Privacy Policy

 Last updated: 20 June 2026

Data controller: MxSoft LTD (“we”, “us”, “our”)

Contact: [hello@mxsoft.uk]

This notice describes how we collect, use, and protect personal information when you use the Task Master mobile app, admin dashboard, and related services (together, the “Service”).

Who we are

Task Master is operated by **MxSoft LTD**. We provide a task and event management app for households and small teams.

Information we collect

We may collect and process the following categories of information:

- Account information — such as your name, email address, and authentication details when you sign in or create an account.
- Team and profile information — team names, membership, roles, and settings you or your team administrators configure.
- Task and event content — tasks, events, notes, assignments, completion status, and related metadata you create or receive through the Service.
- Messages and attachments — text you enter in chat or share with the Service, and images or files you attach (for example, task evidence or image-based capture).
- Device and usage information — app version, platform, push notification tokens, and basic technical logs needed to operate and secure the Service.
Integration data — if you connect optional services (such as Google Calendar, Microsoft Outlook, or WhatsApp), we store the tokens and data needed to provide that integration on your behalf.

We do not require you to provide more information than is reasonably necessary to use the features you choose.How we use your information

We use personal information to:

- provide, maintain, and improve the Service;
- parse and organise tasks and events from your input (including optional AI-assisted parsing);
- send notifications you have enabled (such as digests or assignment updates);
- sync with calendar or messaging integrations you connect;
- protect the security and integrity of the Service;
- respond to support requests and bug reports;
- comply with legal obligations.

We do not sell your personal information.

Legal bases (UK / EEA users)

Where UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases:

- Contract — to provide the Service you request.
- Legitimate interests — to secure, improve, and operate the Service, provided those interests are not overridden by your rights.
- Consent — where required for optional integrations, notifications, or similar features. You may withdraw consent at any time through in-app settings or by contacting us.

How we share information

We may share information with:

- Service providers who help us run the Service (for example, cloud hosting, object storage, email delivery, and AI model providers used for parsing), under contracts that limit their use of your data.
- Integration partners you choose to connect (for example, calendar or messaging platforms), only as needed to perform the integration.
- Other team members — content you add to a team is visible to members of that team according to the app’s permissions.
- Authorities — if required by law or to protect rights, safety, and security.

We do not share your personal information with third parties for their own marketing purposes.

Storage and security

- Data is transmitted over encrypted connections (HTTPS).
- Sensitive task and team content is encrypted at rest on our systems.
- Access to production data is restricted to authorised personnel and systems required to operate the Service.

No method of transmission or storage is completely secure. We work to protect your information but cannot guarantee absolute security.

Retention

We keep personal information for as long as your account is active or as needed to provide the Service, resolve disputes, enforce our terms, and meet legal requirements. When data is no longer needed, we delete or anonymise it within a reasonable period.

## Your rights

Depending on where you live, you may have rights to:

- access a copy of your personal information;
- correct inaccurate information;
- delete your information;
- restrict or object to certain processing;
- data portability;
- withdraw consent where processing is based on consent;
- lodge a complaint with a supervisory authority.

To exercise these rights, contact us at [hello@mxsoft.uk]. We may need to verify your identity before responding.

International transfers

We may process and store information in the United Kingdom and in other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers of personal data.

Children

The Service is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

Third-party services

The Service may link to or integrate with third-party services. Their privacy practices are governed by their own policies. We encourage you to review those policies when you connect an integration.

Changes to this notice

We may update this notice from time to time. We will post the updated version in this repository and, where appropriate, notify you in the app or by other reasonable means. The “Last updated” date at the top indicates when this notice was last revised.

Contact

For privacy questions or requests:

**MxSoft LTD**
Email: [hello@mxsoft.uk]