Privacy Policy

Effective / last updated: 22 July 2026

1. Who we are

TaskIt is a team task-management platform operated by Pathfinder Innovation Portal LLC(“we”), Dubai Economic Department registration no. 2008916, registered at Al Salam Tower, Ground Floor R01, Dubai Media City, Dubai, United Arab Emirates. TaskIt is used by organisations; your workspace administrator controls your access to it.

2. What data we collect

  • Account information — your name, work email address, organisation membership and role, and (if your organisation uses Microsoft sign-in) your Microsoft directory and user identifiers.
  • Content you create — tasks, subtasks, comments, chat messages, projects, labels, and the files and images you attach.
  • Activity records— actions taken in the workspace, retained as your organisation’s audit and activity history.
  • Device notification tokens — if you use the mobile app and enable notifications, so we can deliver them to your device.
  • Diagnostics — crash reports and performance data, including device model and operating system version.

We do not collect your location, contacts, calendar, health or financial information, and we do not use advertising identifiers.

3. How we store it

Your data is stored in Supabase (PostgreSQL) hosted in ap-southeast-1 (Singapore). Row-level security scopes every query to your organisation, and private tasks are additionally restricted to their collaborators. All data is encrypted in transit. Backups are retained for 7 days.

4. Authentication

You sign in with an email address and password. If your organisation has connected its Microsoft Entra directory, you may instead sign in with Microsoft. That option requests identity information only (openid email profile) — we request no access to your mail, files or calendar, and we never receive your Microsoft password.

5. Mobile app

The TaskIt mobile app stores your session securely on your device. If you enable notifications, we store a device notification token so we can alert you about task assignments, mentions and messages. Photos and files are accessed only when you choose to attach them to a task.

6. Transactional email

Transactional email is sent via ZeptoMail. Your email address is used only for notifications arising from your use of the service, such as invitations, mentions and missed direct messages. We do not send marketing email.

7. Data sharing

We do not sell personal data and we use no advertising networks. We share data only with the processors below, which act on our instructions:

  • Supabase — database, authentication, file storage.
  • ZeptoMail — transactional email delivery.
  • Sentry — crash and performance monitoring.
  • Expo, Apple Push Notification service and Google Firebase Cloud Messaging — delivery of push notifications to your device.
  • Microsoft — only if your organisation uses Microsoft sign-in, and only for verifying your identity.

8. Deleting your account

You can delete your account yourself at any time — in the mobile app at More → Account → Delete account, or on the web at taskit.app/account/delete. Deletion is permanent and cannot be undone.

What is deleted

  • Your sign-in credentials and any linked Microsoft identity. You will no longer be able to sign in.
  • Your name and email address are removed from every workspace you belonged to.
  • Your device notification tokens, so notifications stop.

What is retained, and why

  • Tasks, comments and messages you created remain in your organisation’s workspace, attributed to “Former member” rather than to you. These are your organisation’s business records; deleting them would remove other people’s project history and the context of their own work. Your organisation, not you, is the controller of that content.
  • Security and activity audit records are retained for 12 months to meet your organisation’s security and compliance obligations.
  • Backups may retain deleted data for up to 7 days before expiring.

When deletion is blocked

If you are the only administrator of a workspace, or the only owner of a project, deletion is refused until you hand those responsibilities over. Otherwise your colleagues would be locked out of resources only you can manage. The app tells you exactly which items to transfer.

If you can no longer sign in, contact us at support@taskit.app and we will delete your account on your behalf after verifying your identity.

9. Data retention

Content is retained while your organisation’s workspace is active. If your organisation ends its use of TaskIt, its data is deleted within 30 days. Individual account deletion is described in section 8.

10. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export or erase your personal data, and to object to or restrict certain processing. You can exercise erasure directly using the account deletion described in section 8. For anything else, contact us at support@taskit.app. Because your workspace administrator controls the organisation’s content, some requests may need to be directed to them, and we will tell you if that is the case.

11. Children

TaskIt is a workplace product intended for people aged 18 and over. We do not knowingly collect data from children.

12. Contact

Pathfinder Innovation Portal LLC, Al Salam Tower, Ground Floor R01, Dubai Media City, Dubai, United Arab Emirates. Email support@taskit.app. See also our support page and terms of service.

← Back to TaskIt