1. Introduction

This policy explains how FlashTask collects, uses, and protects personal data for its mobile task management app (iOS and Android). FlashTask is intended for individual users worldwide.

2. Data we collect

• Account data: email, name, hashed password.
• Task data: titles, descriptions, dates, statuses, categories.
• Voice data: audio recordings transcribed via AI.
• Technical data: IP address, device ID, app logs.
• Calendar data: sync tokens and credentials for connected calendar services.

3. How we use data

• Provide core features: task creation, editing, reminders.
• Run voice transcription and AI extraction.
• Sync data across devices, including offline queueing.
• Improve reliability, security, and analytics.

4. Legal bases (GDPR)

• Contract performance for delivering the service.
• Consent for optional features (voice, analytics).
• Legitimate interests for security and service improvement.

5. Data retention

We retain your personal data while your account is active. Upon account deletion, all task data, voice recordings, calendar integrations, and profile information are permanently deleted within 90 days. Certain data may be kept longer for legal or security reasons:

• Billing & payment records — retained for 10 years to comply with accounting and tax regulations.
• Anonymised security logs — retained for up to 3 years to detect and prevent fraud.
• Legal hold data — kept for the duration of any legal obligation or dispute.

For the full breakdown, see our Account Deletion page.

6. Sharing and processors

We do not sell your data. We share it with vendors that help us deliver the service, such as:

• Calendar service APIs (e.g. Google Calendar, and others in the future) for sync.
• Voice transcription / AI services.
• Authentication services.
• Cloud storage and hosting.
• Analytics providers.

7. International transfers

Data may be processed in countries outside your jurisdiction. We use appropriate safeguards such as standard contractual clauses where required.

8. Security

We use secure local storage, encryption in transit and at rest, and access controls to protect your data.

9. Your rights

• Access, correction, and deletion of your data.
• Data portability.
• Withdraw consent at any time.
• Deactivate or permanently delete your account.

To exercise these rights, contact us at flashtask@realiseo.studio.

10. Account deletion

You can delete your account at any time from within the app or by contacting us. For the full step-by-step procedure and a detailed list of data deleted or retained, see our dedicated Account Deletion page.

11. Cookies

We use cookies for essential functions and analytics. You can control cookies in your browser settings.

12. Changes

We may update this policy periodically. We will notify users in the app or on the website when required.

13. Contact

Contact: [Company name, address, phone]. Email: flashtask@realiseo.studio