Privacy

TaskTree is run by Syllogistic Software. Questions about this policy, or about your data, go to contact@sylsft.com. Last updated 24 October 2026.

What this covers

This policy says what TaskTree collects when you use it, what it does with it, who else sees it and how to have it removed.

Your account

You can sign up with an email address and a password, or sign in with Google.

• Email and password. TaskTree keeps your email address and a one-way hash of your password, never the password itself.
• Sign in with Google. TaskTree asks Google only for your basic profile: your email address, your name and your profile picture. It uses the email to find or create your account, and keeps the name and the address of the picture with it. It asks for nothing else from your Google account: not your contacts, mail, calendar or files.

Signing in leaves a sign-in token in your browser's storage so you stay signed in.

What you write

TaskTree stores what you put into it: trees, branches, leaves, buds, notes, dates, places, chat with the app, and the choices you make in Tend. It keeps a log of changes so you can see and undo them. If you share a grove with other people, they see and can change what is in it, as you can.

To work offline, the app keeps a copy of your groves in your browser on the device you use. Signing out removes it.

Todoist

Connecting Todoist is optional, and happens only when you press Connect.

• What is read. With read-only access (Todoist's data:read), TaskTree reads your projects, sections and tasks — each task's title, description, due date, deadline, labels and priority — and the email addresses of the collaborators on shared projects, so a task can show who it is assigned to.
• What is stored. The tasks you import become leaves and buds in TaskTree. For each one TaskTree also keeps the Todoist task's id, title, description, date and assignee, so it can recognise the task when it changes. It keeps the access token Todoist gives it and your Todoist user id.
• Sync. If you turn on "Keep in sync", Todoist tells TaskTree when your tasks change and TaskTree reads them again. TaskTree never writes to Todoist.
• Disconnecting. Settings › Todoist › Disconnect deletes the stored token, and sync stops. What was already imported stays in TaskTree until you delete it or reset. Disconnecting does not revoke the token at Todoist; to do that, remove TaskTree in Todoist's settings under Integrations.

AI features

TaskTree uses two AI services to suggest where things go, split and tidy what you capture, draft branches and steps, review an import, read a photo of a list and answer in Chat:

• Google Gemini, from Google, and
• OpenAI.

To do that, TaskTree sends them the text of the tasks involved — titles, notes, dates and the names of trees, branches and places — and, for a photo of a list, the photo. It does not send your password, your sign-in token or your Todoist token. TaskTree records how much each feature used (which feature, which model, how many tokens) to keep an eye on cost; these records hold no task text.

Feedback and logs

If you send feedback, TaskTree keeps your message, and an image if you attach one, with your account. The server keeps logs of requests and errors, which can include your email address or user id, to keep the app working and to find faults.

Who else sees it

TaskTree does not sell your data, show ads or share your data with anyone for advertising. Apart from the people you share a grove with, your data leaves TaskTree only to reach the services above — Google for sign-in, Todoist if you connect it, Gemini and OpenAI for the AI features — and as the law requires.

Google user data

TaskTree's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Keeping and removing your data

Your data is kept while you have an account. Settings › Reset deletes everything you have written, your Todoist connection and the groves you created, and leaves you with an empty account. To delete the account itself, email contact@sylsft.com from the address you sign in with, and it is removed with your data.

Changes

If this policy changes, the new version is posted on this page.