Privacy

Who we are

hayTask is a to-do app for people with ADHD, made by Alan Nguyen, an independent developer. In this policy, "we" means hayTask. Questions about your data go to:

hello@haytask.app

What we keep

• Your account: your email address and, if you sign in with Google or Apple, the ID it gives your account. Apple may give us a private relay address instead of your email.
• Your tasks: your tasks, steps, projects, areas and settings, so that they're the same on every device you sign in on.
• Your devices: a name for each, like "Chrome, Mac", and when it signed in and was last seen, so that you can sign it out. If you add a passkey, its public key: the private part never leaves your device.
• Notifications, if you turn them on: the address your browser gives us to send them, and the reminders due in the next 30 days (a task's name and time), so that they arrive while hayTask is closed.
• AI, if you turn it on: when you agreed to it, and how many times a day you use it, to keep to fair limits. Never your words.
• Sign-in codes: a scrambled copy of the last code we emailed you, which works for 10 minutes.

What we don't do

• No ads. We never sell your data, or share it for ads.
• No tracking and no analytics, in the app or on this site, and no cookies for either.
• We don't look at your tasks, unless you ask us to, to fix a problem, or the law makes us.

AI

hayTask's AI is optional, and off until you agree to it. It runs only when you press a button with ✦, and only what you ask about is sent: the task you want broken into steps, say.

Your words go through our server to OpenAI, in the US. OpenAI doesn't train AI on them, and deletes them within 30 days. We keep none of them. Haymo only suggests: nothing is saved until you add it. Turn AI off in Settings at any time.

Your voice

Where your browser can turn speech into text, you can speak instead of typing. Your browser does it, maybe on its maker's servers, such as Google's in Chrome. hayTask never gets your voice: only the words, as you'd have typed them.

Sign in with Google

When you sign in with Google, we ask only for your email address and your account's ID, and use them only to sign you in.

hayTask's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google API Services User Data Policy

Who else handles it

A few companies run parts of hayTask for us, each only for its part, and your browser has its own:

• Fly.io runs our server, and Neon our database, both in Virginia, US.
• Cloudflare serves the app and this site.
• Resend sends sign-in codes by email.
• Google and Apple, when you sign in with them.
• OpenAI, for AI, only when you use it.
• Your browser's push service (Google's, Apple's or Mozilla's), to deliver notifications, and its speech service, when you speak.

We share your data with no one else, unless the law makes us, to keep someone from harm, or with whoever takes hayTask over, under this policy.

Where it is

On our server in Virginia, US, and on each device you sign in on, in your browser's storage, so that hayTask works offline. If you live outside the US, using hayTask sends your data there.

How long we keep it

• Your account and your tasks: until you delete them, or your account.
• Server logs: which kind of request came and how it went, with no email, task or IP address in them, for a short time.
• Your IP address: used for minutes, in memory, to slow down repeated sign-in attempts. Never stored.
• Backups: our database keeps a short history, to recover from mistakes. What you delete leaves it within 30 days.

Your choices

• Change or delete your tasks in the app, at any time.
• See your devices in Settings, and sign any of them out.
• Turn AI and notifications off in Settings.
• Delete your account in Settings: your account, your tasks, your devices and all else of yours on our server go at once, for good.

To get a copy of your data, or for anything else about it, write to us: we answer within 30 days. Where you live (the EU, the UK or California, say), the law may give you more rights, such as to object or to complain to a regulator. We respect them.

hello@haytask.app

Keeping it safe

Everything travels encrypted, and our database is encrypted where it's stored. hayTask has no passwords: you sign in with a code, a passkey, Google or Apple. Each device keeps a sign-in key, of which we keep only a scrambled copy.

Children

hayTask isn't for children under 13, or under the age your country sets for this, up to 16. If you think a child has given us data, write to us and we'll delete it.

Changes

If we change this policy, the date at the top changes. If a change matters, we tell you in the app before it applies.