Privacy Policy
1. The short version
- tasque is a program on your Mac. By itself it keeps everything on your Mac. We do not receive it.
- Some parts are optional and send data only when you use them: the Groq advisor, the Feedback button, and tasque cloud (sign-in, sync and pairing). Section 4 says what each one sends.
- With tasque cloud, the content of your tasques is end-to-end encrypted on your devices. We cannot read it. We can see account and routing metadata (section 4.3).
- Your repository contents, files and agent transcripts stay on your Mac.
- We do not sell your data, do not run ads, and do not use your content to train AI models.
2. Who this covers
This policy covers the tasque program for Mac, tasque cloud (the sign-in, sync and pairing service), the hosted web app at tasque.dev/app, and the website at tasque.dev. The operator is MDO Labs LLC. Questions go to support@tasque.dev.
3. What stays on your Mac
When you use tasque by itself, all of this stays on your Mac and only you can read it: your repositories' files, diffs and agent transcripts; the local store of every tasque (in ~/.tasque); your settings; the sign-in records of browsers you opened the local inbox in (the daemon keeps only a hash of each); and the logs tasque writes for itself. The local inbox is served by a program on your Mac that listens on 127.0.0.1 only.
Before anything is sent from your Mac by one of the optional parts below, tasque removes text that looks like a key, token or password.
4. When you use the optional parts
4.1 The Groq advisor
The advisor is off by default and works only with your own Groq key. When you switch it on, tasque sends Groq, for the items it ranks: the item's kind, title, question and option text, whether it blocks an agent, and its age, deadline and blocked counts. It never sends files, paths, notes, threads or your key, and it does not send an item that contains anything that looks like a secret. Groq receives this under your account and Groq's own terms. tasque cloud and MDO Labs are not involved. tasque keeps a log of each call on your Mac, without the text, in ~/.tasque/advisor.log.
4.2 The Feedback button
Nothing is sent until you press Send. Before that, tasque shows you exactly what the report contains and lets you remove parts of it. By default a report holds the words you wrote, the tasque and macOS versions, the structure of what was on screen with your content replaced by its length, the ids and states (not the text) of the tasques in view, your recent actions in tasque, recent lines from tasque's own log, the result of tasque doctor, your settings without keys, and timings. The text of your tasques, file paths, a screenshot, files, and an agent session's transcript are included only if you tick them for that report. If you are signed in, your handle can be included, and you can type an email address if you want a reply. Keys, tokens and passwords are removed on your Mac, and a report that still looks like it holds one is not sent.
The report is encrypted on your Mac to a key that only MDO Labs holds. Our servers store and forward it without being able to read it. You do not need an account to send feedback. A random per-installation id lets us tell repeat reports apart. We use reports only to find and fix problems in tasque. We keep a report for at most 180 days. This is the longest we keep it, and it is a limit we set for ourselves rather than one a system has been proven to enforce for you, so ask us if you want one removed sooner. You can delete a report you sent with tasque feedback delete or by emailing us.
4.3 tasque cloud: sign-in, sync and pairing
When you run tasque login, sync, or pair a device, your Mac and your other devices talk to tasque cloud, which runs on Cloudflare.
- What we cannot read. The content of your tasques that you sync (titles, questions, options, notes, answers and attachments) is encrypted on your devices with a key we do not hold. We store ciphertext only.
- What we can see. Account data: your email address, and your handle if you have one. Routing and metadata: ids, kinds, timestamps and status changes of your tasques; project names; your list of devices and their activity; push tokens if you use notifications; IP addresses used to reach the service; and the sizes of everything, including encrypted content.
- Recovery. Because we do not hold your key, we cannot recover encrypted content if you lose all your devices and your recovery information. The copy on your Mac stays on your Mac.
- Remote actions. Commands sent to your Mac from your devices are signed so that your Mac can check who sent them.
Metadata can reveal things, such as when you work and how often. That is true of any encrypted service. We do not sell it, and we do not run analytics on it beyond counts.
4.4 Paying for tasque cloud
tasque cloud is a paid plan with a free trial. When billing starts, the price and the payment processor are shown to you before you pay, and this policy will say what the processor receives. We keep your plan and billing status, and we keep one trial per verified email address to prevent abuse.
5. This website and the web app
The pages at tasque.dev use no analytics, no advertising and no third-party scripts, fonts or images. Cloudflare serves the site and, like any web host, processes the IP address and request details needed to deliver it.
The hosted web app at tasque.dev/app lets you sign in with an email code, a passkey, or Google. If you sign in with Google, Google shares your email address with us; we receive only your verified email address, and Google handles your sign-in under its own privacy policy. When you sign in, the app sets a sign-in cookie that scripts cannot read. It is used only to keep you signed in. We set no advertising or tracking cookies.
When you open the local inbox from your Mac (tasque web), it keeps you signed in with a cookie for 30 days after you last used it. You can sign out any browser in Settings.
6. Service providers
We use these providers to run tasque. Each gets only what it needs for the job listed.
| Provider | Used for | What it receives |
|---|---|---|
| Cloudflare | Hosting the website, the web app and tasque cloud; sending and routing email (sign-in codes, support@tasque.dev) | The data tasque cloud holds (section 4.3, encrypted content as ciphertext), IP addresses, your email address and the email messages we send or receive |
| Sign in with Google, only if you choose it | Your sign-in request. We receive your verified email address | |
| Groq | The advisor, only if you switch it on with your own key | The item text described in section 4.1, sent from your Mac under your own Groq account |
| Apple | Distributing the tasque phone app and delivering its notifications, for people who use the phone app | A push token and the notification payload (encrypted content that your phone decrypts) |
We do not share your data with anyone else except as the law requires or to protect people from harm or abuse.
7. How we use data
To run the parts you use: sign you in, route and sync your tasques, send notifications and sign-in emails, answer your support and feedback emails, prevent abuse (trial, rate and spending limits), keep the service secure, and meet legal obligations. We do not use your content for advertising or to train models, and we do not sell or share personal information for advertising.
8. Keeping, exporting and deleting
- On your Mac. Until you remove it.
tasque uninstalland deleting~/.tasqueremove what tasque keeps there. - tasque cloud. Until you delete your account or ask us to.
- Export and delete. In Settings, Account (or
tasque exportandtasque account delete) you can export what your Mac holds as a zip and delete your tasque cloud account in two steps. Deleting your account removes your data from tasque's servers. It does not remove messages or contact details that other people already received from you. Local data stays on your Mac. - Feedback reports. At most 180 days (section 4.2).
- Backups and logs. We have not set a separate retention period for them. Copies held in our hosting provider's routine backups or logs are removed on that provider's schedule.
- Records the law requires. Once billing starts, we keep billing records for as long as tax and accounting law requires.
9. Security
Content synced to tasque cloud is end-to-end encrypted. The local inbox listens on your Mac only, with a private socket and per-install tokens. Feedback reports are encrypted on your Mac. Secrets are scrubbed before anything leaves your Mac. No system is perfectly secure, and we cannot promise it.
10. Your rights
You can export and delete your data yourself (section 8). Depending on where you live, you may also have the right to ask us for access to, correction of, or a portable copy of your personal information, to object to or restrict how we use it, and to complain to a data protection authority. Email support@tasque.dev and we will respond. We will not treat you differently for using these rights.
11. Children
tasque is not directed to children and is intended for people 18 and older. We do not knowingly collect data from children, and we will delete it if we learn we have.
12. Changes
We will post changes on this page with a new effective date. For material changes we will email account holders before they take effect.
13. Contact
MDO Labs LLC · support@tasque.dev
See also our Terms of Service.