Privacy Policy

SceneTasks stores your tasks so you can use SceneTasks. That is the whole business model, and this page is the long version of that sentence.

Last updated: July 19, 2026. Applies to scenetasks.com and the SceneTasks app.

The quick version

• Your words are encrypted. Task titles, notes, and checklists are encrypted at rest with a key unique to your account. We could not browse them if we wanted to.
• We sell nothing. No ads, no trackers, no analytics scripts, no data brokers. Ever.
• AI only runs when you ask. No AI feature ever sees your content unless you click the button that invokes it.
• Connections are yours to grant and revoke. Google and Microsoft sync only exist if you link them, and unlinking takes effect immediately.
• Leaving is clean. Export everything as JSON anytime; deleting your account destroys your encryption key, and backups roll off within 14 days.

The rest of this page is the detail behind those five sentences.

What we collect

• Account basics: your name, email address, and a hashed password. If you sign in with Google or Microsoft, we store that account's id for sign-in only; no inbox, contacts, or files.
• Your content: tasks, notes, projects, checklists, links between tasks, and your activity history. The text you write is encrypted at rest with a key unique to your account. Functional metadata that has to stay queryable is stored unencrypted: due dates, priority, on-screen positions, recurrence, and the name of any list you sync.
• Security events: sign-ins, credential changes, exports, and shares, with IP addresses. This is your audit trail, and you can read it yourself in Settings.
• Bug reports: if you send one, your description (and, only if you tick the box, a snapshot of your task titles) is stored encrypted so we can reproduce the issue.
• Billing: handled entirely by Stripe. Card numbers never touch our servers.
• Offline mode (optional, off by default): turning it on stores a copy of your tasks on your device so the canvas works without a connection, and queues offline edits on your device until you reconnect. This copy is never sent anywhere new and is deleted when you turn Offline mode off, delete your account, or clear site data.

How we protect it

Your data lives on servers we operate in the United States, encrypted in transit (TLS) and at rest (per-user AES-256-GCM envelope encryption for your written content, encrypted storage for OAuth tokens). Encrypted backups replicate continuously to object storage and roll off within 14 days. Access on our side is limited to what the Who can see your data section describes, and security-relevant actions land in your visible audit trail.

What we never do

• No advertising, no tracking pixels, no marketing analytics, no selling or sharing data with brokers.
• The only third-party code on our pages is crash and error diagnostics (Sentry, described below). Never advertising, never behavioural analytics.
• Cookies are strictly functional: your session and CSRF protection. The public landing page sets none at all.

Google user data

If you connect a Google account, this section describes exactly how that data is handled, as required by the Google API Services User Data Policy.

What we access. Only what the feature you enabled needs:

• Sign in with Google: your name, email address, and Google account id. Identity only. No inbox, contacts, or files.
• Google Tasks sync (optional, you connect it): your task lists and their tasks (titles, notes, due dates, completion status), limited to the lists you choose to sync.
• Google Calendar (optional, you connect it): your upcoming events (titles and times) for the week ahead, and the ability to create, update, and delete the reminder events SceneTasks itself makes for your tasks. We never modify events we didn't create.

How we use it. Solely to provide the features you see: signing you in, showing and two-way syncing your tasks as bubbles on your canvas, planning your week around your existing calendar events, and putting your tasks on your calendar when you ask. Nothing else. No advertising, no profiling, no purposes unrelated to the app's visible functionality.

Sharing. We never sell Google user data or share it with data brokers or advertisers. It is processed only by the subprocessors that run the service: our hosting provider (Hetzner) stores it as described below, and our backup storage (Cloudflare R2) holds encrypted backups. If, and only if, you invoke an AI feature (for example "plan my week"), the specific task or event text that feature needs is processed by Anthropic to generate your result and is not used to train AI models. Google user data is never transferred to any third party for advertising, for training AI models, or for any purpose other than providing the feature you requested.

Storage and protection. Task titles, notes, and checklists synced from Google are encrypted at rest with a key unique to your account (AES-256-GCM envelope encryption); your Google OAuth tokens are stored encrypted as well. Everything travels over TLS. Access on our side is limited as described in Who can see your data below, and security-relevant events are written to an audit trail you can view in Settings.

Retention and deletion. Google data lives in your account only while the connection is useful to you:

• Unlink anytime in Settings → Accounts: your Google tokens are deleted immediately, and you choose whether the previously imported tasks are removed too or kept as plain local tasks.
• Revoking access from your Google Account security page has the same effect on our access; SceneTasks will show the connection as revoked.
• Deleting your SceneTasks account (Settings → Data & privacy) destroys your encryption key and deletes your content, including everything synced from Google; encrypted backups roll off within 14 days, after which nothing can be recovered. You can also request deletion by emailing [email protected].

SceneTasks' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Microsoft user data

A Microsoft connection (sign-in, To Do task sync, Outlook calendar) is handled under exactly the same rules as the Google section above: we access only what the feature you enabled needs, use it only for the app's visible features, share it with no one beyond the subprocessors that run the service, encrypt the synced content and tokens the same way, and delete it on the same unlink, revoke, and account-deletion paths.

AI features

The AI features (smart sort, quick add, subtask suggestions, plan my week, the procrastination coach, and weekly review) are optional and only run when you ask. When you invoke one, the relevant text (the items you're sorting, a task's title and notes, or a short list of task titles, plus your calendar events for plan my week) is sent to our AI provider, Anthropic, to generate the result.

• We send only what that specific action needs, never your whole account.
• Anthropic processes it to return the result and does not use it to train models (we use the Anthropic API, which is not used for training by default).
• We don't sell or share this data with anyone else, and nothing AI-related runs unless you trigger it.
• A learned category cache stores generic item-to-category mappings (for example "oat milk" → dairy) with no personal context attached.

If you never touch the AI features, none of your content is ever sent to an AI provider.

Your own AI connections (MCP)

If you connect an AI client of your choosing (ChatGPT, Claude, an IDE) to SceneTasks over MCP, the tasks you ask it about are sent to the AI provider you chose, under your account with them, not through us. You enable it, and you can revoke it anytime in Settings → Connections.

Email

Email is the one place your task text can leave our servers in cleartext: to deliver any email we hand its contents to Resend, which retains it briefly for delivery logs. Our emails are written to avoid this. The reminder digest tells you how many tasks need attention with a link to open the app, not their names. Including task names in the digest is an explicit opt-in (Settings → Notifications), off by default, and the only case where your task titles are emailed.

Error monitoring and diagnostics

To find and fix bugs we use Sentry. When something errors, on the server or in your browser, diagnostic data (the error and a stack trace, the URL, browser and OS, timing) is sent to Sentry. If you're signed in, the report is tagged with your account (id, name, and email) so we can tell which accounts an error affects and follow up if needed. We do not send your IP address, and server profiling captures only our own code's execution timing, never your task content.

Sentry may also capture a short session replay, but only in two cases: when a browser error occurs (the moments around the crash), or when you tick "record" while filing a bug report (and only for that report; you can stop it anytime). Either way all text is masked and all images and media are blocked, so it records layout and clicks, not your task content. We never record normal browsing.

While we're in beta: if you opt in to session recording (the toggle in the beta banner, off by default), Sentry records your interactions including, unlike normal operation, your task text, to help us reproduce problems. You can turn it off anytime, and these beta recordings are deleted when we leave beta. Recordings are stored by Sentry under their security controls (we can't encrypt them with your key). If you never opt in, none of your task content is recorded.

Sharing

Share links expose exactly the slice you choose (a task, a project, or your whole canvas) to whoever holds the link, or only to the member you pin. Links are revocable in the share dialog and can expire automatically.

Who can see your data

• Our team: admin staff can read bug reports (to fix them) and, only with your explicit in-app consent, can temporarily access your account to troubleshoot. We call this consent-based impersonation, and every such session is written to your security audit trail. Your encrypted task content is not otherwise browsable by us.
• Everyone else: nobody, beyond the service providers below acting on our instructions.

Your rights and your data's lifecycle

GDPR gives you most of these rights by law; we extend them to everyone.

• Access and portability: export everything as JSON from Settings → Data & privacy, anytime.
• Rectification: edit your name and email in Settings.
• Erasure: deleting your account destroys your encryption key and your content and removes your bug reports. Your security audit log is anonymised: event types and dates are kept for fraud and abuse prevention, but IP addresses and details are stripped. Backups roll off within 14 days, after which your content cannot be recovered.
• Anything else: email [email protected] and a human will sort it out.

Service providers

We rely on a small set of processors, each only for its stated purpose: Hetzner (server hosting), Cloudflare (CDN, edge, and encrypted backup storage via R2), Stripe (payments), Anthropic (AI features, only when you use them), Sentry (error monitoring), Resend (transactional email), and, only when you connect them, Google and Microsoft (task and calendar sync). We don't sell or share your data with anyone else.

Children

SceneTasks is not directed at children under 13, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.

Changes to this policy

If we change this policy, the update appears here with a new date at the top. For material changes that reduce your protections we'll tell you in the app before they take effect.

Contact

Questions or requests: [email protected].