Privacy

Last updated 29 October 2026

Dumb Tasks is a local-first, open source task list, with optional sync to your Google Drive or WebDAV server. If you don't turn on sync, your tasks stay entirely on your device. Either way, Dumb Tasks can't see them. There's no Dumb Tasks account, no ads, and no analytics or tracking.

What stays on your device

Your tasks, and the app's settings, are stored in your browser's storage on this device.
Text you share into the app from another Android app becomes a task here, and goes nowhere else.
Backups you save are files on your device; restoring one reads it on your device.

Google Drive sync (optional)

If you connect Google Drive, the app copies your tasks to a single file in a hidden folder in your own Drive, and reads it back to keep your devices in step. It asks Google only for access to that hidden folder (the drive.appdata permission), so it can't see, change or list any of your other Drive files. Your tasks travel between your device and Google directly, over an encrypted connection.

The app also reads your Google account's email address, only to show you which account is connected. It's kept on your device.

To keep you signed in, the app's website handles your Google sign-in token. The token is kept in a cookie on your device, not stored on any server, and your tasks never pass through the website.

Dumb Tasks' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is used only to sync your tasks: it isn't sold, used for ads, or shared with anyone.

WebDAV sync (optional)

If you connect your WebDAV server, such as Nextcloud, the app keeps a file of your tasks for each device in a dumb-tasks folder there, and reads the other devices' files to keep them in step. Your tasks travel between your device and your server directly, and never pass through the app's website.

The server's address, your username and your password are kept in the app's storage on your device, unencrypted, so that it can keep syncing.

Hosting

The app is served by Cloudflare. Like any web host, Cloudflare handles your IP address and basic request details to deliver the app and protect it from abuse. Its dashboard shows us overall traffic, such as how many requests the site gets and from which countries, but nothing that identifies you. See Cloudflare's privacy policy. When you open the sync menu, the app loads Google's sign-in script from Google, under Google's privacy policy.

Deleting your data

Stop syncing on a device: open the sync menu and choose Disconnect. This signs that device out; your tasks stay on it, and in Drive or on your server.
Remove the app's access to Google: go to myaccount.google.com/connections and remove Dumb Tasks. Every device stops syncing.
Delete the synced copy: in Google Drive on the web, open Settings → Manage apps, find Dumb Tasks, and choose Options → Delete hidden app data. On a WebDAV server, delete the dumb-tasks folder.
Delete tasks on a device: uninstall the app, or clear its site data in your browser.

Changes and contact

If this policy changes, the date at the top will change with it. Questions: contact@dumbtasks.app.