Privacy Policy

Tasklore for iOS · published by IT Duck s. r. o.

Last updated: 27 September 2026

Who is responsible for your data

Tasklore is published by IT Duck s.r.o., which is the data controller for the limited processing described below.

Summary

Everything you enter into Tasklore stays on your device. There is no account, no sync, and no analytics.

There are two exceptions, and each one only happens when you start it:

  1. AI suggestions. When you ask Tasklore to work out what a task is worth or to suggest steps for it, that one task is sent to an AI service. You are asked before this ever happens, you can decline, and you can change your mind later.
  2. Learning links. When you tap How to or Learn on a step, a search for that step opens on YouTube or Udemy.

The rest of this policy explains both in detail.

What the app stores on your device

Held in the app's private storage, not uploaded anywhere:

AI suggestions

Tasklore can estimate how demanding a task is and award experience points accordingly, and it can suggest the steps to break a task into. Both need an AI model, which does not run on your phone.

You are asked first

The first time you ask for a classification, Tasklore explains what will be sent and asks permission. Nothing is sent unless you agree. If you decline:

If you later withdraw permission, Tasklore stops sending anything from that moment. Classifications already made stay on your device as ordinary task data.

What is sent

Only the task or subtask you are asking about:

What is never sent

Who receives it

  1. Cloudflare, Inc. operates the endpoint the app talks to. It relays the request and holds the API key so the key does not have to ship inside the app. It does not store your task text.
  2. Google LLC performs the classification using the Gemini API, and returns a difficulty rating, an optional list of steps, and a few search words for each step. The search words are stored on your device and used only for the learning links below.

Tasklore uses the paid tier of the Gemini API. On that tier Google does not use submitted content to train or improve its models. Google's handling is governed by their own terms, currently at https://ai.google.dev/gemini-api/terms.

Because the classification is computed on request and nothing is stored against you, there is no profile of your tasks anywhere. We cannot look up what you have written, because we do not keep it.

Your IP address

The endpoint sees your IP address, as any internet service does. It is used only to apply a per-hour request limit so one source cannot exhaust the service, and is held for that purpose for up to two hours before expiring automatically. It is not combined with your task text and is not used to identify you.

The endpoint does not retain logs of what you sent. Cloudflare may record standard network-level information about the connection in the course of operating its service, under its own privacy terms.

Legal basis, and how to withdraw

The legal basis is your consent, under Article 6(1)(a) GDPR. Consent is optional, and refusing it does not degrade the parts of the app that do not depend on it.

You can withdraw consent at any time in Profile → AI classification. Withdrawing is as easy as giving it, and takes effect immediately.

If we ever change what is sent or who receives it, this policy is updated and you are asked again — an agreement to the old wording is not carried over.

Transfers outside the EEA

Cloudflare and Google are US companies and the request may be processed outside the European Economic Area. Both operate under the EU–US Data Privacy Framework and standard contractual clauses.

Learning links (How to and Learn)

When you open a task's subtasks you can tap How to or Learn. Each subtask then shows a link, and tapping it opens a search in your browser, or in the YouTube app if you have it installed:

The search contains a few words describing that one step, and nothing else: not your name, not your other tasks, and no identifier from Tasklore. Nothing is sent until you tap a link. The search is an ordinary visit to that website, so what happens next is governed by YouTube's or Udemy's own privacy policy, not this one.

This does not depend on the AI question above. If you declined AI suggestions, the search words are taken from the step's title on your device instead.

These links are not offered for household, personal or health tasks.

Photos

Attaching a photo is always something you start. When you do:

Photos are never sent anywhere, including for classification.

Sharing

You can turn a task into an image and share it. The app draws that image on your device and passes it to the iOS share sheet, where you choose what happens next. No server is involved and we have no visibility into where you send it. Nothing is shared unless you tap Share, and you see the finished image before that happens.

Backups

Your data is included in your device's normal backups. If you back up your iPhone to iCloud or to a computer, your Tasklore data is part of that backup, handled under Apple's privacy policy rather than by this app.

Deleting your data

Both options are entirely under your control:

  1. In the app: Profile → Reset all progress. This permanently erases all tasks, skills, experience points, attached photos and your classification preference on the device. You are asked to confirm twice, because none of it can be recovered.
  2. Delete the app. Removing Tasklore deletes its storage along with it.

Because task content is not retained after a classification is returned, there is no stored copy elsewhere to request the deletion of.

Your rights

Under GDPR you have the right to access, correct, erase, restrict and port your personal data, and to object to its processing.

In practice, your Tasklore data lives on your device and is under your direct control — you can view, edit and delete all of it in the app without asking us, which is faster than any request we could answer. For anything else, or if you believe your data has been mishandled, write to info@itduck.sk.

You also have the right to complain to a supervisory authority. In Slovakia this is the Office for Personal Data Protection (Úrad na ochranu osobných údajov Slovenskej republiky), https://dataprotection.gov.sk.

Children's privacy

Tasklore does not knowingly collect personal data from anyone, including children. If AI suggestions are declined, nothing leaves the device unless a How to or Learn link is tapped.

Changes to this policy

If a future version changes what is transmitted, or who receives it, this policy is updated before that version ships, the in-app disclosure is updated to match, and you are asked for your agreement again. The App Store privacy disclosures are updated at the same time.

Contact

Questions about this policy: info@itduck.sk