Data stored on your device
When you add a task, it’s written to a database on the device you’re using: IndexedDB in your browser on the web, and an on-device database on iPhone, iPad, Mac, and Android. That data is not uploaded to GSD unless you turn on optional sync. A shared link can also be requested from its website if you enable title fetching, as described below. If you never enable sync, your task database never reaches our server. Your device’s own backups, such as iCloud Backup or Time Machine, can include it.
On Android, GSD keeps your tasks out of Google’s cloud backup. If you move to a new phone with Android’s phone-to-phone transfer, your tasks and settings come with you, but your sign-in stays behind, so you sign in again on the new phone.
Optional sync
Sync is off until you turn it on, and it is never required to use GSD. It exists for one reason: to make the same tasks available across your signed-in devices.
To sync, you sign in with a provider you already trust: Google, GitHub, or Apple, on the web and in the iPhone, iPad, Mac, and Android apps. We use OAuth, so we never see or store your password. When you sign in, the provider gives us an account identifier and your email address; your name may also be shared, depending on the provider. If you use Sign in with Apple, you can choose to share a private relay address instead of your real email.
Once sync is on, your tasks, that account identity (your user ID and email), and a random ID for each device you sync from are stored on a server we operate, so your tasks can reappear on your other signed-in devices. We use this data only to provide sync. We do not sell it, share it for advertising, or use it for any other purpose.
Optional shared-link titles
In the iPhone, iPad, Mac, and Android apps, “Fetch titles for shared links” is off by default. If you enable it in Settings, GSD can request a link you share from its website to replace a URL-derived task title with the page title. The lookup can run without signing in or enabling sync, and the request may follow redirects.
The website receives the shared URL, including its path and query parameters, your IP address, and normal web-request information. URLs can themselves contain personal information. GSD does not send your GSD account token or the rest of your task database with this request. The website’s privacy policy applies to its handling of the request.
You can turn title fetching off in Settings. If a lookup fails, the task remains on your device with its existing title.
AI assistants you connect
The GSD MCP server lets an AI assistant, such as Claude, work with your synced tasks. It runs on your computer, needs sync, and signs in with a token you copy from the web app’s settings. The token stays in a config file on your computer and expires within 30 days. The server reads and changes your synced tasks on our server only when the assistant asks it to.
What you ask, and the tasks the server returns, go to the assistant you use, and that assistant’s privacy policy applies to them. Nothing happens until you install the server and paste in a token.
In the web app, GSD offers WebMCP, a single tool that an AI agent built into a supporting browser can use to add a task on that device. It cannot read your existing tasks. A task added this way syncs like any other if sync is on.
Feedback you send
Every version of GSD has a Feedback form, and nothing is sent until you press Send. The form shows you exactly what will go out: your message, a thumbs up or down, a category, any roadmap items you vote for, the app version, a random ID for that submission, and the time on your device when you sent it.
Feedback is anonymous. It carries no account, email address, device identifier, or task data, and the app sends it without your sign-in, even when sync is on. Please leave personal details out of your message. We use feedback only to decide what to fix and build next, and our server deletes each submission 180 days after it arrives.
What we never do
- No analytics or usage tracking.
- No advertising and no ad networks.
- No third-party tracking SDKs.
- No cookies on this website, and the apps use no tracking cookies.
- We never sell or rent your data.
Third parties
When you turn on sync, the sign-in provider you choose handles your sign-in under its own privacy policy:
If you turn on shared-link title fetching in the iPhone, iPad, Mac, or Android app, the websites requested for those links are also third parties, as described above. If you connect an AI assistant, its provider is a third party too. Each one’s handling of your data is governed by its own privacy policy.
The sync server itself is operated by GSD’s developer and is not a third-party data broker.
Keeping and deleting your data
- On your device: tasks stay until you delete them, clear your browser data, or remove the app.
- Synced data: kept on the sync server until you delete it. Deleting or archiving a synced task removes it from the server; archived tasks stay on the device that archived them. Delete account, in the app’s settings, removes your account and all of its synced tasks, and you can also ask us to do it (see Contact). Signing out leaves your synced tasks on the server, so they’re there when you sign back in.
- Feedback: deleted from our server automatically 180 days after it arrives. Because it isn’t linked to you, we can’t find one person’s submissions to delete them sooner.
- Take it with you: you can export all of your tasks to a JSON file at any time, and import them back later with merge or replace.
Your rights
Wherever you live, you can see the data you have synced (it is the same tasks you see in the app), export it, and delete it. If you are covered by laws such as the GDPR or CCPA/CPRA, your rights of access, correction, deletion, and portability apply to the limited data described above. Because GSD collects so little and never sells data, you can exercise most of these rights yourself, directly in the app.
Children
GSD Task Manager is not directed at children under 13, and we do not knowingly collect personal information from them.
Changes to this policy
If we change how GSD handles data, we will update this page and the “last updated” date above. Meaningful changes will appear here before they take effect.
Contact
Questions about privacy, or want your synced data removed? Open an issue on the GSD Task Manager GitHub repositories (iOS app, Android app, or web app), and we will help. You do not need to share any personal details in the issue to make a request.