Privacy Policy
Last updated: June 18, 2026
OnTaskd ("OnTaskd", "we", "us", or "our"), operated by Two Street, provides a personal task and calendar management application (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using OnTaskd, you agree to the practices described here.
1. Information we collect
Information you provide
- Account information — when you sign in with Google, we receive your name, email address, and profile picture from your Google account.
- Tasks and lists — the tasks, lists, notes, due dates, and related content you create in the Service.
Information from Google services (with your permission)
- Google Calendar (read-only) — we read your calendar events so the Service can display your schedule. We do not modify or delete your calendar events.
- Authentication tokens — we store the OAuth access and refresh tokens Google issues so the Service can connect to your account on your behalf.
Information collected automatically
- Log and usage data — standard server logs such as request times and error information, used to operate and secure the Service.
2. How we use information
- To provide, maintain, and improve the Service.
- To display your calendar and manage your tasks and lists.
- To send you a daily agenda email summarizing your schedule and tasks, if that feature is enabled for your account.
- To authenticate you and keep your account secure.
- To diagnose problems and prevent abuse.
3. Google API Services — Limited Use
OnTaskd's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not use Google user data for serving advertisements, we do not sell Google user data, and we do not transfer or use it for purposes unrelated to providing or improving the Service's user-facing features. Human access to Google user data is limited to what is necessary for security, to comply with applicable law, or where you have given us explicit consent.
4. How we share information
We do not sell your personal information. We share information only as needed to run the Service, with service providers acting on our behalf:
- Google — for sign-in and the Google Calendar and Gmail APIs you authorize.
- Hosting and database (Railway) — to host the application and store your data.
- Anthropic — if the daily agenda email feature is enabled, the relevant schedule and task data is sent to Anthropic's API to generate the summary text. Anthropic does not train its models on this data.
- Legal — when required by law or to protect rights, safety, and security.
5. Data retention
We retain your account information, tasks, and tokens for as long as your account is active. When you delete your account or revoke access, we delete or de-identify the associated data within a reasonable period, except where retention is required by law.
6. Your choices and rights
- Revoke access at any time at myaccount.google.com/permissions. This disconnects OnTaskd from your Google account.
- Access or delete your data — email us at dan@twostreet.com to request a copy or deletion of your information.
7. Security
We use industry-standard measures to protect your information, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Children's privacy
OnTaskd is not directed to children under 13, and we do not knowingly collect personal information from them.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, provide additional notice.
10. Contact us
Questions about this policy or your data? Email dan@twostreet.com.