The short version: We collect a sign-in identifier (your Apple/Google ID or email) so you can log in, and we store your tasks and Spaces so they sync across your devices and the web. We don't sell your data, run ads, or use it to train AI. When you connect your own AI assistant, it uses
your AI account — we never see or pay for those conversations. We only send anything to an outside AI provider when you tap a specific Pro feature in the iPhone app, and only the exact text or image you chose.
1. The three surfaces of TaskCove
TaskCove has three parts, and they handle data a little differently:
- The iPhone app — your tasks, Spaces, and records live on your device and sync to our backend so you don't lose them and can pick up on the web.
- The web app (taskcove.app) — the same board in your browser. It makes no AI calls of any kind; it only reads and writes your own tasks and Spaces.
- The AI connector — lets you link your own AI assistant (Claude, ChatGPT, Cursor, and other MCP-capable tools) to read and update your board, using your own AI account and tokens.
2. Information we collect
Account information
- Sign-in identifier. When you sign in with Apple or Google, we receive a unique account ID and, if you allow it, your email. With email sign-in, we use a one-time code — if a password is ever set, it is securely hashed and never stored in readable form.
- Display name (optional). Only if you choose to set one.
Your tasks and Spaces
- Task titles, notes, due dates, status, and completion history.
- Spaces (Personal, Business, Chores, People, and any you create) and how items are organized.
- On iPhone, records of things you own (appliances, vehicles, subscriptions, warranties), their reminder dates, and any photos you attach.
This is stored in our backend so it syncs across your devices and the web, protected so that only you can read it (see Section 5).
Subscription and usage
- Plan status — whether you're on the free tier or TaskCove Pro.
- Daily AI usage counters — only for Pro AI features in the iPhone app, used to enforce fair-use limits. Resets daily.
3. What we send to AI providers (only when you ask)
The AI connector is bring-your-own-AI. When you link Claude, ChatGPT, Cursor, or another assistant, that tool talks to your board using your own credentials and your own AI plan. Your prompts and the AI's responses go through your AI provider — we never receive, store, read, or pay for them.
Pro AI features in the iPhone app are the only time we send your content to an outside model, and only the specific item you act on:
- OpenAI — receives the specific text you ask it to parse, or text extracted from a document you scan.
- Google Gemini — receives a photo you choose when you ask it to identify an object.
We never send your whole account. Per OpenAI's API policy and the Google Gemini API terms, this data is not used to train their models, and we don't persist these requests on our servers.
4. How we use your data
- To run TaskCove — sync your board, gate Pro features, and complete the AI actions you trigger.
- To send account-related email (sign-in codes, security or account notices), and — if you joined during early access — to let you know when TaskCove is ready for you.
- To enforce daily AI usage limits so the Service stays sustainable.
- We do not use your data for advertising, we don't sell it, and we don't share it with marketers or third-party analytics brokers.
5. Where data is stored and how it's protected
- Backend: Supabase, hosted on AWS in the United States. Encrypted at rest, and TLS in transit.
- Authentication: Supabase Auth. We never store readable passwords.
- Row-level security: every database read and write is scoped to the signed-in account at the database level. No user can access another user's data, even with a crafted request.
- Photos: stored in a private storage bucket with the same per-account access rules; on iPhone a copy is also kept locally, encrypted at rest by iOS Data Protection.
6. Your rights
- Access — view all your data anytime in the app or on the web.
- Correction — edit it anytime.
- Deletion — "Delete account and all data" in the app's settings removes your account and all server-side data, including Spaces and any captured items.
- Disconnect AI — revoke the AI connector at any time from your AI tool; it immediately loses access to your board.
- EU/UK users (GDPR): the rights above, plus the right to lodge a complaint with your local data protection authority.
- California users (CCPA): the rights to know, delete, and opt out of any sale of personal information. We do not sell personal information.
7. What TaskCove is not for
TaskCove is for everyday tasks and the things you own. Please don't store:
- Government IDs (passport, driver's license, social security cards)
- Medical records or health data
- Financial account numbers, credit cards, or banking statements
- Login credentials for other services
For those, use iCloud Keychain, a dedicated password manager, or a secure document vault.
8. Children's privacy
TaskCove is intended for users 13 and older. We do not knowingly collect personal information from children under 13.
9. Changes to this policy
We may update this policy as TaskCove evolves. Material changes (new data collection, new third parties) will be flagged in the app at next sign-in.
10. Contact
Questions or requests: contact@covelotech.com
CoveloTech LLC · Built and supported by a studio that actually answers the email.