The short version

• Your tasks live on your computer. FloatTask stores your task list, timers and settings in a local file on your device. We don't upload it.
• You sign in with Google or with a code we email you. We keep your account id, email and (with Google) your name so your subscription and AI allowance follow you between computers.
• Calendar is read-only and optional. If you connect it, FloatTask reads upcoming events on your device to show meetings and help you prepare. We don't store your calendar on our servers.
• AI features send what they need, when you use them. The relevant tasks and calendar events go through our servers to Anthropic to generate a response. We keep counts, not content.
• Stripe handles payment. We never see your card number.
• No ads, no selling data. The website uses Google Analytics to count visits. The app has no analytics or trackers.

What we collect

On your device (not sent to us)

Tasks, notes, due dates, projects, task types, timers, reminders, app settings, your sign-in tokens (Google or email) and a cached copy of your plan status. All of this is kept in FloatTask's data folder on your computer and leaves only in the cases described below.

Account information (stored on our servers)

When you sign in with Google we store your Google account identifier, email address and display name. When you sign in with an emailed code we store your email address and an account identifier, and we send that address a one-time code each time you ask for one. Either way we also store your plan (trial, Pro, Pro+ or complimentary), when you last used Assist (FloatTask's built-in AI), and a per-day count of AI requests with their token usage and estimated cost. This is how we enforce fair-use limits and tie your subscription to your account.

Support messages

If you use the contact form we keep the message, your name and email, and the topic you chose so we can reply and keep track of bugs.

Email updates

If you sign up for updates on floattask.com/waitlist.html we keep your email address, whether you asked for School mode news, where the visit came from (for example Instagram, taken from the link you followed), when you signed up, a one-way hash of your IP address to stop spam signups, and your browser's user agent. We use this only to send FloatTask news, at most a few emails a month. Every email has a link to unsubscribe, or you can ask us to remove your address. Unsubscribing stops the emails at once; we delete the address on request or within 12 months of unsubscribing.

What we don't collect

We don't run advertising trackers anywhere, and the app has no analytics. We don't collect your IP address beyond what our hosting providers and Google Analytics log, and don't read your files, screen or other apps.

Website analytics

floattask.com uses Google Analytics to understand how many people visit and which pages they read. When it runs, it sets cookies and records pages viewed, approximate location, device and browser, and where the visit came from. We use this only to improve the site; it is never linked to your FloatTask account or tasks.

If your device is set to a time zone in Europe (including the UK and Switzerland), the site asks first, and Google Analytics stays off unless you choose Allow analytics. Elsewhere it runs by default. Anyone can change their choice at any time from Cookie settings at the bottom of every page; choosing No thanks stops it and removes its cookies. Your choice is kept in your browser. You can also opt out with your browser's tracking protection or Google's opt-out add-on. The site also remembers your light/dark preference in your browser.

Google data

FloatTask asks Google for two things, at two different times:

• Sign-in (openid, email, profile) — your account id, email and name. Used to identify you to our billing and AI services.
• Calendar events, read-only (calendar.events.owned.readonly) — requested only when you click Connect calendar. Used to show upcoming events in the app, link tasks to meetings, send a reminder before a meeting, and let Assist suggest prep tasks or brief you on your day.

Calendar data is fetched directly from Google by the app on your computer and is not stored on our servers. When you ask Assist something that involves your calendar (for example "what should I prepare for today?"), the titles, times and attendee names of the relevant upcoming events are included in that request so the model can answer; they are processed to produce the response and are not retained by us afterwards. Calendar data is never used for advertising, never sold, and never used to train AI models.

Disconnecting Google in Settings revokes FloatTask's access at Google and deletes the tokens from your device. You can also revoke access at any time from your Google account permissions.

AI features

Assist (the chat panel, Add with AI, smart reminders and daily briefs) is powered by Anthropic's Claude models, called through FloatTask's own servers so you never need an API key. When you use an AI feature, the app sends the text you typed plus the context the feature needs — typically your current task list and, if connected, upcoming calendar events — to our server, which forwards it to Anthropic and returns the answer.

• We record that a request happened (date, count, tokens used, estimated cost) to enforce plan limits. We do not store the content of your prompts or the responses.
• Anthropic processes the content to generate a response under its commercial terms, which do not permit training on API data.
• If you turn off AI features, or use your own Anthropic key under Advanced settings, nothing is sent to our AI servers.

Payments

Subscriptions are processed by Stripe. Checkout and the billing portal open in your browser on Stripe's pages; your card details go directly to Stripe and never pass through FloatTask. We store your Stripe customer id, subscription id, plan, billing interval, renewal date and status so the app knows what you're entitled to.

Who we share data with

We don't sell personal data and don't share it with anyone except the providers that run FloatTask:

We may also disclose information if required by law, or to protect the rights and safety of FloatTask and its users.

Retention and deletion

• Local data stays on your computer until you delete it or uninstall FloatTask (the data file is in FloatTask's application-data folder).
• Account and subscription records are kept while you have an account. Daily AI usage counts are kept for up to 13 months for billing and abuse prevention.
• Support messages are kept for up to 2 years.
• Update-list addresses are kept until you unsubscribe, then deleted within 12 months (or straight away if you ask).
• To delete your account and everything we hold about it, contact us from the email you signed in with. We'll confirm within 30 days. Cancelling a subscription doesn't delete the account; deletion ends any active subscription.

Security

Data in transit is encrypted with TLS. Server-side data is stored with Supabase in the United States with access restricted to the service itself. Your sign-in tokens are stored only on your device. Sign-in to our services is verified on every request, against Google's public keys or with Supabase Auth for email sign-in. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.

Children

FloatTask is not directed at children under 13 (or the age of digital consent in your country) and we don't knowingly collect their data.

Changes

If we change this policy in a way that matters, we'll update the date above and note it in the app or on the site. Continued use after a change means you accept the new policy.

Contact

Questions about privacy or your data: floattask.com/contact or admin@floattask.com.