Privacy Policy
Last updated 9 October 2026
This policy explains how Unladen Software Pty Ltd, ABN 18 700 213 181 (“Unladen Software”, “we”, “us”) handles personal information in connection with Unladen Tasks (the “Service”), a personal task list. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect
- Your email address and password, or the Google account you sign in with, and an authenticator enrolment if you turn on two-factor sign-in.
- The tasks you enter: titles, notes, due dates, repeat rules, completions, and the names and colours of the categories you file them under.
- Your preferences: timezone, theme, and the screen you last used.
- Technical information: sign-in events, IP addresses and service logs, used for security and troubleshooting.
- Support correspondence when you contact us.
The Service uses only essential cookies (your sign-in session and interface preferences). There are no advertising trackers, and we do not sell personal information to anyone.
How your list is protected
Everything you write, meaning task titles, notes and category names, is encrypted before it is stored, under a key that belongs to your account alone. That key is itself held in encrypted form and is unwrapped only by the Service’s own servers while doing work for you. Due dates, repeat rules, completion times and category colours are stored in a readable form so the Service can sort and count them. Every unwrapping of your key, and every meaningful change to your list, is written to an append-only audit log that never contains titles, notes or names.
Two-factor sign-in with an authenticator app is optional. When you turn it on, the database itself refuses sessions that have not presented a code.
Who else handles the data
The Service runs on Vercel and stores its data with Supabase, both in Sydney, Australia. Emails such as password resets are sent through Resend. If you sign in with Google, Google confirms your address to us and nothing about your list goes to Google. These providers process data on our behalf under their own security commitments.
Access, export and deletion
You can export everything the Service holds for you at any time from Settings, in a readable form. Deleting your account from Settings removes your records and your encryption key at once, after which any encrypted copies in backups cannot be read. To ask for a correction, contact us at the address below.
Changes and contact
We will update this page when the Service changes in a way that affects your information, and note the date above. Questions and requests go to privacy@unladensoftware.com. You can also complain to the Office of the Australian Information Commissioner if you are not satisfied with our response.