Privacy policy
Last updated: 1 October 2026
This is a translation for your convenience. If the two versions differ, the German version applies.
1. Controller
The controller responsible for data processing under the GDPR is:
taskblue GbR
Kollwitzstraße 76
10435 Berlin
Germany
Represented by the partners:
Paul Kasten & Alexander Zakharov
Email: [email protected]
2. Our core privacy promise
Your privacy is at the heart of taskblue.
- No app tracking: We do not collect, store or transmit any data about which specific apps you block.
- On-device processing: Your choice of blocked apps stays entirely on your device and is enforced through standard system features (such as Apple's Screen Time API).
- No content monitoring: We have no access to the content inside the apps you block or use.
3. Collection and storage of personal data
A. Information you give us
- Account information: To create an account we collect your email address. We need it to save your progress and manage your plan across devices (Art. 6(1)(b) GDPR).
- Support requests: When you contact us, we store your email address and the content of your message to handle your request.
B. Data collected automatically (app and website)
- Focus history: We store the history of your focus sessions with date, duration, type of session and title, so your statistics and plastic total carry over to a new device. For schedules the title is the name you give them; for calendar focus it is the title of the event. Sessions at a place appear only as "Location Focus", without the name of the place. We also need the duration to calculate the amount of plastic we remove from the environment under your plan (Art. 6(1)(b) GDPR).
- Schedules and settings: We store your schedules (name, times, weekdays) and app settings so they are available again after you sign in on a new device (Art. 6(1)(b) GDPR).
- Device data: We collect technical information such as the device model and operating system version to fix errors and improve the app.
- Server log files: When you visit our website, information such as IP address, date, time and browser type is automatically stored in log files (Art. 6(1)(f) GDPR).
C. Payment data (purchases)
- In-app purchases (Apple): If you buy TaskBlue in the app, Apple Inc. handles the billing. We only receive a confirmation of the purchase, never your card details.
- Direct purchase (website): For purchases on our website we use external payment providers (such as Stripe). They collect your payment details themselves to perform the contract.
- Term and recurring payments: The yearly plan is paid once for twelve months and does not renew automatically, so no payment details are kept for later payments. The monthly plan is a subscription: our payment provider Stripe stores your payment method for the monthly payments until the subscription ends. In both cases we ourselves store only the status and end date of your plan and the provider's payment and subscription IDs (Art. 6(1)(b) GDPR). The same applies to contracts concluded as a running subscription before 24 August 2026.
- Shipping data: To ship your BlueTag we collect your name and delivery address. We use this data only to handle shipping and deliver the product (Art. 6(1)(b) GDPR).
- Sharing with carriers: We pass your shipping data to the logistics companies we work with (such as DHL, UPS or Deutsche Post) so they can deliver your order.
4. Location data
A. Location focus in the iOS app
Location focus is optional. It starts focus automatically when the iPhone arrives at a place you have set up in the app (such as the school) and ends it when the iPhone leaves that place. If you don't set up a place, the app does not process any location data.
- What happens on the iPhone: For each active place, the app registers an area with a radius of 100 to 500 metres with iOS Location Services. iOS detects whether the iPhone enters or leaves one of these areas and tells the app. The app does not track the location continuously and keeps no location history.
- What is stored on the iPhone: The name, coordinates and radius of the places you set up and, while a location focus is running, which place is currently active. The app holds the current position only briefly in memory, for example to centre the map on you while you pick a place. It is not stored. The notices shown when arriving at or leaving a place are created on the iPhone itself.
- What is sent to us: No location data. Coordinates, place names and your position are not sent to TaskBlue's servers. In the focus history (section 3 B) a session at a place appears only as "Location Focus" with date and duration. That shows that and when a location focus ran, but not where.
- What is sent to Apple: To pick a place, the app uses Apple Maps. When you search for a place or an address or choose a point on the map, the search query, the visible map area or the chosen point are sent to Apple so Apple can return search results, place names and map data. Location Services themselves are provided by iOS. Apple's privacy policy applies to this (apple.com/legal/privacy).
- Permission: Location focus needs the "Always" location permission, because otherwise iOS cannot start focus while the app is closed. You can withdraw the permission at any time in the iOS settings. If you do so during a location focus or while places are active, the chosen apps stay locked until the permission is granted again or focus is ended with the BlueTag, the parent PIN or an emergency exit.
- Children: If a parent sets up TaskBlue on a child's iPhone, the places describe places in the child's daily life. TaskBlue shows the child's location neither to the parents nor to us.
- Deletion: You can switch off or delete places in the app at any time. If a parent PIN is set, this requires the PIN. Places stay on the iPhone when you sign out. They are removed when you delete the app.
- Legal basis: The processing provides the feature you have chosen (Art. 6(1)(b) GDPR). The app only accesses Location Services if you have allowed this in iOS.
B. Website
- Delivery country: When you order, the website suggests a delivery country. For this we use the country that our service provider Cloudflare derives from your IP address. We do not store it, and you can change the country freely (Art. 6(1)(f) GDPR).
- No location access in the browser: The website does not ask your browser for your location. We use your delivery address only for shipping (section 3 C).
5. Purposes of processing
We use your data only for the following purposes:
- Providing the services: Running the focus features and syncing your data.
- Environmental sponsorship: Verifying and carrying out the plastic removal based on your focus time.
- Communication: Sending important technical updates or support replies.
6. Sharing data with third parties
We do not sell your data. We only share it with:
- Environmental partners: We share anonymised totals (for example "5,000 minutes of focus this month") so our partners can recover the matching amount of plastic.
- Hosting providers: Our databases are hosted by secure cloud providers within the EU.
- Legal obligations: Where we are legally required to pass information to authorities.
7. Your rights (GDPR)
You have the right at any time to:
- Access: Find out which data we hold about you.
- Rectification: Have incorrect data corrected.
- Erasure: On request, we permanently delete your account and all data linked to it.
- Objection: Object at any time to processing based on legitimate interest.
8. Data security
We use modern security measures, including SSL/TLS encryption, to protect your data from unauthorised access. Please never share your account credentials with anyone.
9. Changes to this policy
We update this policy from time to time to reflect new features or legal requirements. If there are significant changes, we will let you know by email or in the app.