Privacy policy
What taskBrewery keeps, why, who helps us run it, and how to get your data back or deleted.
Last updated 20 October 2026
The short version
- We keep what you put into taskBrewery so we can show it back to you. We don’t sell it, and there are no ads.
- Memos, recordings and attachments go to OpenAI so they can be turned into tasks. OpenAI doesn’t train its models on data sent through its API.
- There are no analytics or advertising trackers in the app or on this site.
- Write to support@taskbrewery.com to get a copy of your data or to delete your account.
Who we are
taskBrewery is run by Cordada Tech SL, Av/Sants de la Pedra, 1, 10, 46500 Sagunto, Valencia, Spain, the controller of your personal data. We haven’t appointed a data protection officer; write to support@taskbrewery.com about anything on this page.
What we store
Your account
Your name, email address and time zone, your settings, and your password, which we keep only as a salted hash. If you add a passkey we store its public key, never anything that could sign in for you. We also keep a record of your sign-ins so you can stay signed in and we can end a session.
What you put in
Tasks, projects, labels, comments and reminders, and memos with whatever you capture in them: text, voice recordings, photos, links and files.
Workspaces you share with other people are visible to their members. Memos stay private to the person who captured them until they become tasks.
People you invite
When you invite someone to a workspace we store their email address and send them the invitation.
Your devices
If you turn on notifications we store the push address your browser or device gives us, so reminders can reach it. The app keeps your sign-in on your device in local storage. Neither the app nor this site uses tracking cookies.
Waitlist
If you leave your email on taskbrewery.com to hear when we open, we store that address and the time you left it, and use it only to tell you when taskBrewery is ready. Write to support@taskbrewery.com and we’ll remove it.
Imports
When you import from Todoist we use the API token you paste for that import only. We don’t save it.
Why we use it
- To run the service you signed up for: storing and syncing your tasks, reminders, sharing and sign-in. This is what our agreement with you (the terms) covers.
- To send you the email the service needs: a welcome message, password resets, invitations, and notices about comments on your tasks. We don’t send marketing email.
- To keep it safe and working: limiting repeated sign-in attempts, keeping backups, and fixing errors. This is our legitimate interest in running a reliable, secure service.
AI processing
taskBrewery uses OpenAI to read memos and suggest a task: it transcribes recordings, describes photos, summarises pages you link, and drafts a title, project, date and assignee. To do that we send OpenAI the memo and its attachments, along with the names of your projects, labels and the people in your workspace so the suggestion fits. Uploaded attachments and new projects and labels can get a short AI-written description the same way.
OpenAI processes this under its API terms, which say API data isn’t used to train its models. OpenAI may keep it for a limited time to detect abuse. Suggestions are only suggestions: nothing becomes a task until you accept it.
When you capture a link, our server fetches the page (or the post, for X links) to show a preview, so that site sees a request from us, not from you.
Who helps us run it
| Provider | What for | Where |
|---|---|---|
| Hetzner | Servers and the database | Nuremberg, Germany |
| Cloudflare | File storage (attachments, recordings), encrypted backups, sending email, hosting this site and its waitlist | EU and worldwide |
| OpenAI | AI processing of memos and attachments | United States |
| Apple, Google, Mozilla | Delivering push notifications, through whichever service your browser or device uses | Worldwide |
Each provider processes data on our behalf under its own data processing terms. Where data leaves the EU, it relies on the transfer safeguards those terms provide.
How long we keep it
We keep your data while your account is open. When you delete something it’s removed from the live database; when you delete your account we remove your account and your private data within 30 days. Database backups are kept for 30 days and then deleted, so deleted data disappears from them too. Tasks you created in a workspace shared with others stay there for its other members unless you delete them first.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Write to support@taskbrewery.com from the email address on your account and we’ll answer within a month. You can also complain to your data protection authority; in Spain that’s the AEPD.
Security
Everything travels over HTTPS. Passwords are hashed, files are kept in private storage that is only reachable through short-lived links, and access to the servers is limited to the people who run taskBrewery.
Children
taskBrewery isn’t meant for children under 16, and we don’t knowingly collect their data.
Changes
If we change this policy we’ll update the date at the top, and tell you by email or in the app before a change that affects how we use your data.