Privacy Policy

1. Who we are

anTask (“the App”, “we”, “us”, “our”) is operated by Credible Arena (OPC) Private Limited. This Privacy Policy applies to the anTask mobile application (bundle/package id com.crediblearena.antask) and to https://antask.app. By using the App or this site, you agree to the practices described here.

For any privacy question, or to exercise your rights, contact us at privacy@antask.app.

2. Summary

• We are a task manager, not an ad business. We do not sell your personal data and we do not use it for third-party advertising.
• You sign in with your phone number via a one-time code sent over WhatsApp. We do not store passwords.
• Your task content is end-to-end encrypted. Task titles, descriptions, comments, and attachments are encrypted on your device with keys only you and the people you share a task with hold — we cannot read them, and they are never stored on our servers in readable form.
• Your tasks live on your device first and sync in encrypted form so you can collaborate. You can keep an encrypted backup in your own Google Drive or iCloud.
• Payments are handled by Apple and Google, not by us. We never receive your card or bank details.
• You can delete your account and data at any time — see Account & Data Deletion.

3. Data we collect

We collect only what we need to run the service:

a. Information you provide

• Phone number & country code — used to create your account and verify you via a one-time WhatsApp code.
• Profile details — an optional display name, bio, and profile photo you choose to add.
• Task content (end-to-end encrypted) — the titles, descriptions, comments, and attachments you create are encrypted on your device before they reach us; we store and relay them only in encrypted form and cannot read them. To deliver and organize your tasks we do process related metadata in readable form: who a task is shared with, its status, priority, due dates, timestamps, and delivery/read receipts.
• Subscription seat assignments — if you buy a multi-seat plan, the phone numbers you attach to seats.
• Support communications — messages you send us by email or through support.

b. Contacts (only if you allow it)

To let you assign tasks to people you know, the App can access your device contacts. Contact information is used to match and display people you can assign tasks to. We only process the contacts needed to provide this feature, and you can deny or revoke this permission at any time in your device settings (the App still works without it). We do not sell contact data or use it for advertising.

c. Media & files (only if you use them)

If you add a photo or attachment to a task or profile, the App accesses your camera and/or photo library for that action only. Attachments you add to tasks are end-to-end encryptedon your device before upload, so we store them only in encrypted form.

d. Information collected automatically

• Device & app info — device model, operating system version, app version, language, and a device identifier used to route notifications.
• Push notification token — a token from Apple Push Notification service / Firebase Cloud Messaging so we can deliver task notifications.
• Diagnostic & log data — technical logs (e.g., timestamps, IP address, error events) used to keep the service secure and reliable.
• Connection & delivery metadata — presence (online/offline) and delivery/read receipts so collaboration works like a chat.

e. Purchase information

When you subscribe, the App Store or Google Play tells us that a valid purchase exists and gives us a purchase/transaction identifier, product id, plan tier, and renewal status. We never receive your payment card, bank, or full billing details — those stay with Apple or Google.

4. How we use your data

• To create and secure your account and verify sign-in (WhatsApp one-time code).
• To provide the core service: create, assign, sync, and deliver tasks across devices and people.
• To send task notifications and reminders (live when you’re online, push when you’re offline).
• To operate subscriptions — validate purchases, manage seats, and enforce that one number holds one seat.
• To provide customer support and respond to your requests.
• To maintain safety, prevent abuse/fraud, debug, and improve reliability and performance.
• To comply with legal obligations.

We do not use your personal data for third-party advertising, and we do not sell it.

5. Device permissions

The App asks for permissions only when a feature needs them. Each is optional and can be revoked in your device settings:

6. Legal bases (GDPR / UK GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the App and its features to you.
• Consent — for optional permissions such as contacts, camera, and notifications (you may withdraw consent anytime).
• Legitimate interests — to secure the service, prevent abuse, and improve reliability.
• Legal obligation — where we must retain or disclose data by law.

7. Sharing & service providers

We share data only as needed to run anTask, with the following categories of processors:

We also share data with the people you choose — when you assign a task or add someone to a team/project, they can see the relevant task content. We may disclose information if required by law, to protect our rights or users’ safety, or in connection with a merger or acquisition (with notice where required).

8. Payments & in-app purchases

anTask subscriptions are sold exclusively through the Apple App Store and Google Play using their in-app purchase systems. All billing, renewals, and refund requests are handled by Apple or Google under their terms. We only receive confirmation that a valid subscription exists and its status. Full billing terms are on our Subscription & Refunds page.

9. Data retention

We keep your account and task data for as long as your account is active. One-time codes expire within minutes. Diagnostic logs are kept for a limited period for security and troubleshooting. When you delete your account, we delete or irreversibly anonymize your personal data as described in Account & Data Deletion, except where we must retain limited records to meet legal, tax, or fraud-prevention obligations.

10. How we protect your data

• End-to-end encryption of task content. Titles, descriptions, comments, and attachments are encrypted on your device using modern public-key cryptography (X25519 sealed boxes with XSalsa20-Poly1305). Only you and the people you share a task with hold the keys; our servers only ever see ciphertext.
• Encrypted backups in your own cloud. Optional backups are encrypted with a key derived from your backup password and stored in your own Google Drive / iCloud — we never hold that key, so a forgotten backup password cannot be recovered.
• Passwordless sign-in — there is no password to steal.
• On-device data is stored in the app’s encrypted database; private keys are held in the platform secure keychain / keystore.
• Data in transit is protected with TLS/HTTPS and an authenticated, encrypted real-time channel.
• Access to production systems is restricted and monitored.

No method of transmission or storage is 100% secure, but we work continuously to protect your information.

11. Your rights

Depending on where you live (e.g., EEA/UK GDPR, California CCPA/CPRA, India DPDP Act), you may have the right to:

• Access the personal data we hold about you and request a copy.
• Correct inaccurate data (much of which you can edit in-app).
• Delete your account and data (see below).
• Object to or restrict certain processing, and withdraw consent.
• Data portability, where applicable.
• Lodge a complaint with your local data protection authority.

To exercise any right, email privacy@antask.app. We do not discriminate against you for exercising your rights.

12. Account & data deletion

You can delete your account and associated data at any time — directly in the App (More → Account → Delete account) or by request via our Account & Data Deletion page, which explains exactly what is deleted and the timeline.

13. Children

anTask is intended for people aged 13 and older (or the minimum age of digital consent in your country, whichever is higher — e.g., 16 in parts of the EEA). We do not knowingly collect data from children below that age. If you believe a child has provided us data, contact us and we will delete it.

14. International data transfers

We and our providers may process data in countries other than yours. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

15. Changes to this policy

We may update this policy from time to time. We’ll change the “Effective” date above and, for material changes, provide notice in the App or by other reasonable means. Your continued use after an update means you accept the revised policy.

16. Contact us

Credible Arena (OPC) Private Limited
Privacy: privacy@antask.app
Support: support@antask.app