Privacy Policy

1. Who we are

TaskBullet ("TaskBullet", "we", "us", "our") is a digital Bullet Journal application operated by Catarina International LLC. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and the choices you have. It applies to the TaskBullet mobile, desktop, and web applications and to the taskbullet.app website.

For any privacy question or request, contact us at privacy@taskbullet.app.

2. Data we collect

Account data

• Your email address and, if you sign in with Apple or Google, the display name and identifier returned by that provider.
• An internal user identifier, account creation date, trial end date, and subscription status.

Journal content

• The tasks, events, and notes you write, along with their dates, signifiers, and completion state.
• Your reminder preferences and review settings.

Technical data

• Minimal diagnostic information needed to keep the service running and to fix crashes, such as app version, platform, and error traces.
• We do not use advertising identifiers, tracking pixels, cross-site trackers, or third-party analytics profiling.

Payment data

Subscriptions are processed by Stripe. Card numbers and payment credentials are collected and stored directly by Stripe and never reach our servers. We only retain the subscription state (active, trialing, cancelled, expired) and the identifiers required to reconcile your plan.

3. What we never do

These commitments are absolute and are not subject to a paid "opt out":

• We do not sell or rent your personal data. Not to advertisers, data brokers, insurers, employers, or anyone else.
• We do not share your journal content with third parties for their own purposes.
• We do not use your content to train, fine-tune, evaluate, or improve any artificial intelligence or machine learning model, whether operated by us or by a third party. Your entries are not included in any training corpus, embedding index, or evaluation set.
• We do not profile you, build advertising audiences, or run behavioural targeting.
• We do not read your entries except in the narrow case where you explicitly send us content as part of a support request, or where we are legally compelled to do so.

4. Why we process your data

• To provide the service: storing your entries and synchronising them across your devices.
• To schedule reminders: your morning and evening review notifications are generated locally on your device from settings you control.
• To manage access: determining whether your trial or subscription is active.
• To keep the service secure and reliable: preventing abuse, diagnosing failures, and maintaining backups.
• To communicate with you: transactional messages about your account, billing, or material changes to the service.

Depending on where you live, the legal bases for this processing are the performance of our contract with you, our legitimate interest in operating a secure service, and your consent where required (for example, for optional notifications).

5. Where your data is stored

TaskBullet runs on Google Cloud infrastructure through Firebase (Authentication, Cloud Firestore, and Cloud Functions). Data is encrypted in transit using TLS and at rest by the storage provider. Each account's data lives in an isolated per-user collection, and our security rules prevent any account from reading or writing another account's entries.

Our sub-processors are limited to: Google (Firebase hosting, database, authentication), Stripe (payment processing), and Apple and Google (sign-in providers and app distribution). We do not add sub-processors that would receive your journal content.

6. International transfers

Catarina International LLC and its infrastructure providers may process data in countries other than your own. Where personal data is transferred out of the European Economic Area, the United Kingdom, or Brazil, we rely on the standard contractual clauses and equivalent safeguards offered by our providers.

7. Retention and deletion

We keep your data only for as long as your account exists.

• Clear your journal at any time. Settings → Account & Data → Clear Journal Data permanently removes your entries while keeping your account.
• Full account deletion on request. Email privacy@taskbullet.app from your account address and ask us to delete your account. We erase your profile, entries, reminders, and settings from our production systems within 30 days, and from encrypted backups within a further 60 days as those backups rotate out.
• No silent retention. After deletion we keep only what the law requires us to keep, such as invoice records needed for tax and accounting purposes. Those records contain billing metadata, never journal content.
• Deletion is irreversible. We cannot restore an erased account.

8. Your rights

Regardless of where you live, we extend the following rights to every TaskBullet user. You may ask us to:

• confirm what personal data we hold about you and obtain a copy of it;
• export your journal in a portable, machine-readable format;
• correct inaccurate account information;
• delete your account and all associated data;
• restrict or object to processing;
• withdraw consent for notifications at any time.

Write to privacy@taskbullet.app. We answer within 30 days and never charge for these requests. If you are in the EEA, the UK, or Brazil, you also have the right to lodge a complaint with your local data protection authority. We do not discriminate against users who exercise their privacy rights.

9. Children

TaskBullet is not directed at children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

10. Security incidents

No system is perfectly secure. If a breach affects your personal data, we will notify affected users and the relevant supervisory authorities without undue delay, and describe what happened, what data was involved, and what we are doing about it.

11. Changes to this policy

We may update this policy as the product evolves. Material changes will be announced in the app or by email before they take effect, and the "last updated" date above will change. We will never make a retroactive change that weakens the commitments in section 3 for data collected under an earlier version of this policy.

12. Contact

Catarina International LLC
Privacy requests: privacy@taskbullet.app
General support: support@taskbullet.app