Privacy policy

Last updated: 16 October 2026

This is a translation of the Italian policy, provided for your convenience. If the two differ, the Italian text prevails.

Tasky is an app that helps you not to miss your commitments: it reads the content you entrust to it (emails, events, voice notes, messages) and suggests the tasks to do. Here we explain, simply, which data we process and why. In short: your data is used only to make Tasky work for you. No advertising, no sale to third parties, no commercial profiling.

1. Who the controller is

The data controller is Enjinia, Via dei Mille 74, Napoli. For any question or request about privacy write to dev@enjinia.it.

2. Which data we process

• Account: email, the names people call you (if you give them), your password (stored only in encrypted, unreadable form), your settings (theme, city for the weather, notifications, two-factor authentication).
• Your content: tasks, lists, categories, suggestions, notes and the texts you paste into or share with Tasky.
• Files you share (screenshots, photos, PDFs): they are used only for the analysis and deleted straight afterwards; if you abandon the sharing, within 24 hours.
• Voice notes and shared voice messages: the audio is transcribed and deleted as soon as it has been transcribed; only the text remains, in the task suggestion.
• Emails you forward to Tasky: they arrive in a receiving space of ours and are deleted within 2 days; the sender, the subject and an excerpt remain in the suggestion.
• Google (only if you connect it): Google's authorisation, stored encrypted; we read your calendar and, only if enabled for your account, your incoming mail, to suggest tasks to you. From emails and events we keep only what the suggestion needs (sender, subject, date, a short excerpt).
• Shared tasks: if you share a task with an email address, that address; whoever accepts sees the title, date, list and your name and email. Tasky has no directory of users and does not let anyone search for who is registered.
• Notifications: an identifier of your device supplied by the browser, needed to send you the notifications you have turned on.
• Technical and security data: sign-ins, failed attempts, IP address and type of browser, the count of AI analyses and of minutes of voice notes (for the daily quotas).
• Feedback: the text and any screenshot you send us with "Report or suggest".
• Waiting list: if you have no invitation and leave your email on the home page, we keep only that address and the language of the page, to send you the invitation (Art. 6(1)(b) GDPR, at your request).
• Usage statistics: which Tasky features you use and when, without your content and without your name (see point 5).

3. Why we process it

• To provide the service you asked for by signing up (Art. 6(1)(b) GDPR): creating and organising tasks, analysing the content you entrust to us, sending you service emails and the notifications you turn on.
• For the security of the service and to prevent abuse (Art. 6(1)(f) GDPR, legitimate interest): sign-in log, limits on attempts, quotas.
• To understand how Tasky is used and improve it (Art. 6(1)(f) GDPR, legitimate interest): pseudonymous usage statistics, described in point 5. You can object at any time from your Profile.
• We do not use your data for advertising, we do not sell it and we do not use it to train artificial intelligence models.

4. Artificial intelligence

To suggest tasks to you, the text of the content Tasky analyses (and the images or PDFs you share) is sent to Anthropic (Claude), which processes it and returns the suggestion. Under its terms for use through the API, Anthropic does not use this data to train its models. Anthropic is based in the United States: the transfer takes place with the safeguards provided for by the GDPR (standard contractual clauses approved by the European Commission). If you keep Planning on, the title and notes of the tasks you write yourself are sent in the same way, to understand what kind of commitment they are and put them at the right moment; you can turn it off from your Profile. Voice notes are transcribed by Amazon Transcribe, on servers in Frankfurt, without keeping the audio.

5. Usage statistics

To understand what works and what to improve, Tasky counts some actions: for example that you created a task and how (typed, by voice, from a forwarded email), that you accepted, edited or discarded a proposal, that you opened the app on a given day, that you turned on notifications.

• Never your content: no titles, notes, texts, emails, audio or Google data. For each action we record only its type and a few fixed-choice details (for example "created by voice").
• Without your name: instead of your account there is a pseudonymous code, which cannot be traced back to you without a secret key that stays on our server. We use it only to delete this data when you ask. This is pseudonymous, not anonymous, data: we treat it as personal data, with all your rights.
• Visits to the home page: when someone without an account opens the home page, we count the visit with a few fixed-choice details: what kind of site or campaign it comes from (for example "from Reddit", "from a search", "direct"), the language of the page and whether it is a phone or a computer. We do not record the IP address, the full address of the page you came from or your browser, and we use no cookies or codes that recognise visitors: each visit is only a number. If you leave your email for an invitation, we count which channel the request came from, but the email never enters the statistics.
• Where: in our own database, on servers in Frankfurt. No external analytics service and no cookies.
• Who sees it: only overall numbers (how many people, how many times), never individuals. We consult them, and so do the analysis tools we use, including artificial intelligence assistants, which receive only these overall numbers; groups too small to be anonymous are not shown.
• For how long: 13 months.
• How to say no: in your Profile, under "Help us improve Tasky". If you switch it off we stop counting your actions and delete those already counted. The legal basis is our legitimate interest in improving the service (Art. 6(1)(f) GDPR); you can object at any time (Art. 21 GDPR).

6. Who we entrust data to

We use these providers, which process data on our behalf and only for the purposes stated:

• Amazon Web Services (Frankfurt data centre, EU): servers and database, sending and receiving email, encrypted backups, transcription of voice notes.
• Anthropic (USA): analysis of content with artificial intelligence (see point 4).
• Google: only if you connect your Google account, to read calendar and mail as described above.
• Browser notification services (Google, Apple, Mozilla): they deliver push notifications to your device; the content travels encrypted.
• Open-Meteo and OpenStreetMap: the weather widget asks for the forecast directly from your browser, with your phone's position or the city you have given.
• jsDelivr: a network that distributes some graphic files of the interface; like every website, it receives the browser's IP address.

7. For how long

• Account and content: for as long as you keep them or until you delete your account.
• Shared files: deleted after the analysis (after 24 hours at the latest). Audio of voice notes: deleted as soon as it has been transcribed.
• Emails forwarded to Tasky: 2 days. Log of forwarded emails: 90 days.
• Sign-in and security log: 12 months. Counts of AI usage: 13 months.
• Waiting list: until we send you the invitation; you can ask us to remove you earlier by writing to us.
• Usage statistics: 13 months; deleted at once if you switch them off in your Profile or delete your account.
• Backups: 35 days. What you delete also disappears from the backups within this period.

8. Your rights

At any time you can ask to access your data, correct it, delete it, restrict its processing, object or receive a copy in a readable format, by writing to dev@enjinia.it. You can delete your account and all your data yourself from your Profile, under "Delete my account". You can object to the usage statistics directly from your Profile. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

9. Cookies

Tasky uses only technical cookies, essential to sign you in and protect forms (session, sign-in, CSRF protection), and the browser's storage for small preferences (for example a notice you have closed). No profiling, statistics or third-party cookies: that is why we do not ask for your consent.

10. Security

Connections always encrypted (HTTPS), passwords stored with non-reversible algorithms, two-factor authentication available, Google authorisations encrypted, encrypted backups, access to the system limited and logged.

11. Minors

Tasky is not intended for anyone under 14.

12. Google data

Tasky's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

No Google data goes into the usage statistics: we only count that a proposal came from Gmail or Calendar.

13. Changes

If we change this policy we will update the date at the top and, for important changes, let you know by email.