Privacy Policy

• Account details. Your name, your email address, your timezone (detected from your device so due dates show at the right local time, and editable in your profile), and your age if you choose to add it. If you sign up with email, we also store your password, but only as a one-way bcrypt hash. We never see or keep the password itself.
• Profile picture.If you upload one (PNG, JPG, or GIF, up to 5 MB).
• Google sign-in.If you continue with Google, we ask Google only for your basic profile and email address. We keep your name, email, and Google account ID so we can recognise you next time. We never receive your Google password, and we don't access your Gmail, Drive, contacts, or calendar.
• Invitations.When a workspace Owner or Admin invites someone, we store the invited email address, the role offered, and who sent it, and email that address an invitation link. If you received an invitation, that's how we have your address; if you never accept, you never become a member.
• Sign-in sessions. Each time you sign in we record when the session started, when it expires, and your browser type, so it can be ended when you sign out or reset your password.
• Your tasks.Each task's title, description, status, priority, and deadline, plus when it was created and last changed.
• Server logs. When your browser talks to our server, we record your IP address, browser type, the address requested, and the time. We also log account and task activity, such as sign-ins, failed sign-in attempts, and the titles of new tasks, alongside your email address or account ID.

Afritask stores a few things in your browser. Two cookies keep you signed in: afritask_access (renewed every 15 minutes) and afritask_refresh. They're strictly necessary, can't be read by scripts on the page, and stop working when you sign out or after 7 days. In local storage, afritask_theme remembers whether you prefer light or dark mode.

Those sign-in cookies are the only cookies we set. We don't use cookies to track you, and Afritask has no analytics, advertising, or third-party tracking scripts. The Cookie Policy lists everything Afritask keeps in your browser, and how to clear it.

• To create your account, verify your email, sign you in, and reset your password when you ask.
• To store and show your tasks. Every request is checked against your account, so you only ever see your own tasks.
• To send the emails the app depends on (see the next section).
• To keep Afritask working and secure, for example by fixing errors, looking into suspicious sign-in activity, and preventing abuse.

We don't sell your information, use it for advertising, or share it with other Afritask users.

• A link to verify your email when you sign up, and a welcome message once your account is active.
• Password reset links when you request them, and a notice whenever your password changes.
• Task reminders.When a task's reminder time arrives (one day before its deadline unless you chose another time, or none), and once if it becomes overdue while still open, and the day before a task you planned to start, we email the person it's assigned to (or its creator if nobody is). The email includes the task's title, deadline, and description.

We don't send marketing email. To stop a reminder for a task, set its reminder to “No reminder”, mark it complete, or remove its deadline.

We share information only with the service providers that help run Afritask, and each one gets only what it needs:

• Brevo delivers our emails, so it receives your email address and the content of each message. That includes your name and, for reminders, your task details.
• Google takes part only if you choose Google sign-in, as described above.
• Hosting providers run our website, server, and database, and store the information described in this policy for us.

We may also share information if the law requires it, or to protect Afritask's users from harm or fraud.

Your picture is stored on our server and shown through a link that isn't published or listed anywhere. However, anyone who has that exact link can open the image, so please don't upload a picture you need to keep strictly private.

• Passwords are hashed with bcrypt before they're saved.
• Email verification and password reset links use long random tokens that expire, and a reset link stops working once it has been used. We store only a one-way hash of every link and session, never the token itself.
• Your tasks can be read or changed only by requests from your signed-in session. Resetting your password signs you out on every device.
• Data travels between your browser and our servers over encrypted HTTPS connections.

No online service can promise perfect security, but we work to keep your information safe and will let you know promptly if a breach affects your account.

We keep your account details and tasks for as long as your account exists. When you delete a task, we remove it from our database right away. We keep server logs only as long as we need them for troubleshooting and security.

If you ask us to delete your account, we remove your account details, your tasks, and your profile pictures, including earlier ones you have since replaced.

• See and edit your details. Update your name, age, and profile picture, or change your password, on your Profile page.
• Delete tasks at any time from your dashboard.
• Get a copy of the information we hold about you, or ask us to correct it.
• Delete your account.You can't delete your account in the app yet. Email us from the address on your account and we'll delete your account and everything linked to it within 30 days.
• Disconnect Google.You can remove Afritask's access at any time from your Google Account permissions.

Afritask isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has created an account, contact us and we'll delete it.

If we change how we handle your information, we'll update this page and the “Last updated” date at the top. For significant changes, we'll also email you before they take effect.

Have a question, or want to see, correct, or delete your data? Write to us from the Contact pageand we'll get back to you by email.