Privacy Notice
TaskKin Care is a family care coordination and information-organizing tool. It is not a medical device, medical service, or emergency-response service.
TaskKin Care is developed and operated by Jun Yu, an independent developer.
1. Information we process
- Account information: this depends on how you sign in. If you choose Start without an account or join with a family code, we create an account identifier for you and collect no email address or password. If you sign in with Apple, Apple gives us a stable identifier for your Apple ID; we do not ask Apple for your name or email address. If you sign in with email, we hold your email address and authentication credentials. TaskKin Care does not store plaintext passwords.
- On your device: until your account is linked to Sign in with Apple, the app keeps its sign-in token in this iPhone's Keychain (this device only; it does not move to a new phone), so you can get back to your family after reinstalling the app. It is removed when you sign in with Apple, sign out, or delete your account.
- Join-code protection: to stop family codes from being guessed, we keep a count of recent join attempts for each account (at most 5 every 15 minutes) and service-wide totals of failed attempts in 5-minute periods, which are deleted after one day. These counters contain no IP address. When many wrong codes are entered across the service, joining needs the coordinator's approval for the next 30 minutes; a join request stores the name you entered and its status with that family until the family or your account is deleted.
- Family and member information: household name, care-recipient label, member name, relationship, role, time zone, and availability.
- Coordination content: tasks, timeline events, document metadata, notification preferences, reports, and audit records.
- Files you choose to upload: content and metadata for files used in family coordination. Text recognition (OCR) runs on your device; file contents are not sent to any external service for OCR.
- Purchases and subscriptions: when you subscribe to Family Plus, payment is processed by Apple through your Apple ID; we do not receive or store your payment card or Apple account credentials. We store subscription metadata needed to provide access (Apple transaction identifier, plan, and renewal/expiry date) linked to your account and household.
2. Non-PHI use
TaskKin Care does not ask for and must not be used to submit diagnoses, prescriptions, insurance, payment, precise location, or other protected health information (PHI). It does not currently include automatic PHI detection or redaction. Please remove or avoid PHI before uploading a file.
3. How we use information
- Provide family coordination features and role-based access.
- Show in-app role-aware coordination updates and generate shareable weekly summaries.
- Maintain an audit trail for key coordination writes, such as tasks, role changes, and report generation.
- Maintain reliability and security.
4. Sharing and service providers
- Household members may access only the family information their role permits.
- We do not sell personal information or share it for cross-context behavioral advertising.
- App version 1.10 (build 19) and later builds use our own server for authentication, database, private storage, realtime synchronization, and server functions. Our backend processes IP addresses for security, including repeated-sign-up limits. Brevo delivers password-reset emails and processes their recipient address and message, but not uploaded files. Earlier installed versions may continue using Supabase during migration until updated. TaskKin Care does not send uploaded content to external AI or OCR providers.
- If you use Sign in with Apple, Apple verifies your identity. When you delete your account, we ask Apple to revoke TaskKin Care's access to your Apple ID.
5. Security
- Data is transmitted through encrypted connections supported by our service providers.
- Row-level security separates households and role-based access limits what members can access.
- Key coordination writes are recorded in append-only audit records.
6. Retention, deletion, and your requests
You may delete your account in the app through Settings > Delete account & households. Deleting your account permanently deletes your account and every household you coordinate, including all of that household's data (tasks, timeline, documents, reports, and audit records). This cannot be undone.
If you have not created or joined a family yet, use Delete account & households at the bottom of the Set up your care circle screen. If you signed in with Apple, you confirm with Apple once more and we ask Apple to revoke TaskKin Care's access to your Apple ID.
If you belong to other households you do not coordinate, your membership is anonymized (your name becomes a "Deleted member" placeholder) and those households and their data are kept. Shared tasks, documents, and audit records you created there remain attributable to that placeholder without retaining your account link or profile name. Audit records inside a household are automatically removed after the plan's retention window (30 days on the Free tier, up to 3 years on Family Plus).
Accounts without sign-in. We currently do not automatically delete anonymous accounts solely because they are inactive. You can delete your account and its data from the app as described above. Any future change to inactivity-based cleanup will be announced in this policy before it takes effect.
You may request access, correction, export, or other privacy assistance by emailing Billy.yu@me.com. If you cannot use the app, you can also request deletion by email; Delete your account explains how we verify accounts that have no email address.
7. California Privacy Notice and Notice at Collection
This section applies only where the California Consumer Privacy Act and California Privacy Rights Act apply to TaskKin Care. We collect the categories described in Section 1 for the purposes described in Section 3. We do not sell or share personal information as those terms are defined by California law.
At or before collection, California users receive this notice describing the categories of personal information collected, the purposes for collection, and the retention and deletion request process. We do not collect or use sensitive personal information for purposes that require a right to limit under California law.
California residents may request to know, correct, or delete eligible personal information, and may use an authorized agent where permitted by law. Send requests to Billy.yu@me.com; we may request information needed to verify the request and will respond as required by applicable law. We will not discriminate against you for exercising applicable privacy rights.
8. Children, changes, and contact
TaskKin Care is for adults and authorized representatives, not child-directed accounts. We will describe material changes when this notice is updated. For privacy questions or requests, email Billy.yu@me.com.
Effective: July 26, 2026. Updated: October 8, 2026 (owned backend and password-reset email provider). Operator-reviewed product notice; independent legal counsel review has not been obtained.