TasMan Privacy Policy

RU EN

Effective date: 11 October 2026 Version: 1.0 Current version available at: https://aibusy.org/en/documents/privacy-policy

1. Who we are

The TasMan app for iOS ("TasMan", the "app") is developed and provided by [FULL NAME OF SOLE PROPRIETOR], a sole proprietor registered in the Kyrgyz Republic ("we", "us"). We determine the purposes and means of the processing described in this Policy and are responsible for it.

Address for legal notices: [ADDRESS]
Email for data protection matters: [PRIVACY-EMAIL]
Terms of Use: https://aibusy.org/en/documents/terms-of-use

This Policy explains what data TasMan version 0.2.2 and later processes, why, who receives it, how long it is kept, and what rights you have. It applies to the TasMan app and to communications related to it.

2. In short

TasMan has no account. You do not sign up and do not enter a name, email or phone number.
Your lists, tasks, subtasks, reminders and settings stay on your iPhone. We do not receive them on any server and cannot read them.
By default, the app sends information about how the interface is used and technical device data to the analytics service AppMetrica (Yandex). The text of your tasks and lists is never included. You can turn analytics off at any time: Settings → Privacy → "Send usage statistics" (Section 5).
If you contact us through the in-app feedback form, the message text, platform and app version go to Formspree, and a copy is forwarded to our Google (Gmail) mailbox.
TasMan Plus is purchased through the App Store. Payment data is handled by Apple; we never receive it.
We show no ads, do not sell data, do not track you across other companies' apps and websites, and do not use the advertising identifier (IDFA).

3. What data is processed and where

3.1. Data on your device — we do not receive it

While using TasMan you create lists, tasks and subtasks, set priorities, dates and reminders, choose colours, icons, language and other settings.

All of this is stored locally on your device: in the app's storage and in the shared container of the app and its widgets (App Group). The shared container lets the Home Screen widget, the Lock Screen widget and the Live Activity ("Focus Session" in the Dynamic Island and on the Lock Screen) display the tasks you selected. The Live Activity is updated locally, without server push notifications.

We have no access to this content. TasMan has no cloud of its own and no iCloud sync.

Backups. If backup is enabled on your iPhone (iCloud or computer), Apple's system may include TasMan data in the backup according to your device settings. After reinstalling the app, data may be restored from such a backup. This is an Apple feature, not a TasMan feature; we do not control it and have no access to backups.

Deletion. Deleting the app together with its data erases TasMan's local data, including the shared widget container. Individual tasks and lists are deleted inside the app. Completed tasks may be removed automatically after the period you choose in Settings. Device backups are deleted through iOS and iCloud.

3.2. iOS system permissions

Notifications. Task reminders are local notifications scheduled by the app itself on your device. We have no push notification server. The permission is requested when you create your first reminder.

Calendar. When you add a task to Calendar, TasMan uses the system interface (EventKit) to create an event in the calendar you choose and then updates or removes that event when you change or delete the task date. For this the app requests full access to calendar events — an iOS requirement for modifying previously created events. We use this access only for events created by TasMan and do not read, copy or transmit other events in your calendar. Further storage and sync of the event depend on the chosen calendar (for example iCloud or Google Calendar) and its settings.

Both permissions can be changed in iOS Settings. Declining limits the corresponding feature and affects nothing else.

3.3. Usage analytics — AppMetrica

What it is. TasMan includes the AppMetrica analytics service by Yandex. It helps us understand which features are needed, where users get stuck and whether the app runs stably on different devices.

When it runs. Analytics is enabled by default from the first launch. You can turn it off at any time in Settings → Privacy → "Send usage statistics". Once off, the app sends nothing to AppMetrica — no events, no technical information, no identifiers — and does not accumulate anything for later sending. App features and access to TasMan Plus do not depend on this setting. See Section 5 for details.

What is sent.

Interface events: screens opened, elements tapped, onboarding steps, display and dismissal of the TasMan Plus screen, start and end of a Live Activity, task creation and completion, evaluation of the conditions for showing a review prompt. Each event carries service parameters: screen type, reason for the action, task count, duration in milliseconds, plan identifier, purchase error code, a hash of the task or Live Activity identifier.
Technical information: device model, iOS version, TasMan version, interface language and region, time zone, screen resolution, network connection type, session timestamps and duration.
Identifiers: a generated AppMetrica installation identifier and Apple's identifier for vendor (IDFV). The advertising identifier (IDFA) is not used, and the App Tracking Transparency prompt is not shown because there is no tracking.
Network data: your device's IP address. AppMetrica derives country and region from it. Precise location detection is disabled in TasMan.

What is not sent. The text of tasks, subtasks and lists, the names and notes you enter, Calendar content, the content of feedback messages. Automatic crash reports and automatic purchase tracking in AppMetrica are disabled.

Can you be identified. TasMan has no account; we do not know your name or email. However, the installation identifier and IP address make it possible to link events to a specific device, so we treat this data as personal data and declare it in the App Store "App Privacy" section as data linked to the user. We do not combine it with data from other sources and do not use it for advertising.

3.4. Feedback

If you send a message through the in-app "Feedback" form, we receive:

the message text (up to 2,000 characters);
the platform (iOS);
the app version.

The form has no fields for name, email or attachments. If you include contact or other personal details in the text yourself, they become part of the message.

Messages are received by Formspree (Formspree, Inc., USA), which forwards a copy to our Gmail mailbox (Google LLC). Formspree may process technical request data such as the IP address for spam protection under its own privacy policy.

If the network is unavailable, the message is stored on your device and sent later; an unsent message is deleted after 7 days.

If you write to us directly at [PRIVACY-EMAIL], we receive your address and everything you include in the email.

Please do not send passwords, payment details, health information or other people's data.

3.5. Purchases — TasMan Plus

TasMan Plus is purchased only through the App Store using Apple's StoreKit. The payment, card data and your Apple ID are processed by Apple under its own rules. We do not receive your card number, name or address.

The app receives from Apple and stores on the device information about the purchase result and your current Plus entitlements in order to unlock and restore paid features. We have no receipt-validation server of our own. The fact that the Plus screen was shown, a plan selected, a purchase succeeded or failed with an error code is sent to analytics without amounts or payment data.

The rating prompt is shown through Apple's system interface; TasMan does not learn whether you rated the app.

3.6. What TasMan does not have

an account or sign-in via Apple, Google or social networks;
cloud storage or sync of tasks;
advertising or advertising SDKs;
tracking across other companies' apps and websites;
precise geolocation;
automatic crash reporting;
server-side delivery of updated translations (the Lokalise library is present in the app but does not connect to the network without configuration).

If any of these features is introduced, we will update this Policy before the new processing starts and, where the law requires, ask for your consent separately.

4. Legal bases

We process data on the grounds provided by the law of the Kyrgyz Republic and, for users in other countries, also on the grounds of their applicable law (see Section 10).

Processing	Legal basis
Local operation of the app, widgets, Live Activity, reminders, calendar	Performance of our contract with you — providing the features you requested
Purchase and restoration of TasMan Plus	Performance of our contract with you
Handling feedback	Performance of the contract and our legitimate interest in supporting users
Usage analytics	Our legitimate interest in improving and keeping the app stable, subject to the limits in Section 3.3 and your rights under Section 5
Keeping records, answering requests, disclosures required by law	Compliance with legal obligations

Installing the app or reading this Policy is not consent to any future processing. Where the law requires separate consent, we ask for it separately.

5. How to turn off analytics and manage your data

Turn off analytics. Settings → Privacy → "Send usage statistics". The switch takes effect immediately: the app stops sending data to AppMetrica and does not accumulate it on the device for later sending. Your choice is kept between launches. You can turn it back on in the same place.

Installation identifier. The same Settings section shows your installation identifier — a random string by which your device's data can be located in the analytics service. It contains no name or other information about you. Tap "Copy" to paste it into an email to us.

Request a copy or deletion of data already sent. Write to [PRIVACY-EMAIL], mention "TasMan" and include the installation identifier. Using it, we will export your device's events or forward a deletion request to the analytics provider and confirm completion to you. Without the identifier, locating a specific device's data is impossible: TasMan has no account, and device model and dates are not sufficient for a search.

Delete the app. After deletion, no data is sent. Previously sent events remain with the analytics provider until the retention period in Section 8 expires or until they are deleted at your request. If you plan to request deletion, copy the installation identifier before deleting the app — after reinstalling, it will be a new one.

System permissions (notifications, calendar) are revoked in iOS Settings — this stops the corresponding feature and affects nothing else.

Turning off analytics does not affect the feedback form: it sends a message to Formspree only when you tap "Send" (Section 3.4).

6. Who receives data

We share data only with providers needed for the described features and only to the extent necessary.

Recipient	Purpose and data	Processing location
AppMetrica — Yandex LLC, Russia	Usage analytics: interface events, technical information, installation identifier and IDFV, IP address (Section 3.3). Processes on our behalf.	Russian Federation. Documents: AppMetrica Terms of Use, Data Processing Agreement
Formspree, Inc., USA	Receiving feedback: message text, platform, app version; technical request data for spam protection. Processes on our behalf.	USA (Amazon Web Services infrastructure). Formspree Privacy Policy
Google LLC (Gmail), USA	Delivery and storage of feedback copies, correspondence with you. Processes on our behalf.	USA and other countries where Google data centres are located. Google Privacy Policy
Apple — Apple Inc. (USA) and Apple Distribution International Ltd. (Ireland)	Purchases and restoration of TasMan Plus, App Store, rating prompt, system backups. Apple acts as an independent controller under its own terms.	Under Apple's rules. Apple Privacy Policy

We do not sell data or share it with third parties for commercial purposes. Data may be disclosed to a competent authority where required by law or a binding request, and only to the extent necessary.

7. International transfers

Data that stays on your device is not transferred anywhere. Analytics data is processed in Russia; feedback data is processed in the USA and other countries where Formspree and Google servers are located. These countries may be outside your country and outside the Kyrgyz Republic.

For such transfers we enter into data processing agreements with providers containing obligations on purposes, confidentiality, security and the exercise of your rights, and, for users in the EU/EEA, the United Kingdom and Switzerland, standard contractual clauses approved by the relevant regulators. A copy of the applicable safeguards can be requested at [PRIVACY-EMAIL].

8. Retention periods

Data	Period
Tasks, lists and settings on the device	Until you delete them or delete the app with its data. Backups — per your iOS/iCloud settings
Analytics events and technical data (AppMetrica)	No longer than 24 months from the event, then deleted or anonymised into aggregate statistics
Feedback in Formspree and copies in Gmail	12 months after the matter is closed, then deleted
Unsent feedback messages on the device	7 days
Technical logs of Formspree and Google	Under those services' rules
Correspondence on rights requests and proof of their completion	3 years from the date of the reply — to demonstrate compliance

After the period expires, data is deleted or transformed so that it can no longer be linked to a device or person. Deleting the app does not automatically delete previously sent feedback or analytics data — the periods above and Section 5 apply to them.

9. Your rights

Depending on the applicable law, you have the right to:

learn what data about you is processed and receive a copy;
have inaccurate data corrected;
have data deleted;
restrict processing or object to it, including objecting to analytics based on legitimate interest;
receive your data in a machine-readable format where provided for;
lodge a complaint with a supervisory authority.

How to contact us. Write to [PRIVACY-EMAIL], mention "TasMan", describe your request and include the installation identifier from the app's Settings (Section 5) — it is the only key by which we can locate your device's data. We will ask only for what is necessary to locate the data and verify the request proportionately, and we will explain if the details are insufficient. A passport or other documents are not required by default.

If the identifier is unavailable (the app has already been deleted and the identifier was not saved), we cannot single out your device's data among others and are not entitled to collect additional information about you solely for that purpose. In that case the data is deleted under the general retention period in Section 8.

Objection to analytics is exercised through the switch in Settings (Section 5) and does not require contacting us.

Response time. We respond within the period set by the applicable law: for users in the Kyrgyz Republic, no later than 7 business days; for users in the EU/EEA and the United Kingdom, no later than one month, with a possible extension permitted by law of which we will inform you.

Local data. We cannot see the data on your device and can neither restore nor delete it — you do this through the app and iOS.

Supervisory authority. In the Kyrgyz Republic: the State Agency for Personal Data Protection, dpa.gov.kg. Users in other countries may contact their local supervisory authority. Contacting us first is not required.

10. Users in specific regions

10.1. EU/EEA, United Kingdom, Switzerland

If you are located in these countries, the GDPR / UK GDPR / FADP applies. The controller is [FULL NAME OF SOLE PROPRIETOR], contact [PRIVACY-EMAIL]. Legal bases are listed in Section 4; transfers to Russia and the USA are covered by standard contractual clauses (Section 7). You may object at any time to analytics based on legitimate interest — turn it off in the app's Settings (Section 5); to have data already sent deleted, write to us with your installation identifier and we will delete it unless another legal ground applies. You may also lodge a complaint with the supervisory authority of the country where you live or work.

10.2. United States

We do not sell personal information and do not share it for targeted advertising within the meaning of US state privacy laws. We do not use data for profiling with legal or similarly significant effects. Access and deletion requests are accepted at [PRIVACY-EMAIL] without discrimination for exercising your rights.

10.3. Russian Federation

Users in Russia may send requests to [PRIVACY-EMAIL]. Analytics data is processed on Yandex servers in Russia.

11. Children

TasMan is intended for users aged 12 and older; this is the age rating shown in the App Store. The app is a general-purpose task planning tool and is not directed at children under 13. We do not ask for age and do not knowingly collect anything about children beyond the technical analytics described in Section 3.3.

If you are a parent or legal guardian and believe that a child below the age at which the applicable law allows independent consent (14 in the Kyrgyz Republic, 13 to 16 in the EU depending on the country, 13 in the USA) is using TasMan and their data is being processed, write to [PRIVACY-EMAIL]. We will locate and delete the installation data at your request.

12. Security

We apply organisational and technical measures proportionate to the nature of the processing: transmission to providers only over encrypted channels (HTTPS), minimisation of the data transmitted, provider dashboards accessible only to the operator with two-factor authentication, and selection of providers with published security measures.

Data on your device is protected by iOS: device encryption, passcode and Face ID / Touch ID according to your settings. TasMan adds no end-to-end encryption of its own on top of the system's and stores no data outside the device.

No one can guarantee absolute security; in the event of an incident affecting your data, we will notify you and the supervisory authority in the manner and within the time limits required by law.

13. Changes to this Policy

The current version is always available at https://aibusy.org/en/documents/privacy-policy and via the link in the app. When we change it, we indicate the new effective date and version number.

We announce material changes — new data categories, new purposes, new recipients, activation of features from Section 3.6 — in the app before the new processing starts. If a change requires your consent, updating the text alone is not enough: we will ask for consent separately.

14. Contact

[FULL NAME OF SOLE PROPRIETOR] Kyrgyz Republic, [ADDRESS] Email for data protection matters: [PRIVACY-EMAIL]

This Policy is available in Russian and English. In case of discrepancy, the Russian version prevails for users in the Kyrgyz Republic and the English version for all other users.