Privacy Policy

Last updated: October 22, 2026

At Tasks4Us, we are committed to protecting your privacy. This policy describes what personal data we process, why, who we share it with, and how you can exercise your rights, in accordance with the General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 (LOPDGDD) and, where applicable, the California Consumer Privacy Act (CCPA).

This policy applies to our website (tasks4us.com), the Tasks4Us web app (https://app.tasks4us.com), and all interactions arising from the Software License Agreement that governs the use of this Intellectual Work.

1. Data Controller

The controller of your personal data is:

• Name: Ramón Fajardo / Tasks4Us
• Tax ID (NIF): 78719643G
• Address: Apartado Postal n.º 3, 28100 Alcobendas (Madrid), Spain
• Contact email: [email protected]

2. Data We Collect

We process different data depending on how you interact with Tasks4Us:

2.1 Website

The tasks4us.com website is informational: it has no sign-up forms and sets no cookies. Like any web server, our servers may log technical data for each connection (IP address, date and time, requested page, and browser type) for security and operational purposes.

2.2 Account Data

When you create an account in the app, we collect:

• Sign-in data: The information provided by the provider you sign in with (Google, Apple, or Microsoft): your email address, your name and, if the provider supplies it, your profile picture. We do not use our own passwords.
• Preferences: Language, visual theme, and other app settings.
• Plan data: Your plan (Free, Plus, or Pro), your subscription status, and any promotional gifts linked to your account.
• Access data: The date of your last access and your open sessions.

2.3 Content and Group Data

• Groups: The groups you create or join and your role in each (owner or guest).
• Content: The tasks, lists, descriptions, dates, shared expenses, and photographs you post.
• Group activity: Who creates, completes, or changes each item, so members can follow what happens in the group.

Photographs you upload are compressed and stored on our own servers.

2.4 Data of Invited People

If you invite someone by entering their email address, we store that email and the name you provide, and we create a pending user record so that person can join the group. If you receive an invitation and do not want us to keep your data, you can ask us to delete it at [email protected].

If you share an invitation link through WhatsApp or another app, you send it yourself from that app: Tasks4Us does not access your contacts.

2.5 Payment Data

Payments are handled by Paddle.com Market Limited ("Paddle"), which acts as Merchant of Record and authorized reseller of Tasks4Us licenses. Paddle collects your billing and payment details directly. We only receive the data needed to manage your license: your Paddle customer and subscription identifiers, the subscribed plan, the billing period, the subscription status, and its dates.

Important: We do NOT receive or store card numbers, CVV codes, or other full payment method details.

2.6 Usage and Technical Data

• First-party analytics: We log app usage events on our own servers (for example, sign-ups, group creation, or accepted invitations) to understand how the service is used and improve it. We do not use Google Analytics or other third-party analytics tools.
• Sign-up source: If you arrive through an invitation link or a link with campaign parameters, we store the landing page and, where applicable, who invited you.
• Technical data: IP address, browser and device type, and error logs, for security and troubleshooting.

3. Purpose of Processing

We use your data to:

• Provide the service: Create your account, manage your groups, show content to the members of each group, and handle invitations.
• Manage your license: Apply your plan's limits and features and process subscriptions, renewals, and plan changes through Paddle.
• Improve the service: Analyze in aggregate how the app is used.
• Assist you: Respond to your questions and support requests.
• Security: Detect and prevent unauthorized access, fraud, and abuse.
• Comply with legal obligations: Meet legal, tax, and accounting requirements.

We do not currently send marketing communications or newsletters. If we do so in the future, we will ask for your consent first.

4. Legal Basis

We process your data on the following bases:

• Performance of contract (Art. 6.1.b GDPR): Processing necessary to perform the Software License Agreement, including your account, your groups, your content, license validation, and subscription management.
• Legitimate interest (Art. 6.1.f GDPR): To handle invitations other users send you, improve the service through first-party analytics, ensure security, and prevent fraud.
• Legal obligation (Art. 6.1.c GDPR): To comply with applicable laws and regulations.
• Consent (Art. 6.1.a GDPR): Only when we expressly ask for it for a specific purpose. You can withdraw it at any time.

When you post other people's data or photographs in a group, you are responsible for having their consent or another legal basis that allows it.

5. Data Sharing and Third Parties

5.1 Other Members of Your Groups

Group members see your name, your profile picture (if you use one), and the content you post in that group. A group owner can export the group's data, including its members' names and email addresses.

5.2 Payment Processor and Merchant of Record

Paddle processes your payment data under its Privacy Policy. Paddle is PCI-DSS compliant and is the seller of record for all transactions, so it is responsible for payment collection, invoicing, and taxes.

5.3 Sign-in Providers

If you sign in with Google, Apple, or Microsoft, that provider knows you accessed Tasks4Us and only shares the information you authorize. Your profile picture is loaded directly from the provider's servers, which may receive your IP address.

5.4 Hosting

The app, its database, and photographs are hosted on servers we administer ourselves, rented from Contabo GmbH (Germany), which acts as a data processor. We do not use third-party cloud storage services for your content.

We do NOT sell your personal data to third parties.

6. Data Retention

• Account data and content: While your account is active. If you request deletion, we will delete or anonymize your personal data within 30 days, except data we must keep by law.
• Archived or deleted groups: Permanently erased, together with their content, at the end of the retention period (currently 30 days).
• Pending invitations: While the invitation remains pending or until the invited person or the inviter asks us to delete it.
• License and payment data: For the periods required by tax and commercial law.
• Sessions: Expire after 30 days.
• Technical logs: Up to 12 months, for security and troubleshooting.

7. Your Rights

Under the GDPR and the CCPA, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data. You can change your name from your profile in the app.
• Erasure: Request deletion of your account and data ("right to be forgotten").
• Objection: Object to the processing of your data.
• Portability: Receive your data in a structured format.
• Restriction: Request restriction of processing.
• Non-discrimination (CCPA): You will not be discriminated against for exercising your rights.

To exercise these rights, including deleting your account, email us at [email protected] from the address linked to your account. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Specific Rights for California Residents (CCPA)

If you are a California resident, you have additional rights:

• Right to know: What personal information we collect and how we use it.
• Right to delete: Request deletion of your personal information.
• Right to opt-out: Opt out of the sale of your personal information (we do not sell data).

Statement: Tasks4Us does NOT sell the personal information of its users or of any other individual.

9. International Transfers

Some providers may process data outside the European Economic Area: Paddle (United Kingdom) and the sign-in providers Google, Apple, and Microsoft (United States). In those cases, appropriate safeguards apply, such as:

• European Commission adequacy decisions, such as the one for the United Kingdom or the EU-U.S. Data Privacy Framework.
• Standard contractual clauses approved by the European Commission.

10. Security

We apply technical and organizational measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS).
• Protected session cookies (HttpOnly) and sign-in without our own passwords, through OAuth providers.
• Time-limited invitation links, of which we only store an encrypted fingerprint (hash).
• Restricted access to personal data.

11. Minors

Tasks4Us is not directed at children under 16 and we do not knowingly collect their data. If we discover that a child under 16 has created an account, we will delete it.

If you include information about minors in a group (for example, your children's family tasks), you must be their parent or legal guardian, or have their authorization, and post only the information that is needed.

12. Changes to This Policy

We may update this policy from time to time. We will inform you of significant changes through a notice on our website or in the app.

13. Contact

If you have questions about this policy or the processing of your data, you can contact us at:

• Email: [email protected]