Privacy Policy

Last updated: 31 August 2026

This Privacy Policy explains what TaskGrower collects, why we collect it, who we share it with, and what you can do about it. It covers the TaskGrower website at https://www.taskgrower.com and the TaskGrower mobile apps for iOS and Android.

TaskGrower is operated by Act Now Button Inc., an Ontario corporation operating as ByOne Studio, which is the data controller for the information described here. In this policy, "TaskGrower", "we", "us" and "our" mean Act Now Button Inc.

We do not sell your personal information, and TaskGrower contains no advertising. There are no ad networks, ad servers, or advertising SDKs in the website or in the apps.

Information we collect

• Account information. Your email address, and your password stored in hashed form by our authentication provider. If you sign in with Apple or Google, we receive your email address from that provider. With Apple you can hide your real address, in which case we receive the private relay address Apple creates for you. We do not ask for your name, phone number, or postal address. Depending on your provider settings, Apple or Google may also send us the name on your account. We store it with your account but never display it — the only name other users can ever see is the optional public username you choose.
• A public username, if you choose one. An optional handle shown as attribution beside designs you share to the community catalog. You can share designs anonymously instead.
• What you plan and do in the app. Your tasks and habits, including their titles, priorities, ordering, subtasks, completion status, and dates, your timer sessions, and the daily growths and reflection history built from them.
• Designs you create. Growth artwork you draw in the app or, with Plus, images you upload, stored as image files together with the settings that describe how they render.
• Your settings. Your selected growth design, whether day reminders are on and at what time, and any creators you have chosen to hide.
• Support and feedback. If you send feedback or a bug report, we store what you wrote and email it to our team.
• Product analytics. Events describing how the app is used, such as screens opened and features used, along with technical information such as device or browser type, app version, crash and error reports, and an approximate location that our analytics provider derives from your IP address.
• Server logs. Standard request logs kept by our hosting and backend providers, which include IP address, timestamp, and the address requested, used for security and debugging.

How we use your information

• To create your account and sign you in.
• To store your tasks, habits, growths, and designs, and sync them across your devices.
• To screen designs submitted to the community catalog and to handle reports and moderation.
• To send you day reminders on your device, if you turn them on.
• To answer your feedback and support messages, and to send you service emails such as password resets.
• To understand how the product is used so we can improve it.
• To keep TaskGrower secure, prevent abuse, and meet our legal obligations.

Day reminders and your lock screen

If you turn on day reminders, TaskGrower sends you a notification on the morning of days you have planned work for. To make the reminder useful, the notification names one of that day's tasks, for example: "Today you get to: Call the dentist".

That means a task title can appear on your device lock screen, where anyone who can see your screen may read it. If you would rather that did not happen, turn day reminders off in Settings.

Day reminders are built and scheduled on your own device. The text of a reminder is not sent to us or to any push notification server.

Analytics

We use PostHog for product analytics. When you are signed in, PostHog receives your TaskGrower account id and your email address so that usage can be tied to an account. Analytics profiles are only created for signed in users. We use this to understand which features are used and where people get stuck, not to build advertising profiles.

PostHog may also record how the website and web app are used — clicks, scrolling, and navigation between screens — so we can see where people get stuck. Everything you type and all text on the page is masked in these recordings, and they are kept for 30 days. The mobile apps are not recorded.

Service providers we share data with

We use a small number of providers to run TaskGrower. They process data on our behalf and are not permitted to use it for their own purposes.

• Supabase for authentication, database, and file storage. Almost all of your TaskGrower data is stored here.
• PostHog for product analytics, as described above.
• Resend for service email, such as replies to your feedback, decisions on your community catalog submissions, and a notice if someone tries to sign up with an email address that already has an account.
• OpenAI for content screening. Only the images and titles of designs you submit to the community catalog are sent to the OpenAI moderation API. Nothing from your tasks, habits, or private designs is ever sent there.
• Expo, the framework our mobile apps are built with. Its push notification service is used to alert our own administrators about moderation events. Your day reminders do not go through it, because they are scheduled on your device.
• RevenueCat for subscription and purchase management. When you buy TaskGrower Plus, RevenueCat receives your TaskGrower account id as an account identifier, plus purchase and subscription status relayed from Apple and Google, so we can unlock Plus on your account. We never see or store your card details.
• Stripe, the merchant of record for purchases made on our website, together with its Link checkout. Stripe processes your payment details under its own privacy policy; we never see or store your card details.
• The app stores. If you buy TaskGrower Plus, Apple or Google handles the purchase under their own terms and privacy policies. We receive only whether your account has an active subscription. We never see or store your card details.

We may also disclose information where we are legally required to, or where it is necessary to protect the rights and safety of our users. We do not share your information with advertisers or data brokers.

What other people can see

Your tasks, habits, growth history, and private designs are never public. The only thing other users can see is a design you deliberately submit to the community catalog, which appears with the username you chose, or as Anonymous if you did not choose one.

Cookies and similar technologies

The website uses cookies to keep you signed in between visits. Our analytics provider also stores an identifier in your browser so it can recognize a returning visitor. We do not use advertising cookies, ad networks, or third party ad servers.

You can block or delete cookies in your browser settings, but if you block the sign in cookie you will not be able to stay signed in. The mobile apps do not use cookies; your sign in session is stored on the device itself.

Security

Your data is stored with our providers behind database-level access rules, so that rows belonging to your account are only readable by your account. Traffic between the apps and our backend is encrypted in transit. That said, no method of transmission over the internet, and no method of electronic storage, is completely secure, so we cannot guarantee absolute security.

How long we keep your information

We keep your information for as long as your account exists, because the app is built to let you look back over your history. When you delete your account, your data is removed as described below. Moderation records and designs you published to the community catalog are handled as described in our Terms of Service, so that other people do not lose the days they already lived.

Deleting your account

You can delete your account at any time from Settings inside the app, on web and on mobile. Deleting your account permanently deletes your account and the data associated with it, including your tasks, habits, growths, private designs, and the image files behind them. This cannot be undone.

Designs you shared to the community catalog are delisted rather than deleted, so that days other users have already lived keep rendering.

If you subscribed to TaskGrower Plus through an app store, deleting your TaskGrower account does not cancel that subscription. Store-managed subscriptions have to be cancelled separately in the store you subscribed through.

Children under 13

TaskGrower is not directed at anyone under the age of 13, and we do not knowingly collect personal information from children under 13. If we discover that a child under 13 has given us personal information, we delete it. If you are a parent or guardian and believe your child has given us personal information, please contact us so we can remove it.

Your rights under the GDPR (EEA and UK)

Act Now Button Inc. is the data controller for your information. Our legal bases for processing it are:

• Performance of a contract, to give you the account and the app you signed up for.
• Our legitimate interests, to keep TaskGrower secure, prevent abuse, screen and moderate community catalog submissions, and understand how the product is used.
• Your consent, for device notifications, which you turn on yourself and can turn off at any time.
• Legal obligations, where the law requires us to keep or disclose information.

If you are in the European Economic Area or the United Kingdom, you have the right to:

• Access the personal information we hold about you.
• Have inaccurate information corrected.
• Have your information deleted.
• Restrict or object to how we process it.
• Receive your information in a portable format.
• Withdraw consent, where we rely on consent, without affecting processing that already happened.
• Complain to your local data protection supervisory authority.

You can exercise the two most common rights yourself: your data is visible to you inside the app, and Settings has a delete account control that erases it. For anything else, contact us and we will help.

Our providers process your information outside the European Economic Area and the United Kingdom, mainly in the United States. Where we transfer data there, we rely on the European Commission's Standard Contractual Clauses in our agreements with each provider, and on the EU-U.S. Data Privacy Framework for providers certified under it. Email us at support@taskgrower.com for a copy of the relevant safeguard.

Your rights in California

TaskGrower is currently below the thresholds at which the California Consumer Privacy Act applies to a business. We give you its core rights anyway, wherever you live: to know what personal information we collect and how we use it, to ask us to delete it, to ask us to correct it, and not to be treated differently for asking.

The categories of personal information we collect are identifiers (your email address, account id, and IP address), internet and network activity (product usage events and server logs), and content you create (your tasks, habits, growths, designs, and feedback). We collect these for the purposes set out in How we use your information above, and we keep them as described in How long we keep your information.

We do not sell or share personal information as those terms are defined by California law, and we have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes that would give you a right to limit that use.

To make a request, delete your account in Settings or contact us through the Feedback page. You may use an authorized agent, and we will verify the request through the email address on your account.

Your rights in Canada

Act Now Button Inc. is an Ontario corporation. Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) applies to how we handle your personal information.

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate. You can see most of your data inside the app, and Settings has a delete account control. For anything else, email us at support@taskgrower.com.

If you are not satisfied with our response, you may escalate a complaint to the Office of the Privacy Commissioner of Canada.

Our privacy officer — in Quebec, the person in charge of the protection of personal information — is the founder of Act Now Button Inc. You can reach them at support@taskgrower.com.

If you live in Quebec, Quebec's private-sector privacy law also applies. The providers we listed above store and process information outside Quebec, including in the United States. You can ask us for a copy of the computerized information you gave us in a structured, commonly used format — in fact, anyone can, wherever you live. And if you are under 14, a parent or guardian has to consent before you use TaskGrower.

Links to other sites

TaskGrower may link to sites we do not operate, such as the app stores. We have no control over those sites and are not responsible for their content or privacy practices, so please review their own policies.

Changes to this Privacy Policy

We may update this policy as TaskGrower changes. When we do, we will update the date at the top of this page. Please review it from time to time.

Contact us

If you have questions or requests about your privacy, reach us through the Feedback page in the app, or email us at support@taskgrower.com. If you have deleted your account or cannot sign in, use the email address instead. You do not need an account to make a privacy request.

Act Now Button Inc. (operating as ByOne Studio)
150 Elgin Street, Suite 800
Ottawa, ON K2P 2P8, Canada