This Privacy Policy describes how SimplTasks ("we," "our," or "us") collects, uses, stores, shares, and protects your personal information when you use our task management application at simpl-tasks.com, our mobile apps on Google Play and the Apple App Store, and our admin dashboard at admin.simpl-tasks.com (collectively, the "Service").

By using SimplTasks, you agree to this policy. We do not sell your personal data.

SimplTasks is a task and project management platform owned and operated by Strategy Advisory Solutions Inc. ("the Company"), a company based in Toronto, Ontario, Canada. This policy applies to all users — free and paid account holders, team members, and visitors.

Information You Provide Directly

Data Type	Examples	Purpose
Account Information	Full name, email address, password (hashed)	Account creation, authentication
Profile Data	Profile picture, job title, notification preferences	Personalization
Task & Project Data	Task titles, descriptions, due dates, statuses, assignments, project names	Core functionality
File Uploads	Images (PNG, JPEG), PDFs, Word (DOCX), Excel (XLSX), text files (TXT)	Task attachments
Communication Data	Support emails, feedback submissions	Customer support

Information Collected Automatically

• Device & Usage Information: Browser type, OS, device model, IP address, pages visited.
• Authentication Tokens: JWT tokens stored on your device for API requests.
• Push Notification Tokens: Device tokens sent to Firebase and OneSignal.
• Local Storage: Maintains auth state and preferences. No third-party tracking cookies.

• To Provide the Service: Managing your tasks, projects, assignments, notifications, and files.
• To Send Notifications: Email (daily summaries, overdue alerts, task assignments, recurring tasks) and push notifications.
• To Authenticate You: Verifying identity and maintaining sessions securely.
• To Communicate: Responding to support requests and sending service announcements.
• To Improve the Service: Analyzing aggregated, anonymized usage patterns.
• To Ensure Security: Monitoring for unauthorized access and enforcing our Terms.

Service	Purpose	Data Shared	Location	Privacy Policy
MongoDB Atlas	Cloud database hosting	All application data	AWS us-east-1 (USA)	MongoDB Privacy
Firebase Admin SDK	Push notification delivery	Device push tokens, notification payloads	Google Cloud (global)	Google Privacy
OneSignal	Web push notification delivery	Device push tokens, notification payloads	United States	OneSignal Privacy
Brevo	Transactional email delivery	Email address, full name, task content	France / EU	Brevo Privacy
AWS (EC2)	Application hosting	All server-side data	AWS us-east-1 (USA)	AWS Privacy
Google Play / Apple App Store	App distribution	No user data	Global	Google / Apple

• Account Data: Retained until you request deletion.
• Task & Project Data: Retained until deleted. Backup rotation: 35 days.
• File Uploads: Retained until task/project deletion or manual removal.
• Email Logs: Per Brevo's policy (typically 30–90 days).
• Notification Records: Auto-purged after 90 days.
• Server Logs: Retained 14 days for security monitoring.

Right	Description
Access	Request a copy of the personal data we hold about you.
Rectification	Request correction of inaccurate data. Most data editable in-app.
Erasure	Request deletion of your account and data. See Data Deletion Request.
Restriction	Request limitation of data processing.
Portability	Request your data in a structured format (JSON/CSV).
Withdraw Consent	Disable email or push notifications at any time.

Notification Preferences

SimplTasks provides granular notification controls. Changes take effect immediately.

Exercising Your Rights

Contact us at support@thestrategysolution.com. We respond within 30 calendar days.

• Encryption in Transit: TLS 1.2+ (HTTPS) for all data transmission.
• Encryption at Rest: AES-256 encryption on databases and file storage.
• Authentication: JWT authentication with bcrypt-hashed passwords.
• Network Security: Database IP-restricted to application servers. Outbound firewall.
• Access Control: Production access limited to authorized personnel with MFA.
• Security Headers: HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy.
• Rate Limiting: Auth endpoints rate-limited to prevent brute-force attacks.
• Regular Audits: Dependency vulnerability scans and security assessments.

SimplTasks is not intended for individuals under 16. We do not knowingly collect data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will delete it promptly. Parents or guardians who believe we may have collected such data should contact us at support@thestrategysolution.com.

SimplTasks is hosted on AWS in the United States. For EEA/UK/Switzerland users, adequate safeguards are in place including Standard Contractual Clauses (SCCs). Brevo processes email data in France (EU).

Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data under the following legal bases (GDPR Article 6):

• Contract: Processing necessary to perform our agreement with you (providing the Service).
• Legitimate Interest: Processing for security monitoring, fraud prevention, and service improvement.
• Consent: Processing for push notifications and marketing communications — you may withdraw consent at any time.
• Legal Obligation: Processing required to comply with applicable law.

Canadian Privacy Rights (PIPEDA)

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. You may request access to, or correction of, the personal information we hold about you, and you may challenge our compliance with these principles, by writing to the address in the Contact Us section below.

CCPA and CPRA grant you the right to know, delete, correct, and access your information. SimplTasks does not sell or share personal data for cross-context behavioral advertising. To submit a verifiable consumer request, email support@thestrategysolution.com or write to us at 5200 Yonge Street, Toronto, Ontario M2N 5P6, Canada.

Category	Collected?	Sold or Shared?
Identifiers (name, email, IP)	Yes	No
Personal information (Cal. Civ. Code § 1798.80(e))	Yes	No
Internet / electronic network activity	Yes	No
Geolocation data	No	No

We will post updates on this page with a new date and notify active users via email or in-app notification at least 14 days before material changes take effect.

Email	support@thestrategysolution.com
Data Deletion	Data Deletion Request Form
Company	Strategy Advisory Solutions Inc.
Address	5200 Yonge Street, Toronto, Ontario M2N 5P6, Canada