> Draft for review. SDK collection details, retention settings, processing regions, deletion procedures and the effective date require confirmation.
TOMOSHIBI LLC handles tasquash information as described below. The app has no separate account registration or card-number form.
On-device information
The app handles note text, due dates, appearance, completion status, recurrence rules, categories, style images, settings, purchase entitlements and sync management information on the device. Secret provides authentication and display controls, with authentication state separate on each device. It is not a promise that all records are stored in a separate encrypted vault.
iCloud sync
Starting Pro sync uses Apple’s private CloudKit database for notes, styles, categories, completion status, the current task, Secret notes and sync management information. iPhone and Mac must use the same iCloud account. Disabling sync or losing Pro stops sync while retaining each device’s local state. It does not delete stored iCloud data.
Optional analytics and diagnostics
On iPhone, analytics and diagnostics are separate choices and both default to off. When enabled, Firebase Analytics receives fixed screen names. The SDK may also handle sessions, device, OS and app information and service-generated identifiers. The app’s policy is not to put note text, images or Secret contents in analytics events.
When diagnostics is enabled, Sentry handles technical information about failures. Default personal-information sending is disabled; this does not guarantee complete anonymity. Actual SDK collection and transmitted data still require verification before publication.
Turning a choice off stops collection and sending for that SDK. It does not retrospectively delete information already received. The current Mac version does not initialize analytics or diagnostic SDKs and does not provide the same sending features as iPhone.
Purchases, notifications and contact
Apple handles purchases and restoration. The app uses verified entitlements and expiry information to provide features. We do not use our own card-number form. Notifications and widgets may display ordinary notes; Secret contents are hidden.
In-app Feedback is implemented to send the message, optional reply details, app version/build, language and Free/Pro status through the existing Cloudflare relay to the operator’s Discord. Direct relay-to-Discord delivery was confirmed; delivery from the app on a physical device remains a separate check. The shared web form sends messages, categories and optional reply details through Cloudflare to the operator’s Discord channel. Notes and styles are not automatically attached, but information you include in the message is sent. See the site privacy policy .
Retention and deletion
On-device information, iCloud copies and OS backups are managed separately. Cancelling a subscription and deleting data are different actions. Firebase and Sentry retention and deletion depend on service settings and contracts. Product-specific settings, processing regions must be checked before publication. Inquiry information is handled under the policy below.
Providers may process IP addresses and other network information. See Apple , Firebase and Sentry .
Operator and shared contact channel
The operator is TOMOSHIBI LLC. See company information and the TOMOSHIBI APPS contact form . Select “TOMOSHIBI APPS site” and include “tasquash” in your message. Enter your name and email only if you request a reply.
Retention of inquiries
We keep inquiry information for as long as needed to receive, reply to, investigate and manage the inquiry, and delete personal information when it is no longer needed. Unresolved inquiries or legally required retention are handled for as long as that need remains. Improvement notes that do not identify individuals are managed separately from original messages and contact details. No fixed number of years is set; this is not a policy of indefinite retention without reviewing necessity. Use the shared contact channel below for deletion and other data questions.
> Operational check before publication: a process for tracking resolution, reviewing necessity and deleting unneeded information, including Discord messages, contact details and attachments, has not yet been established. Existing history has not been deleted.
Verified external-service settings (pre-publication review)
On September 30, 2026, the connected administration pages showed this product’s Google Analytics property retains event data for two months and user data for fourteen months, with reset on new user activity enabled. This setting does not mean all standard aggregated reports are deleted after those periods. The Sentry organization uses the US data-storage region. The diagnostic-event retention applicable to its current Developer subscription, the scope of international processing by Google and other providers, and deletion handling for previously received data were not established by this check.
