Privacy Policy - Takt Workspace

This Privacy Policy applies to the Takt web application (“Takt”, “we”, “our”, or “the Service”) accessible at https://takt.harisarshad.site/, developed, owned, and operated by Haris Arshad.

Takt is a high-velocity personal and team task command center, Kanban cadence workspace, daily planner, and Pomodoro focus manager. This policy provides a comprehensive, transparent explanation of how our application accesses, collects, uses, stores, protects, and discloses user information, with specific focus on data obtained via Google Identity Services (Google OAuth 2.0).

1. What Data We Access & Collect

We believe in strict data minimization. We only collect and process data that is essential for providing the task management and synchronization features of Takt:

A. Google OAuth 2.0 User Data

When you elect to sign in using Google Single Sign-On (SSO), Google requests your explicit authorization to share basic identity profile data. The specific OAuth scopes requested are:

OAuth Scope	Data Field Received	Specific Purpose of Use
`openid`	Unique Google User ID (Subject identifier)	To establish a secure, unique account key in our database to isolate your workspace records.
`.../auth/userinfo.email`	Email Address	To identify your account, send critical account-related security notices, and prevent duplicate accounts.
`.../auth/userinfo.profile`	Display Name & Profile Picture URL	To display your name in the workspace header and your avatar on comments and task activities you create.

Important Clarification: Takt does NOT request, access, read, or store any sensitive or restricted Google user data such as Google Drive files, Gmail messages, Google Calendar entries, contacts, browsing history, or payment credentials.

B. User-Created Workspace Data

When you actively use Takt, you may create and store the following productivity content:

Tasks & Metadata: Task titles, descriptions, due dates, scheduled times, estimated duration / ETAs, deadlines, priorities (P1–P4), tags, subtask checklists, and completion statuses.
Activity Logs & Comments: Task comments, status transition records, and Pomodoro session logs.
Meeting Notes: Content created inside the private Meeting Scratchpad tool.

C. Browser Local Storage Data

To enable fast offline access and preserve user preferences, we store non-tracking state in your browser’s localStorage, including UI theme (dark/light mode), view layouts (Kanban board vs. List view), and cached authentication tokens.

2. Purpose Specification: How We Use Your Data

We use the data we collect solely for the following legitimate purposes:

Authentication & Account Access: To verify your identity, maintain your authenticated session, and grant access to your private workspace.
Cross-Device Task Synchronization: To sync your tasks, ETAs, deadlines, and comments in real-time across multiple computers, tablets, and browsers using Supabase PostgreSQL.
Row-Level Security Enforcement: To cryptographically restrict database access so that only your authenticated Google user ID (auth.uid() = user_id) can query, update, or delete your tasks.
Application Stability: To monitor application performance and troubleshoot software bugs.

3. Mandatory Google User Data Compliance Disclosure

Limited Use Policy Adherence:

Takt’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do NOT use Google user data to serve advertisements or retarget users.
We do NOT sell, rent, or monetize Google user data to third parties, data brokers, or marketing exchanges.
We do NOT use Google user data to train generalized machine learning or artificial intelligence models.
We do NOT allow human personnel to read your private tasks or Google profile data, unless explicitly requested by you for technical support or required by law.

4. Third-Party Service Providers

We only share data with essential infrastructure providers strictly required to host and run Takt:

Google LLC (Google Identity Services): Provides OAuth 2.0 authentication infrastructure.
Supabase Inc.: Provides our managed cloud database and authentication service. Supabase adheres to SOC 2 Type II compliance, encrypts data at rest via AES-256, and encrypts all connections in transit via TLS/HTTPS.
Cloudflare Inc.: Provides DDoS protection, global CDN caching, and secure SSL/TLS termination for the frontend web application.

5. Data Storage, Security & Retention

All communication between your browser and our servers is secured using modern TLS 1.3 encryption. Task records, notes, and user profiles are stored in isolated cloud databases protected by Postgres Row-Level Security (RLS).

Retention Period: We retain your user data for as long as your account is active. When you delete a task, comment, or note within the app, it is immediately deleted from the active database.

6. How to Delete Your Data (User Rights & Instructions)

You maintain complete ownership and control over your data. You may exercise your rights through any of the following methods:

In-App Task Deletion: You can delete any task, note, or comment at any time using the delete button inside the application interface.
Complete Account & Data Deletion Request: You can request permanent deletion of your account and all associated cloud data by sending an email from your registered address to:
[email protected] with the subject line “Takt Data Deletion Request”.
Upon receipt, all your tasks, notes, comments, and authentication records will be permanently expunged within 7 business days.
Revoke Google OAuth Permission: You can disconnect Takt from your Google Account at any time by visiting your Google Account Permissions Center.

7. Policy Changes & User Notification

If we make material changes to how we handle personal data or Google user data, we will update the “Last Updated” date at the top of this page and post a prominent notice on the Takt homepage prior to the changes taking effect.

8. Contact & Developer Information

For any privacy inquiries, compliance verification questions, or data deletion requests, please contact the developer:

Application Name: Takt
Application URL: https://takt.harisarshad.site/
Lead Developer: Haris Arshad
Support Email: [email protected]