taskss

Privacy Policy

Last updated: 7 October 2026 · Version 3.0

This policy explains what personal data taskss collects, why, what we do with it, and the controls available to you. It is designed to align with India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. The statutory framework has a phased commencement. Where a provision is not yet in force, we provide the controls listed here as Taskss service commitments. We apply the same protections to every user, wherever the app is available. This is our privacy notice, not legal advice. If anything here is unclear, write to us and we will explain it.

1. Who we are

taskss (the app, at in.taskss.app) is operated by Big Helpers, New Delhi, India. Under the DPDP Act we are the Data Fiduciary for your personal data. The same account is used by our companion app Taskless, which has its own privacy policy for what it does on your iPhone.

• Contact for any privacy question, request or complaint: admin@bighelpers.in
• Grievance Officer (DPDP Act s8(9), s13): reachable at admin@bighelpers.in. This is the person able to answer questions about how we process your data and to handle any grievance.

2. What data we collect

• Account details: your name and email address.
• Your content: the tasks, calendar events, notes, journal entries and habits you create, including any photos or attachments you add.
• Precise location: when you explicitly tap "use current location", or for optional place reminders after you enable them and grant the required permission. Place reminders can work in the background to remind you when you arrive at or leave a saved place. Your phone watches those saved places; Taskss does not keep a record of where you go.
• Device push token: so we can send the notifications you have turned on.
• What you send to Taskss AI (optional): the words you type or say to Taskss AI, a short voice recording when you hold the Taskss AI button to speak, and the note, attachment or task you ask it to read. See section 5A.
• Your rhythm and saved places (optional): the wake, sleep and working hours you set, and places you name such as Home, Office or Grocery (a label, an address you type, and optionally a map point and radius). They are used to suggest times and place reminders.
• Your choices on suggestions: when you accept, edit or dismiss a Taskss AI suggestion, we keep that choice and a short reason you pick, so future suggestions suit you better.
• Crash and performance data: collected through Google Firebase Crashlytics to help us find and fix faults.
• What you use AI features with: the text of the tasks, notes, captures and requests you give to an AI feature, such as Taskless AI or Taskss AI, and your answers to its suggestions (kept, refused, linked, merged).

We do not run any advertising SDK, we do not track you across other apps or websites, we do not build advertising or marketing profiles about you, we do not sell your data, and we do not share it with data brokers.

3. Why we process your data

We process your data to run the service you asked for. Under the DPDP Act this rests on your consent (section 6), which you give by a clear action when you create an account and when you turn on optional features. There are no pre-ticked boxes and nothing is bundled.

Purpose	Data used
Running your account and syncing your tasks, calendar, notes, journal and habits	Account details, your content
Historical subscription records and cancellation support, where applicable	Previous provider references, subscription status and billing period. Taskss features are free; no new publisher purchase is required.
Sending push notifications you have enabled	Device push token
Showing your current location when you request it, and optional saved-place reminders after consent and permission	Precise location for your requested action or saved-place arrival/departure checks. Place reminders may run in the background; no movement history is retained.
Answering you with Taskss AI (optional, after you switch it on): the daily brief, chat, voice entry, reading notes and attachments, and suggestions that link your tasks, calendar, notes, habits and archive	What you send to Taskss AI, and the minimum context from your account that each answer needs (section 5A)
The Taskss AI section of your daily digest email (optional)	Your pending tasks, today's events and habits, and how often tasks were moved
Suggesting times and place reminders	Your rhythm, saved places, calendar and tasks
Making suggestions more useful to you	Your accept, edit and dismiss choices on suggestions
Finding and fixing faults	Crash and performance data
Protecting your account and preventing fraud and abuse	Account and usage signals
AI features: understanding what you capture or ask, writing titles, dates, tags, plans and steps, answering requests, and suggesting tasks to link, projects to split and duplicates to merge	Your content and requests, and your answers to suggestions
Making AI suggestions fit you better over time	Your answers to suggestions

You can withdraw any consent at any time (see section 7), and withdrawing it is as easy as giving it.

4. Where your data is processed

We store and process your data on servers in India. Payment processing (Razorpay) and our hosting both operate in India, so those flows stay within India.

Requests you make to Taskss AI are sent over an encrypted connection to the partner AI service described in section 5A, and to no other AI provider.

One flow leaves India: crash and performance data shared with Google (Firebase) may be processed by Google outside India, under Google's own data protection terms. Under the DPDP Act, the Government of India may restrict cross-border processing to particular countries by notification (section 16); we will comply with any such restriction.

AI features run on artificial intelligence models, including small language models (SLMs). Depending on the feature, the model runs on your device, on servers we operate in India, or with an AI model provider acting on our behalf, which may process the request outside India. Only what a request needs is sent, and the provider returns the answer to us.

5. Who else touches your data (sub-processors)

• Google Firebase: crash reporting, performance data and push notifications.
• Razorpay: payment processing. Razorpay handles your card and payment details directly; taskss never sees your full card number.
• Our India hosting provider: the servers your data sits on, in India.
• AI model providers: process the text of an AI request when a feature uses a hosted model, to produce its answer.
• Our partner AI service: it runs Taskss AI. It receives only what a Taskss AI answer needs, and only after you have switched Taskss AI on (section 5A).

We do not share your personal data with anyone else for their own purposes, and we do not sell it.

5A. Taskss AI

Taskss AI is the assistant inside taskss. Taskss AI uses a partner AI service to answer you. It is optional and off until you switch it on, during setup or in Settings, Taskss AI. You can switch it off again at any time, and it stops at once.

When Taskss AI is on, it can:

• write your daily brief and answer your questions in chat about what is pending across your tasks, calendar, notes and habits;
• turn what you type or say into a task, event, time block, note or habit, and ask you one question at a time when something is unclear;
• read a note or attachment you choose, and lift out tasks, dates and events;
• suggest links between your items, for example a calendar time for a task, a habit for something you repeat, or a place reminder;
• add a short analysis of your pending work to your daily digest email, if you leave that switched on.

What is sent. For each answer, we send the partner AI service the words, voice recording, note or attachment you gave it, and the minimum context from your account that the answer needs, such as the titles, dates and status of your open tasks, upcoming events, habits and recent notes. You choose which of Calendar, Habits, Notes and Tasks Taskss AI may read in Settings, Taskss AI. Information is sent securely, and only when a Taskss AI feature runs.

What is never sent. Your journal. It is encrypted on your device (section 8), and Taskss AI never reads it, its mood, weather or location details, or its photos and files.

What we keep. We do not keep your voice recordings: a recording is turned into text and then discarded. We do not keep your chat messages on our servers. We keep the suggestions Taskss AI makes and whether you accepted, edited or dismissed them, and a usage record of each Taskss AI request (the feature, its time and its size, without its content). You can clear what Taskss AI has learned from your choices in Settings, Taskss AI, Reset what Taskss AI learned. All of it is deleted with your account.

You stay in charge. Taskss AI only suggests. Nothing is created, moved, linked or completed until you tap, and every change it helps you make can be undone. Its answers can be wrong, so check anything important.

Taskss AI does not use your data for advertising, and we do not sell it.

6. How long we keep your data, and how to delete it

We keep your data for as long as your account is active. You can delete your account at any time from within the app: Settings, Edit profile, then Delete account. You can also follow the instructions on our account deletion page. When you delete your account:

1. Your data is wiped from your device immediately and your account is closed at once.
2. We keep a copy on our server for 30 days, so that a deletion made by mistake can be recovered if you ask us for support within that window.
3. After 30 days, a scheduled job permanently and irreversibly purges everything, including the key material for your encrypted journal. After this point nothing can be recovered.

You may also request deletion by writing to admin@bighelpers.in. We also delete data when the purpose it was collected for no longer applies or when you withdraw the consent it rested on, unless a law requires us to keep it (for example, payment records for tax).

7. Your rights and how to use them

Sections 11 to 14 of the DPDP Act describe access, correction, erasure, grievance and nomination rights, subject to the Government's phased commencement notifications. Taskss provides the following controls as service commitments now and as statutory rights when the relevant provisions apply. Write to admin@bighelpers.in. There is no charge, and we will respond within any statutory period that applies at the time of your request.

• Access: a summary of your data and how we process it (DPDP s11).
• Correction, completion, updating and erasure of your data (DPDP s12).
• Withdraw consent: at any time, as easily as you gave it (DPDP s6).
• Nominate another person: you may nominate someone to exercise your rights if you die or become incapable of doing so (DPDP s14).
• Grievance redressal: raise a grievance with our Grievance Officer at admin@bighelpers.in (DPDP s13). If it is not resolved, you may use the statutory escalation route available at that time.

Deletion is also available directly in the app: Settings, Edit profile, then Delete account (see section 6).

A limitation for your encrypted journal (see section 8): an access request can only return your journal in encrypted form. We cannot decrypt it.

8. Your encrypted journal

Your journal is end-to-end encrypted on your device (PBKDF2 with 600,000 iterations, then AES-GCM). The key is derived from your passphrase on your device and is never sent to us or stored by us. Because of this, we do not possess the technical means to decrypt your journal content.

• This is a statement of what we cannot do, not a way of avoiding responsibility. Your journal is still covered by this policy, and we remain the Data Fiduciary for the encrypted data and its metadata (that an entry exists, its time and its size).
• If you lose your passphrase, your journal content is permanently unrecoverable. We cannot reset it or produce a readable copy. Keep your passphrase safe.
• Strong encryption lowers your risk if there were ever a security incident, but it does not remove our duty to assess and report a data breach where the law requires it.

9. Automated decisions

AI features make suggestions, and you decide: nothing is linked, split, merged or added until you accept it. To make suggestions fit you, they learn from your answers to earlier suggestions. This is used only inside taskss and its companion apps, never for advertising, and it does not make decisions with legal or similarly significant effects on you. In the app you can see what the AI has learnt, reset it (in taskss: Settings, Taskss AI, Reset what Taskss AI learned), and turn each kind of suggestion off.

We run no advertising SDK, do no tracking across other apps or websites, and sell nothing.

10. Children

You must be 18 years of age or older to create a taskss account. The DPDP Act treats anyone under 18 as a child and requires verifiable parental consent before their data is processed. Rather than process children's data, we do not allow under-18s to register, and the app asks you to confirm you are an adult before an account is created. We do not knowingly process the data of anyone under 18. If we learn that we have, we will delete it.

11. Language, changes and how we tell you

We write this notice in plain language. On request we can provide its content in English or any language listed in the Eighth Schedule of the Indian Constitution (DPDP s5(3)).

If we change this policy we will update the date and version at the top and, for material changes, tell you in the app or by email.