Privacy Policy

Taskgrid is a personal, non-commercial web app that shows your Google Tasks as a kanban board and lets you block time for tasks in Google Calendar. This page explains what data it accesses and what it does with it.

Data Taskgrid accesses

When you sign in with Google and grant permission, Taskgrid accesses:

• Basic profile (name, email address, profile picture): to show who is signed in and, optionally, to restrict sign-in to an allowlist.
• Google Tasks (tasks): to read, create, edit, move, complete and delete your task lists and tasks.
• Google Calendar (calendar.readonly, calendar.events): to show when you are busy while scheduling a task, and to create, update or delete the calendar events that Taskgrid creates for your tasks.
• Google Drive app data (drive.appdata): to save your board layout and preferences in a hidden, app-specific folder in your own Drive. Taskgrid cannot see any other file in your Drive.

How the data is used

• Data is used only to provide Taskgrid's features to you, and only when you use the app.
• Taskgrid has no database. Your tasks and events stay in your Google account; your boards are stored in your own Drive app-data folder.
• Your Google access and refresh tokens are kept only in an encrypted, HTTP-only session cookie in your browser. They are never stored on a server or exposed to page scripts.
• Your browser keeps a local cache of your lists so the app opens quickly. Signing out clears it.
• Taskgrid does not sell, share, or transfer your data to anyone, does not use it for advertising, and does not use it to train AI or machine learning models.
• No analytics or tracking scripts are used.

Google API Services User Data Policy

Taskgrid's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Hosting

Taskgrid runs on Vercel. Requests to Google pass through Taskgrid's server functions to attach your token; they are not logged or stored. Vercel may keep standard, short-lived request logs (such as IP address and URL).

Deleting your data and revoking access

• Revoke Taskgrid's access at any time at myaccount.google.com/permissions. This also removes its hidden Drive app-data file.
• Signing out deletes the session cookie and the local cache.
• Tasks and calendar events live in your Google account; delete them there if you want them gone.

Contact

Questions about this policy: the support email shown on the Google sign-in screen.