Privacy Policy

1. Overview

Deadline Desk is a productivity app for Android, Windows, Mac, iPhone and iPad. It works without advertising or behavioural tracking. You can use local planning without a Deadline Desk account. Account sync uploads task content only after your review and confirmation. You can also choose to export backup files or use supported Apple iCloud services.

2. Data you create

The app stores the information you choose to enter, including deadline titles, due dates and optional times, categories, priorities, notes, completion state and reminder preferences. This content is used to provide Deadline Desk’s planning, notification and synchronization features.

Optional calendar import on all platforms

Current iPhone/iPad and Mac releases let you import from Apple Calendar or connect directly to Microsoft Calendar. Windows 2.4 connects directly to Google Calendar or Microsoft Calendar. Android Beta 2.3 offers Phone Calendar and direct Google or Microsoft Calendar connections. Authorised private Apple test builds can also offer direct Google import. Apple and Android Phone Calendar access use the device’s permission prompt and include calendars made available to the app on that device. Direct connections use the provider’s sign-in and consent screen; a saved sign-in may be available. Deadline Desk does not receive your Google or Microsoft password.

With your permission, the app reads calendar names and identifiers and events for the date range you select, including event identifiers, titles, dates and times. A small surrounding time window may also be read to handle date and time-zone boundaries; the preview is filtered to your selected dates. If you choose to include event details, descriptions and locations may become task notes. Google access uses read-only calendar-list and event permissions; Microsoft access uses delegated Calendars.Read. The app does not create, edit or delete events in your source calendar.

Calendar lists and event previews are processed on your device. You choose which events to import and their task categories, then confirm the import. Import creates a one-time copy as Deadline Desk tasks; it is not a continuous connection or two-way calendar sync. Imported tasks follow your existing iCloud, account-sync and backup choices described below. For example, imported task content can be sent to Supabase if you have already enabled Deadline Desk account sync.

For calendar import, Google and Microsoft access tokens are held in memory for the current import session rather than saved to disk. Disconnecting the calendar source or closing the import screen clears that session’s access in the app. Email suggestions use separate, persistent device-only credentials as explained below. You can also revoke Deadline Desk’s access in your Google Account or Microsoft account settings. Disconnecting or revoking access does not delete tasks you previously imported; delete those tasks and any retained backup copies separately if desired.

Deadline Desk’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Calendar information is used to provide the import and the task features you choose. It is not sold, used for advertising, used to train general-purpose AI models or routinely reviewed by people.

Google Calendar’s branding and calendar-data access have completed Google verification. Direct Google Calendar import is enabled in Windows 2.4 and Android Beta 2.3. Current public iPhone/iPad and Mac releases import Google calendars through Apple Calendar. These disclosures also cover compatible private test versions. Provider availability depends on your installed version and any provider or organisation restrictions. Calendar approval is separate from the Gmail email-suggestion feature, which remains in private testing.

Google user data: sharing, transfer and disclosure

We use Google Calendar data only to show the calendar selector and event preview, create the tasks you explicitly import, and provide the task, sync and backup features you choose. Calendar API requests go directly from your device to Google. Calendar access tokens and unimported calendar lists/event previews are not sent to Deadline Desk servers, our billing providers or an AI service.

Imported events are different from a temporary preview. When you confirm an import, the selected title, date/time and any event description or location you include as notes become Deadline Desk task content. That Google-derived task content can be transferred as follows:

• Apple: if you use iCloud task sync or iCloud Drive backup copies, Apple stores the imported task content in your private iCloud database or backup files and makes it available to your Apple devices using that Apple Account.
• Supabase and your connected devices: in editions supporting Deadline Desk account sync, imported task content is uploaded to our Supabase-hosted account database if you have enabled and confirmed that sync. Devices connected to that Deadline Desk account can then receive it. Previously enabled sync also applies to tasks you import later.
• A backup destination you select: if you export a backup, imported task content is included in the file. A cloud-drive or other storage provider you choose can receive and store that file under its own terms. Anyone you choose to share the exported file with can read its contents.
• Support, only if you choose to provide it: if you send us calendar or task information in a support message, we receive what you send and use it to help with your request. Please do not send calendar access tokens or passwords.

Our other providers have separate roles: Cloudflare and Render host supporting account, connection and verification services; Resend delivers requested sign-in codes; Stripe, Apple and Google process purchases. Connecting Google Calendar does not give those billing or email-delivery services access to your calendar previews or Google Calendar access tokens.

We do not sell Google user data, share it with advertisers or data brokers, send it to cloud AI providers, or use it to train AI models. We do not transfer or disclose it for unrelated purposes, and our staff do not routinely read calendar content. The same optional task-transfer rules apply to user-approved tasks derived from the separately described email-suggestion feature; the original email text and credentials remain device-only as described below.

How we protect sensitive data

These safeguards apply to Google Calendar data and the task content derived from it, as well as the corresponding supported app features:

• Encryption in transit: connections to calendar providers for sign-in, token exchange and Calendar API requests use HTTPS/TLS. On Windows, the browser returns the sign-in result through a temporary HTTP callback on the same computer’s loopback address; this callback is not exposed to the local network. Deadline Desk account-sync connections also use HTTPS/TLS, protecting data while it travels between the app and the service.
• Limited and protected authorization: native calendar sign-in uses read-only OAuth permissions, a PKCE code challenge and verification of the sign-in state and callback. Google handles your password; Deadline Desk does not receive it. The app rejects redirects on calendar API requests rather than forwarding a bearer token to another destination.
• Short-lived calendar credentials: Calendar access tokens are kept in memory for the import session, not saved to disk or uploaded to our servers. Calendar requests use an ephemeral network session with its disk response cache disabled. Disconnecting or closing the import session clears its app-side access.
• Device storage: imported tasks use the app’s normal local storage and the operating system’s app and user-account protections. Device encryption depends on your platform and security settings; protect your device with a passcode or login password and enable available disk encryption. Separately, persistent email-suggestion credentials and pending excerpts use the protected, non-synchronising device Keychain described below.
• Optional cloud storage: account sync requires an authenticated account, and database access policies restrict ordinary app access to that account’s records. Supabase documents encryption of hosted data at rest using AES-256 and in transit using TLS. Apple manages the storage protections for private iCloud data under its own security settings and terms.

Deadline Desk account sync is not currently end-to-end encrypted. Transport and provider-managed storage encryption do not prevent the service from processing task content to operate sync. Exported task backups are not separately password-encrypted by Deadline Desk; keep them in a private, protected location. No storage or transmission method can guarantee absolute security.

You can disconnect Google Calendar and revoke its permission in Google Account connections. This stops future access but does not erase tasks already imported. Delete those tasks in Deadline Desk and remove retained backup copies separately; account-cloud deletion is explained in Your control and deletion choices. Read more about Supabase’s security controls and Apple’s iCloud data security.

Email Deadline Suggestions

This optional development feature is not enabled for Gmail or Microsoft email in the current public iPhone/iPad 2.3 and Mac 2.2 releases. The following disclosures explain authorised private test builds. Gmail access remains a private test pending Google verification. Availability can also depend on your email provider or organisation’s policies.

Your choice, processed on your device

The feature is off for new users. If you turn it on, you download a local detection tool (about 320 MB to download, with additional installed storage required), then choose an email account and approve the provider’s read-only permission. The app connects directly to Gmail or a Microsoft-hosted Outlook/Exchange Online mailbox, not to the Gmail or Outlook app installed on your device. It does not receive your email password.

With your permission, the app checks new Inbox messages received after you connect. It uses the mailbox address, message identifiers, sender address, subject, received date and message text to suggest a task title and due date/time. Gmail uses gmail.readonly; Outlook uses Mail.Read with account identification and continued-access permissions. The app does not send, delete, mark as read or otherwise change your emails. It does not analyse attachments or load remote email images or scripts.

Email analysis runs locally on your device, not through a cloud AI service. Original message text and review excerpts are not uploaded to Deadline Desk servers or an AI provider. We do not use email data to train AI models, serve advertising, sell information or routinely allow people to read your messages. The current detector is designed for English emails; suggestions can be incomplete or wrong, so check important dates yourself.

What is saved and what can sync

Connected mailbox details, refresh credentials, checking checkpoints and pending suggestions, including their source excerpts and sender information, are stored in the device’s protected, non-synchronising Keychain. They are not included in Deadline Desk task backups or copied to your other devices. The app does not keep a separate disk cache of provider responses.

You choose which suggestions become tasks. When you add one, its approved title, date/time, category, reminder and any notes you enter become ordinary Deadline Desk task data. Those task fields can then follow your existing iCloud, Deadline Desk account-sync and backup settings, including storage by Apple or Supabase. The source email excerpt, mailbox identity and sender address are not automatically attached to that task. Keeping email analysis local does not mean an approved task can never leave your device.

Checking, disconnecting and removal

New checks need internet access. The app checks periodically while open, when returning to the app and when you choose to check now. Background opportunities depend on the operating system; this is not a guarantee of instant or continuous checking while the app is closed. Downloading the tool contacts our download host but does not send it your emails or mailbox credentials.

Turning suggestions off or pausing checking keeps your saved connections and suggestions. Disconnecting an email account removes its credentials and pending suggestions from this device, while tasks you already added remain. Removing the optional tool deletes its model files and related caches, not tasks or email connections. Disconnect before uninstalling if you want to remove the saved email connection; do not rely on uninstalling alone to revoke provider access.

You can separately revoke the provider’s access grant through Google Account connections or Microsoft app permissions. Work or school accounts may require your administrator. To remove an accepted task, delete it through normal task controls and manage any retained backups separately. For help, contact info@deadlinedesk.app.

Deadline Desk’s use and transfer of information received from Google APIs, including Gmail data and task information derived from it, adheres to the Google API Services User Data Policy, including its Limited Use requirements. Access is limited to the email-suggestion and task features you choose; it is not used for unrelated purposes.

3. Synchronization

Optional Deadline Desk account sync

Account sign-in and connection verification process your email, account user ID and device/session identifiers. In editions offering Deadline Desk account sync, confirming the sync review also sends deadlines, notes, categories, completion state and reminder preferences to Supabase so connected devices using that account can access them. QR connections require approval on Windows; camera access is used to scan the QR. If you do not confirm account sync, your task content is not uploaded to that service. Signing out stops that device’s account sync but may leave local copies.

The current iPhone/iPad release offers an optional connection to your Windows PC. Scanning its temporary QR signs the receiving device into the account only after approval on Windows. Task uploads start after you review and confirm sync. You can continue using local features, private iCloud sync and Apple purchases without connecting to Windows.

Mac uses private iCloud sync. Android Beta 2.3 connects to a Deadline Desk account through a Windows-approved QR. Android is distributed through Google Play’s beta programme. These disclosures cover the supported optional features in that beta.

Private iCloud synchronization

When iCloud is available, Deadline Desk uses Apple CloudKit to synchronize app data through your private iCloud database. This allows the same data to appear on your Apple devices signed in to the same Apple Account. Apple processes iCloud data under Apple’s own terms and privacy policy.

Automatic backups and iCloud Drive copies

Versions offering automatic iCloud backup copies can save deadline and category backup files in your iCloud Drive, separately from task synchronization. You can turn copying off in Backup & Restore. These files contain your task content, not your account sign-in credentials or purchases. The backup history keeps up to 40 recent snapshots plus the first snapshot from each of the ten most recent active backup days, counting overlapping copies once. The app may remove older automatic files from its own backup folder when its retention and upload checks allow it. Local backups can be lost when the app is deleted; iCloud copies may remain available through your Apple Account and can be removed separately in Files.

4. Pro, purchases and service providers

Apple purchases are processed through the App Store, current Android purchases through Google Play, and Windows purchases through Stripe. Older Stripe purchases may still use Stripe recovery services. Purchase verification can send a purchase token or signed transaction, product and subscription identifiers, and an installation identifier to our verification services. If you choose to share Pro in a supported edition, the verified purchase is linked to your Deadline Desk account. Deadline Desk does not receive or store your payment-card details.

Supabase provides account and sync storage. Cloudflare and Render host verification and connection services. Resend processes your email address when delivering a requested verification email. Apple, Google and Stripe process purchases and subscription status. These services support sync, activation, verification and billing; Deadline Desk does not sell your information.

5. Advertising, analytics, tracking and Android backup

Website statistics are separate from the app

Public informational pages on deadlinedesk.app use free Cloudflare Web Analytics to understand visits, page views and website performance. Cloudflare receives page addresses, referring sites and browser/device and performance information. It does not use cookies, local storage or visitor fingerprinting for this service, and does not log URL query strings. These statistics are not used to build advertising profiles or connected to your Deadline Desk account, tasks, calendar or email content.

We view aggregate statistics in a private reporting dashboard. Analytics are not loaded on the Apple reviewer connection page, checkout, purchase-management or purchase-restore pages, or private test-download pages. Collection begins when this website feature is enabled; it does not recover historical visits and may miss visits when a browser blocks analytics. See Cloudflare Web Analytics data collection and its reporting and retention information.

Android backup and device transfer are disabled for Deadline Desk app data. Your local Android data is therefore not included in Android’s app-data backup or transferred by that mechanism.

Android automatic task backups stay in local app storage; they are not automatically copied to Google Drive. A manual export saves content to the location you choose. That location’s provider, such as a cloud drive selected in the system file picker, handles the exported file under its own terms. Treat backup files as private because they can contain task titles and notes.

6. Your control and deletion choices

You can edit or delete deadlines and categories in the app. On Apple devices, deletions synchronize through your private iCloud database. You can also clear completed deadlines from the Completed section.

Where account management is available, choose Delete Deadline Desk account and data to delete your account and cloud sync data. Other connected devices sign out when they detect the deletion online. Local data and backup files may remain until removed separately. Deleting an account does not cancel an Apple, Google Play or Stripe subscription.

If you no longer have the app, or prefer to request deletion by email, follow the account and data deletion instructions, including the Android steps. Private iCloud data, exported files and store-provider purchase records are separate from Deadline Desk account sync. Windows subscribers can manage or cancel renewal through Stripe’s customer portal.

7. Children and teenagers

Deadline Desk is a general productivity tool and is not directed to children under 13. Android users aged 13 to 15 may use the app’s local features. Where the law in their country requires permission from a parent or guardian before they provide an email address or create an optional sync account, they should use those optional services only with that permission. A parent or guardian can request deletion using the process described above.

8. Changes to this policy

This policy may be updated when the app’s features, service providers or legal requirements change. The effective date at the top of this page identifies the latest version.

9. Contact

For privacy questions, email info@deadlinedesk.app or visit the Deadline Desk Support page.