- Your tasks, notes and attachments are stored on your device. We have no account system and no copy of your library. Your phone's own system backup may include them, encrypted, in your Apple or Google account.
- Backups and calendar sync are optional and go to your own iCloud or Google account.
- AI features send only the text you choose to send, through our relay, to Google Gemini. No copy is kept.
- The free version shows ads from Google AdMob. In the EU, EEA, UK and Switzerland we ask for your consent first.
- This website uses no cookies, analytics or trackers, and loads nothing from third parties.
- We never sell your data.
1. Who we are
The controller for the processing described here is COUBUS OÜ, Vesivärava tn 50-301, 10152 Tallinn, Estonia, registry code 14419079, VAT number EE102258750 (“we”, “us”).
For anything about your data, write to [email protected]. We are not required to appoint a data protection officer; this address reaches the people responsible for privacy at COUBUS OÜ.
2. This website (notitask.app)
Server logs
When you open a page, our web server in Riga, Latvia (EU) records technical data that every browser sends: IP address, date and time, the page requested, the referring page, browser and operating system. We use it only to deliver the site, keep it secure and fix errors. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Logs are archived monthly and deleted after no more than two months.
No cookies, analytics or third-party content
The site sets no cookies and uses no analytics, advertising or social media tools (see the Cookie Policy). Fonts and scripts are served from notitask.app itself, so opening the site does not send your IP address to anyone else. When you close the privacy notice, your browser stores that choice locally (the key nt-privacy-notice); it never leaves your device and you can delete it by clearing site data.
Links to app stores
The store buttons go through a short link on notitask.app (for example /get/android?from=hero) and then to Google Play or the App Store. For each click we store only the date, which button was used and whether it came from a phone or a computer. We don't store your IP address or browser details for this, and no cookie is set. The link adds campaign tags so that Google Play can report installs per button to us as totals. After the redirect, Apple's or Google's privacy policy applies.
If you write to us, we use your address and message to answer you and keep the conversation for up to two years, unless the law requires longer. Legal basis: steps at your request and our legitimate interest in answering (Art. 6(1)(b) and (f) GDPR).
3. The Notitask app
Notitask works without an account. Everything you create stays on your device unless you turn on one of the optional features below, or your phone's own system backup is on.
| Feature | What is processed | Where it goes |
|---|---|---|
| Tasks, notes, tags, subtasks, attachments, settings | Everything you create | Your device. We have no access. |
| System backup of your phone (set in your phone, not in Notitask) | Tasks, notes and settings; on iPhone also attachments | If iCloud Backup is on, iPhone includes app data in it. On Android, Google's automatic backup saves tasks and settings (not attachments) to your Google account, end-to-end encrypted with your screen lock. Apple and Google run these backups; we can't read them. |
| Reminders and evening digest | Task titles and times | Local notifications, created on your device |
| Voice input (optional) | Your speech while you hold the microphone | Your phone's speech service. On iPhone it runs on the device when your iPhone supports it, otherwise Apple processes the audio. On Android, Google's speech service, offline when a language pack is installed. The text is then read by Notitask on your device. We never receive audio. |
| Location on a task or note (optional) | One position fix when you tap Location | Saved with the item on your device and in your backups. On iPhone, the coordinates are sent to Apple to show the city name. |
| Backup (optional) | Your library and attachments | Your own iCloud Drive (iPhone) or a private app folder in your Google Drive (Android, after Google Sign-In) |
| Calendar sync (optional) | Dated tasks; events from calendars you choose to show | A “Notitask” calendar in Apple Calendar (iPhone) or your Google Calendar (Android). Events from your other calendars are read only to display them in the app. |
| AI Enhance, Smart Reschedule (optional) | The text you send to AI: a title and description, or today's timed tasks; your language and current date | Our relay on Cloudflare, which forwards it to the Google Gemini API and returns the answer. The relay keeps no copy. On iPhone, a dictated phrase whose date or repeat Notitask can't read on the device may also be sent this way when AI is turned on. |
| App lock (optional) | Face ID, fingerprint or passcode check | Done by the operating system. Notitask never sees biometric data. |
| Crash reports (Android) | Device model, OS version, app version, technical crash details. No task content. | Google Firebase Crashlytics |
| Usage statistics (Android, only with consent) | Screens opened and app events, linked to a random app instance ID | Google Analytics for Firebase |
Each permission (microphone, location, photos, calendar, notifications) is asked for only when you first use the feature, and you can revoke it at any time in your phone's settings.
The Google Sign-In on Android requests access only to the app's own Google Drive folder and to Google Calendar. Notitask's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
4. Ads and consent
The free version shows banner ads from Google AdMob. Paid plans show no ads, and the ad SDK is not started for them.
- EU, EEA, UK and Switzerland: before any ad is requested, Notitask shows Google's consent form (a certified consent management platform). You can accept, refuse, or choose purposes. Without consent, only limited ads that don't use cookies or identifiers for personalisation are shown, or none.
- Change your choice at any time in Notitask: Privacy settings, under Settings on iPhone and under About on Android.
- iPhone: Apple's App Tracking Transparency prompt decides whether the advertising identifier (IDFA) may be used. If you decline, it is not.
- Android: you can reset or delete your advertising ID in your phone's Google settings.
When ads are shown, Google may process your IP address, device information, the advertising ID (if allowed) and ad interactions. Google acts as an independent controller for this; see how Google uses information from apps that use its services.
On Android, usage statistics (Google Analytics for Firebase) start only after you consent through the same form.
5. Purchases
Subscriptions and the lifetime purchase are handled by Apple (App Store) or Google (Google Play). We never see your name, card or billing address. The app only checks with the store whether a purchase is active.
6. Legal bases
| Processing | Legal basis (GDPR) |
|---|---|
| Running the app and its features you choose to use (backup, calendar, voice, location, AI) | Performance of our contract with you, Art. 6(1)(b) |
| Purchases | Contract, Art. 6(1)(b), and legal obligations for accounting, Art. 6(1)(c) |
| Personalised ads, storing or reading identifiers for ads, usage statistics | Your consent, Art. 6(1)(a), and § 1023 Estonian Electronic Communications Act / Art. 5(3) ePrivacy Directive |
| Limited ads without personalisation, fraud prevention | Legitimate interest in funding the free version, Art. 6(1)(f), where no consent is required |
| Crash reports, website logs, answering email | Legitimate interest in a stable, secure product and in answering you, Art. 6(1)(f) |
You can withdraw consent at any time without affecting processing that happened before.
7. Service providers
- Cloudflare, Inc.: hosts the AI relay. Processor under a data processing agreement.
- Google Ireland Ltd. / Google LLC: Gemini API (AI), AdMob (ads), Firebase Crashlytics and Analytics (Android), Google Drive and Google Calendar (your own account), Google Play.
- Apple Distribution International Ltd.: speech recognition, place names, iCloud Drive, Apple Calendar and App Store, under your agreement with Apple.
- RETN Baltic, SIA (Riga, Latvia): data centre for this website.
8. Transfers outside the EU
Google and Cloudflare may process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework, and transfers are also covered by the European Commission's Standard Contractual Clauses.
9. Retention
- On your device: until you delete it (Menu → Delete all entries) or remove the app. Copies in your phone's system backup follow the backup settings of your Apple or Google account.
- Backups and calendar events: in your own iCloud or Google account until you delete them there.
- AI requests: not stored by our relay. Google processes them under its Gemini API terms.
- Crash reports: deleted after 90 days. Usage statistics: 14 months.
- Website logs: up to two months. Emails: up to two years.
10. Your rights
Under the GDPR you can ask for access to your data, correction, deletion, restriction, data portability, and object to processing based on legitimate interest. Because we hold almost nothing about you, most requests are answered by the controls in the app: export (Settings → Export), delete (Menu → Delete all entries), and consent (Privacy settings).
To make a request, write to [email protected]. We answer within one month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the authority in your country.
Step-by-step deletion instructions are on the support page.
11. Children
Notitask is not directed at children under 13. We don't knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.
12. Security
Data in the app is protected by your device's encryption and app sandbox. Everything sent over the network uses TLS. App lock adds a biometric or passcode check before the app opens.
13. Changes
We update this policy when features or providers change. The date at the top shows the current version, and important changes are mentioned in the app's release notes.
14. Contact
COUBUS OÜ, Vesivärava tn 50-301, 10152 Tallinn, Estonia
Email: [email protected]