Privacy Policy

Last Updated: January 19, 2026

1. Introduction

ESP Task Manager ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our task management application.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you register and use our service:

Account Information: Email address, username, and password (encrypted)
Profile Information: Optional profile picture and display name
Authentication Data: OAuth tokens (if using Google or Apple Sign-In)

2.2 Task and Activity Data

Task Information: Task titles, descriptions, due dates, priorities, categories, and completion status
Location Data: If you enable geofenced tasks, we collect location data to trigger location-based reminders
Device Information: Device type, operating system, and app version for compatibility
Usage Data: Task creation, completion, and modification timestamps

2.3 Automatically Collected Information

Log Data: IP address, browser type, access times, and pages viewed
Device Identifiers: Unique device identifiers for push notifications

3. How We Use Your Information

We use the collected information for the following purposes:

To provide and maintain our task management service
To authenticate users and manage user accounts
To send task reminders and notifications (with your consent)
To enable location-based task reminders (if you opt-in)
To improve our service and develop new features
To respond to your support requests and inquiries
To detect, prevent, and address technical issues and security threats
To comply with legal obligations

4. Location Data

If you enable geofenced tasks, we collect and process your location data to provide location-based task reminders. You can control location permissions through your device settings. Location data is:

Only collected when you explicitly enable geofenced tasks
Used solely for triggering location-based task reminders
Not shared with third parties for advertising or marketing purposes
Stored securely on our servers with encryption

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With Your Consent: When you explicitly authorize us to share information
Service Providers: With trusted third-party service providers who assist in operating our service (e.g., cloud hosting, email delivery) under strict confidentiality agreements
Legal Requirements: When required by law, court order, or government regulation
Protection of Rights: To protect our rights, privacy, safety, or property, and that of our users
Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

6. Data Security

We implement appropriate technical and organizational security measures to protect your data:

Passwords are hashed using industry-standard encryption (bcrypt)
Data transmission is secured using HTTPS/TLS encryption
Access to personal data is restricted to authorized personnel only
Regular security audits and vulnerability assessments
Secure database storage with access controls and encryption

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time. Upon deletion:

Your account and personal information will be permanently deleted within 30 days
Backup copies may be retained for up to 90 days for disaster recovery purposes
Some information may be retained longer if required by law

8. Your Rights and Choices

You have the following rights regarding your personal data:

Access: Request access to your personal data we hold
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your account and personal data
Data Portability: Request a copy of your data in a machine-readable format
Opt-Out: Unsubscribe from promotional emails and push notifications
Location Services: Disable location tracking through device settings
Withdraw Consent: Withdraw consent for data processing at any time

9. Children's Privacy

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

10. Third-Party Services

Our application may integrate with third-party services:

Google Sign-In: For authentication (subject to Google's Privacy Policy)
Apple Sign-In: For authentication (subject to Apple's Privacy Policy)
Cloud Hosting: For data storage and service hosting
Email Services: For sending account-related emails

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our service, you consent to such transfers.

12. Push Notifications

With your consent, we may send you push notifications for task reminders and important updates. You can disable push notifications at any time through your device settings or within the app.

13. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain user sessions and improve user experience. You can control cookie preferences through your browser settings.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

Posting the new Privacy Policy on this page
Updating the "Last Updated" date
Sending an email notification for material changes
Displaying an in-app notification

Your continued use of the service after changes are posted constitutes acceptance of the updated Privacy Policy.

15. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for processing your personal data includes:

Consent: You have given explicit consent for specific processing activities
Contract: Processing is necessary to provide our services
Legal Obligation: Processing is required by law
Legitimate Interests: Processing is necessary for our legitimate business interests

16. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to request deletion of personal information
Right to non-discrimination for exercising CCPA rights

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@esptaskmanager.com
Support: support@esptaskmanager.com

We will respond to your inquiry within 30 days.