Privacy policy

Who is responsible

Taskić is run by Miloš Moravac PR MoravacNET, a sole proprietor registered in Serbia, Vojvode Stepe 275, 11010 Belgrade-Voždovac (full business name Miloš Moravac PR Veb portali MoravacNET Beograd, registration number 64846353, tax ID (PIB) 110402054). He is the controller of your personal data under the EU General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection. For anything about your data, write to support@taskic.app.

What we keep about adults

• Your account: your email address, the name you give, how you sign in (email and password, Apple or Google), and when you created the account and last signed in. If you use Sign in with Apple and hide your email, we get Apple’s relay address instead. Passwords are handled by Firebase Authentication and we never see them.
• Your family’s content: the family’s name, members’ nicknames and avatars, tasks, the points history, rewards and requests, goals, duels, secret deeds, summaries and recaps, and the photos you add.
• A profile photo, only if you set one.
• Your phone, for notifications: a push token with the phone’s platform and language, so notifications reach the right phone in the right language.
• Your subscription, if you buy Taskić Pro: what the App Store or Google Play confirms about it and which families it covers, as described under Subscription.

What we keep about children

• A nickname, an avatar and a points multiplier, plus the date a parent gave consent and which parent it was.
• A profile photo only if a parent sets one. Only a parent can set or change it.
• What happens in the family: the child’s tasks, points and requests, and the push token of their phone if notifications are on.

We don’t collect a child’s email, surname, birth date, location or contacts. Children don’t create accounts themselves: they sign in with a one-time code from a parent.

Photos

• Proof photos, for tasks that ask for one, are deleted 7 days after the task is approved. A photo no task points to any more, for example after a task is sent back, is deleted 48 hours after it was uploaded.
• Before and after photos are deleted 30 days after they’re posted, and unfinished drafts after 2 days.
• Profile photos stay until you remove them or the family is deleted.

Photos are visible only to the members of your family.

Crash reports

When the app crashes or hits an error it can’t handle, Firebase Crashlytics sends us a technical report: what went wrong in the code, the versions of the app and of iOS or Android, the device model and a random identifier of the installation. Reports carry no names, no email and no account or family identifiers. Crashlytics keeps them for 90 days. For adults who share usage statistics, a report also includes the last few usage events before the crash.

Usage statistics

Parents and other adults can choose to share anonymous usage statistics, so we can see which parts of Taskić are used and improve them. Taskić asks once after you sign in, with two equal buttons, and statistics stay off unless you say yes. They work only while you’re signed in, and you can turn them on or off at any time in Settings, under About. Turning them off also resets the statistics identifier on your phone.

• What is sent: which screens are opened and which features are used, for example that a task was created with a weekly repeat or that a reward was requested, as fixed categories and ranges; the app version, the iOS or Android version, the device model and language; and the country and region, which Google derives from the IP address without storing the address.
• What is never sent: names, nicknames, email addresses, the titles of tasks or rewards, photos, family or account identifiers, or the advertising identifier: Taskić doesn’t ask for it on iPhone, and on Android the app is built without access to it. Nothing is sent from children’s accounts or from child mode.
• The identifier: a random identifier of the installation, created by Google Analytics and not linked to your account.
• What it’s for: to learn which features are used and improve the app. Not for ads and not for profiling. Taskić doesn’t track you in the sense of Apple’s App Tracking Transparency, and Google signals, advertising links and data sharing with Google are turned off.
• Who processes it: Google LLC, through Google Analytics for Firebase, under its data processing terms. The data may be processed in the United States, under the EU-US Data Privacy Framework and the Standard Contractual Clauses. How Google uses this data is described at policies.google.com/technologies/partner-sites.
• How long: the event data is deleted after 14 months.

Subscription (Taskić Pro)

A parent buys Taskić Pro with their own account in the store of their phone: an Apple Account through the App Store on iPhone, or a Google Account through Google Play on Android. Apple or Google takes the payment and keeps the payment details under its own privacy policy, and your card never reaches Taskić. We use no intermediary service for subscriptions.

From the App Store, Taskić receives only a confirmation signed by Apple: which subscription it is (monthly or yearly), its period and status, Apple’s number for the subscription and a random token that links the purchase to your account.

From Google Play, the app sends our server the purchase token Google gave for the purchase, and our server checks it with Google through the Google Play Developer API. Google Play then tells our server about renewals, cancellations, payment problems, expiry and refunds through its Real-time developer notifications. Of what Google reports, we keep only which subscription it is (monthly or yearly), its period and status, the purchase token and the random token that links the purchase to your account. Your card details never reach us.

We keep this with your account, together with the families the subscription covers (at most two), so that everyone in the family has Pro on every phone, whichever store it was bought in. The other parents in the family can see that you pay for it.

What we don’t do

• No ads and no advertising tools. The only analytics tool is Google Analytics for Firebase, for adults who agree, as described above.
• We don’t sell or rent your data, and we don’t use it for profiling.
• No contact between families, no public profiles and no chat. Everything stays within your family.
• This website sets no cookies, loads nothing from other servers and doesn’t track visits.

Where your data is stored

Taskić runs on Google Firebase. Your family’s data, its photos and the functions that work with them are in Google Cloud’s europe-west1 region in Belgium. Google processes the data for us, under its data processing terms. Sign-in, push notifications, crash reports and usage statistics use Firebase services that work worldwide, so this data may also be processed outside the EU, under the European Commission’s Standard Contractual Clauses, and usage statistics also under the EU-US Data Privacy Framework.

If you sign in with Apple or Google, they confirm who you are under their own privacy policies. Notifications reach iPhones through Apple’s push service and Android phones through Firebase Cloud Messaging. To check that requests come from the real app, Taskić uses Firebase App Check, with Apple’s App Attest on iPhone and Google Play Integrity on Android; from these checks Taskić learns only that a request came from the real app, not who you are. If you buy Taskić Pro, Apple or Google handles the purchase and the payment under its own privacy policy.

Data travels encrypted, and access rules make sure that only the members of a family can read its data.

Why we use it

• Account and family data, to provide the app you asked for (performance of a contract).
• Subscription data, to provide the Taskić Pro you bought (performance of a contract).
• Usage statistics, on your consent, which you can withdraw in Settings at any time.
• Children’s profiles, on the consent of the parent who creates the profile. The parent can withdraw it at any time by deleting the child’s profile or the family in the app, or by asking us to delete the child’s data.
• Crash reports and security checks, for our legitimate interest in an app that works and is safe.

How long we keep it

• Closed tasks, approved or missed, are deleted 90 days after their deadline. Their points stay in the points history and their numbers in the weekly summaries.
• The points history, weekly summaries and family recaps are kept as long as the family exists.
• Invite codes stop working after 24 hours, and children’s sign-in codes after 10 minutes.
• A member who is removed loses access, and their entries stay in the family’s history.
• Push tokens are removed when you sign out or delete your account.
• Usage statistics are deleted 14 months after they’re collected. Turning statistics off stops collection and resets the identifier on your phone.
• Subscription records are kept while your account exists, so a renewed or restored subscription finds its family, and are deleted with the account. The sales reports Apple and Google send us, which we keep as tax law requires, don’t name the buyers.
• An account you delete, and a child’s profile a parent deletes, are gone at once, as described on Delete your account and data. A family that goes on keeps the nickname and points entries in its points history and weekly summaries.
• When a parent deletes the family, everything goes: tasks, points, rewards, summaries, photos, invite codes and the children’s accounts. Adults keep their own accounts and their other families.

Your rights

You can ask to see the data we keep about you, to correct it or delete it, and to get a copy of your family’s data. You can also object to some processing or ask us to limit it. Two of these you can do yourself, in the app:

• A copy of your family’s data: a parent taps Export family data in Settings, under Family. Taskić makes a JSON file with the family’s tasks, points history, rewards and requests, goals, weekly summaries and recaps, without photos, and opens the phone’s share sheet so you can save or send it.
• Deleting: you delete your own account, and a parent deletes a child’s profile or the whole family, in Settings. What each one deletes and what stays is on Delete your account and data.

For anything else, write to support@taskic.app from your account’s email address, and we reply within 30 days.

If you think we handle your data wrongly, you can complain to the Commissioner for Information of Public Importance and Personal Data Protection of Serbia (poverenik.rs) or to the data protection authority where you live.

Children

Taskić is a family app for parents and their children. A parent creates each child’s profile, confirms consent and stays in control: the parent sets the nickname, avatar, multiplier and photo, sees the child’s activity, can remove the child from the family, can delete the child’s profile and data, and can delete the family with all of the child’s data. Children can’t invite anyone or contact anyone outside the family. Children’s accounts and child mode never send usage statistics, and children are never shown prices or purchases.

To delete one child’s profile, a parent taps the child in Settings, then Delete profile and data. The child’s sign-in, open tasks, requests, photos and push tokens are deleted at once. The family’s points history and weekly summaries keep the child’s nickname and points entries, because they are the family’s history, not the child’s profile.

If you believe a child is using Taskić without a parent’s consent, write to support@taskic.app and we will delete the profile.

Changes

When this policy changes, we update it here and change the date at the top. If a change affects how we use your data, we tell parents in the app before it applies.

Contact

Miloš Moravac PR MoravacNET, Vojvode Stepe 275, 11010 Belgrade-Voždovac, Serbia. Registration number 64846353, tax ID (PIB) 110402054. support@taskic.app