Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains how Backslash d.o.o. ("Backslash," "we," "us"), a company registered in Croatia, collects, uses, and protects information when you use Nula Tasks (the "App"). By using the App, you agree to the collection and use of information as described here.

Information we collect

We collect the minimum data needed to run the App's features:

• Account information — your email address, used to create and sign in to your account. If you use the App as a guest, we don't collect an email unless you later choose to save an account.
• Your content — the tasks, projects, and notes you create, including items imported from Google Calendar or Todoist.
• Account identifier — an internal user ID, used to link your data to your account and to sync subscription entitlements.
• Push notification token — a device token used solely to deliver task reminders you've set.
• Purchase information — your subscription status (e.g. active, trialing, expired) for Nula Pro. We never see or store your payment card details — Apple handles billing directly, and we receive only entitlement status from our subscription platform, RevenueCat.
• Diagnostic data — crash and error reports, used only to fix bugs. We configure our crash-reporting tool to not collect personal information or session data by default.

Google Calendar

If you choose to connect a Google account, the App requests read-only access to your Google Calendar (the calendar.readonly scope) so it can show your calendar events alongside your tasks and, if you choose, import them as tasks. We never modify, delete, or write to your Google Calendar. You can connect more than one Google account (for example, a personal and a work account), and you can disconnect any account at any time from within the App.

Calendar data you import is stored in your account the same way any other task content is, and is subject to the same retention and deletion rules described below.

Nula Tasks's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not allow humans to read this data except as necessary for security purposes, to comply with applicable law, or with your consent.

AI capture

When you use AI capture, the text you type is sent to our backend, which calls a third-party AI provider (Anthropic) to turn it into a structured task. This text is processed transiently to generate that result — it is not stored by us beyond producing your task, and is not used by our AI provider to train their models.

How we use your information

• To provide and operate the App's features (task management, sync across your devices, reminders, calendar import, AI capture).
• To manage your account and subscription.
• To fix bugs and improve reliability, using diagnostic data.
• To respond to support requests you send us.

We do not sell your data, and we do not use it for advertising or cross-app tracking.

Who we share data with

We share data only with the service providers that help us run the App, each acting on our behalf:

• Supabase — hosts our database, authentication, and backend functions.
• RevenueCat — manages subscription status; Apple processes payment directly.
• Apple — handles App Store purchases and push notification delivery.
• Google — if you connect a Google account, to read your calendar as described above.
• Anthropic — processes AI capture text as described above.
• Sentry — receives crash and error diagnostics.

We do not otherwise share your personal data with third parties, and we do not sell it.

Data retention and deletion

We keep your data for as long as your account is active. You can delete your account at any time from Settings within the App, which permanently deletes your account and associated data from our systems. If you disconnect a Google account, we stop syncing new data from it, but items already imported remain in your task list unless you delete them.

Security

We use industry-standard measures — including encryption in transit and access controls — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data using commercially reasonable safeguards.

Children's privacy

The App is not directed at children under 16, and we do not knowingly collect data from them.

Your rights

If you are located in the European Economic Area, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these rights directly in the App (edit your profile, delete your account) or by contacting us at the email below. You also have the right to lodge a complaint with your local data protection authority — in Croatia, the Agencija za zaštitu osobnih podataka (AZOP).

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above.

Contact us

Questions about this policy or your data? Email us at hrvoje.grdic1@gmail.com.