DuoTask Privacy Policy
Effective: November 2026
DuoTask is a shared to-do app made by Namaste Needham Consulting ("we") in Needham, Massachusetts. This policy covers the DuoTask web app at duotask.namasteneedham.com and the DuoTask iPhone and Android apps. Our website's own policy is at namasteneedham.com/privacy.
What we collect
- Account details: your email address, the display name you choose, and, if you sign in with Google, the name, email and profile picture Google shares with us.
- What you put in the app: task titles, notes, due dates, tags, priority, recurrence, and who created, claimed or completed each task. Nudges you send your partner.
- Pairing: your pairing code and who you are paired with.
- Tasks sent by link: the name you type for the person you're sending to, whether they opened or accepted the link, and when.
- Notification settings: a push-notification token for your device, your daily-email choice, the time you want it and your time zone.
- Usage events: records that an action happened (for example "signed up", "paired", "task completed", "Premium started") with your account ID and the time. These never include task text.
- Purchases: if you buy Premium, whether it is active and when it ends. We never see or store your card number.
We do not use advertising, ad trackers, or third-party analytics in the app, and we do not sell your data.
Why we use it
- To run the app: sign you in, sync tasks between you and your partner, and send the reminders you ask for.
- To send the optional daily summary email, which you can turn off in Settings at any time.
- To understand, in aggregate, which features people use, so we can improve DuoTask.
- To provide Premium if you buy it.
Who can see your data
- Your partner sees tasks on your shared list and tasks assigned to them. Personal tasks are visible only to you.
- Anyone with a task link you send can see that task's title and the name you entered, until the link is used, revoked or expires.
- Service providers that run parts of DuoTask for us, under their own privacy terms: Supabase (database, sign-in and hosting of your data), Vercel (hosts the web app), Google (Google Sign-In and Firebase Cloud Messaging for push notifications), Resend (email delivery), and Stripe (payment processing, for web purchases only). Apple and Google process in-app purchases if and when the phone apps offer them.
We share data with others only if the law requires it.
How long we keep it
We keep your data while your account exists. When you delete your account, we delete your account, tasks, pairing, notification tokens and usage events within 30 days. Copies in our database provider's backups are removed when those backups expire. Completed tasks you shared remain visible to your partner until you delete your account.
Your choices and rights
- Edit your name and tasks, or delete tasks, in the app.
- Turn off push notifications in your phone settings and the daily email in DuoTask Settings.
- Unpair from your partner in Settings.
- Delete your account: see how to delete your DuoTask account.
- Ask for a copy of your data, or ask us to correct it, by emailing us from your account's email address.
Depending on where you live (for example California or the EU), you may have further rights, including to object to or restrict processing and to complain to a regulator. Email us and we will help.
Children
DuoTask is not intended for children under 13, and we do not knowingly collect their data.
Security
All traffic is encrypted with HTTPS. Database rules let each person read only their own tasks and the tasks shared with them.
Changes
If we change this policy, we will update the date above and tell you in the app for significant changes.
Contact
Namaste Needham Consulting, Needham, MA · info@namasteneedham.com