applications cannot request Google permissions incrementally, all of the scopes above are requested together the first time you connect an account, even if you only intend to use cloud sync. You can grant a subset at the consent screen; ecoTask keeps the corresponding feature disabled rather than asking again.
4.2 Where this data goes
Data obtained through these scopes is exchanged directly between the ecoTask application on your device and Google’s servers. Access tokens are stored locally on your device. Your Google user data is never transmitted to us, and we have no ability to access it.
4.3 Limited Use
ecoTask’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not:
- transfer or sell Google user data to third parties;
- use Google user data for advertising of any kind;
- use Google user data to train generalized artificial intelligence or machine learning models;
- allow humans to read Google user data, except with your explicit consent for a specific issue you have reported to us, where required for security purposes, or to comply with applicable law.
4.4 Revoking access
You can disconnect your Google account from within ecoTask at any time, or revoke access directly at myaccount.google.com/permissions. Revoking access stops all further sync. ecoTask’s sync folder is hidden from your normal Drive view; you can remove it at any time from Drive → Settings → Manage apps → ecoTask → Delete hidden app data. Note that disconnecting ecoTask on that same screen also deletes that data, and your next sync will start from an empty cloud.
5. Sharing with third parties
We do not sell, rent, or trade personal information. Because your task data never reaches us, there is nothing for us to share. The only third parties involved in the Service are:
- Google LLC — only if you enable cloud sync or calendar integration, and only as your own storage and calendar provider.
- Google LLC — processing of the anonymous usage statistics described above (Google Analytics), until you turn them off in Settings.
- Vercel Inc. — hosting for the ecotaskapp.com website.
6. Retention and deletion
Because we hold no copy of your data, deletion is entirely in your hands. Uninstalling ecoTask and deleting its local database removes the data from your device; deleting ecoTask’s hidden app data from your Google Drive (Settings → Manage apps) removes the cloud copy.
7. Security
Communication with Google APIs uses encrypted connections (HTTPS/TLS). Data stored on your own device is protected by that device’s own security — we recommend using full-disk encryption and a screen lock. No method of storage or transmission is perfectly secure, and you remain responsible for keeping backups of data that matters to you.
8. Children
The Service is not directed to children under 13 (or the higher minimum age that applies where you live). We do not knowingly collect personal information from children.
9. International transfers
The website is served from a global content delivery network, and if you enable cloud sync your data is stored in the Google account you chose, which may be hosted outside your country of residence. We do not ourselves transfer personal information across borders, because we do not collect it.
10. Your rights
Depending on where you live — including under the EU/UK GDPR, the California Consumer Privacy Act, and the Personal Information Protection Act of the Republic of Korea — you may have the right to access, correct, delete, or port your personal information, to withdraw consent, and to object to or restrict certain processing.
For data held in your device or your own Google account, you can exercise these rights directly. For anything else, contact us at support@ecotaskapp.com and we will respond within the period required by applicable law.
11. Changes to this policy
We will update this page when the Service changes — for example, when the launch-notification form is added or when the set of Google scopes we request changes. The effective date at the top of this page always reflects the current version.
12. Language
This Privacy Policy is authored in English, and the English version is the authoritative text. Translations are published for convenience; if a translation differs from the English version, the English version governs. Where local law requires information to be provided in another language, that requirement is not affected by this section.
13. Contact
Questions about this policy or about your data: support@ecotaskapp.com