Privacy policy
Summary
- Veiltask works without an account. Your lists and tasks stay on your device, in an encrypted database.
- If you turn on sync, your content is encrypted on your device before it is sent. Our server stores your content in encrypted form and cannot read your tasks, notes, lists, dates or reminders.
- We show no ads and do not track you. We do not sell data.
- If you forget your passphrase and lose your recovery key, nobody, including us, can recover your data.
What stays on your device
Everything you write (task titles, notes, subtasks, dates, reminders, repeat rules, list names, colours, order, completion) is stored in an encrypted database on your device. The key to that database is kept in the device's secure storage (iOS Keychain or Android Keystore). Reminders are scheduled on the device; they are never sent by our server.
What the server receives when sync is on
| Data | Why | Can the server read it? |
|---|---|---|
| Email address | Your account identifier and sign-in | Yes |
| A key derived from your passphrase, and one derived from your recovery key | To check sign-in; the server stores only a hash of them | No: they cannot be turned back into your passphrase, recovery key or data keys |
| Your master key, wrapped (encrypted) with your passphrase and with your recovery key | So your other devices can open your data | No |
| Encrypted records | Sync between your devices | No |
| For each record: a random id, the id of its list, a key id, a version number and the encrypted size (rounded up) | To sync and detect conflicts | These identifiers, yes; the content, no |
| Device public keys, encrypted device names, platform (iOS or Android), last sync time | Device list and secure sessions | Platform and times, yes; names, no |
| IP address and request times | Operating the service, abuse protection | Yes; kept in server logs for 3 days, then deleted |
The server therefore knows that you have an account, how many records you have and roughly how large they are, when you sync, how many devices you use, and your IP address. It does not know what any of your records say. We do not claim "zero knowledge": the metadata above is visible to us.
Deleting your data
- On a device: sign out and choose "Erase from this device", or uninstall the app.
- On the server: Settings → Delete account. Your account, devices and every encrypted record are deleted immediately from our main database. Database backups expire after 30 days. They may retain encrypted content, account information and the metadata described above until they expire.
Backups you export
"Export backup" creates a JSON file that is not encrypted. You choose where it is saved. Keep it somewhere you trust.
Crash reports
Off by default. If you turn them on, the app keeps a list of error types and code locations on your device, never the error message or any of your content, and shares it only if you export it.
This website
veiltask.com sets no cookies and loads no analytics, fonts or scripts from anyone. Our hosting provider (Cloudflare) processes IP addresses to serve the pages.
Children
Veiltask is intended for users aged 13 and over and is not designed specifically for children under 13.
Where data is stored
Our sync server is currently located in Vietnam. Your tasks, notes, lists, dates and reminders are end-to-end encrypted before they leave your device; the server cannot decrypt this content. Account information and the metadata described above remain readable by the server.
Contact
Veiltask is published by an individual developer, Trương Minh Nhật Quang, who is the controller of the data described here. Once Veiltask is run by a company, the company becomes the controller and this policy will say so.
Questions about privacy: privacy@veiltask.com.