Privacy Policy

1. Introduction

This Privacy Policy describes how 168th Street Entertainment LLC, operator of TaskCheck+ ("the App," "the Service"), collects, uses, shares, and protects information in connection with your use of the App.

We take privacy seriously, particularly because TaskCheck+ collects data that is considered sensitive under the General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), and certain U.S. state laws, including precise location data and workplace time-tracking records. This Policy explains exactly what we collect, why we collect it, and what rights you have.

This Policy applies to all users of TaskCheck+ on web and mobile.

2. Information We Collect

2.1 Account information

When you register for, or are invited to, a TaskCheck+ workspace ("pod"):

• Name (first and/or last, if provided)
• Email address
• Password (stored hashed; we never see your password in plain text)
• Role within your pod (administrator or employee)

2.2 User Content you submit

• Tasks, checklists, checklist items, and completion status
• Time logs (clock in / clock out timestamps, duration, category)
• Comments or notes attached to tasks
• Files you upload to the App

2.3 Location data (geolocation), important

When you clock in or clock out, TaskCheck+ records your device's geographic location at the moment of check-in. This is a core feature used by pod administrators to verify on-site attendance. Location is collected only at the moment of clock in or out; we do not collect it continuously or in the background.

Your options:

• On mobile, you will be prompted to grant location permission; you may revoke it in your device settings
• If you revoke location permission, you may be unable to use clock in / clock out features, depending on your pod administrator's policies
• Pod administrators may have workplace policies that govern location collection; please review any policies provided by your administrator

Location data is considered "sensitive personal information" under the CCPA/CPRA. We handle it accordingly (see Section 5 on sharing and Section 8 on your rights).

2.4 Device and usage information

We automatically collect certain technical information when you use the App:

• Device type, operating system, and app version
• IP address and approximate region derived from IP address
• Interaction data: which screens you visit, which features you use, and error logs
• Push notification tokens (if you enable push notifications)

2.5 Payment information

If you subscribe to a Pro plan, payment details (card number, expiration, billing address) are collected and stored by our payment processor, Stripe, Inc. We receive limited subscription-status information from Stripe (plan tier, renewal date, last four digits of the card for display purposes). We do not store full card numbers.

2.6 Cookies and similar technologies

See Section 9.

2.7 Information from pod administrators

If you were invited to TaskCheck+ by a pod administrator, the administrator may have provided us with your name, email, and role in order to create your invitation. The administrator is responsible for the accuracy of the information they submit on your behalf.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain TaskCheck+
• Authenticate users and enforce account security
• Record and display time logs and location check-ins to pod administrators for workforce management
• Process subscription payments via Stripe
• Send you transactional emails (email verification, password reset, billing receipts, important service notices)
• Send you product notifications you have opted into (for example, assigned tasks, due reminders, push notifications)
• Provide customer support when you contact us
• Diagnose technical issues, detect abuse, and improve the App
• Comply with legal obligations, including responding to lawful requests from public authorities

Automated decision-making. TaskCheck+ does not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, United Kingdom, and Switzerland, our legal bases for processing your personal data are:

• Contract to provide TaskCheck+ under our Terms and your or your employer's subscription
• Legitimate Interests to operate, secure, and improve the Service; to prevent fraud and abuse; to administer our business
• Consent where you have granted consent (for example, location permission, push notifications, or optional marketing communications)
• Legal Obligation to comply with applicable laws, such as tax and recordkeeping requirements

You may withdraw consent at any time by contacting privacy@frameworkstudio.dev. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

5. How We Share Information

We do not sell or rent your personal information. We share information only as described below.

5.1 Within your pod

Pod administrators have visibility into tasks, checklists, time logs, and location check-ins submitted by members of their pod. This is core functionality of the App.

5.2 Service providers

We share information with vendors that provide infrastructure necessary to operate TaskCheck+. These providers are bound by contract to use your data only on our behalf and to protect it:

• Google LLC (Firebase) authentication, database (Firestore), file storage (Cloud Storage), push notifications (FCM)
• Stripe, Inc. payment processing for Pro subscriptions
• Resend, Inc. transactional email delivery (verification, password reset, receipts)
• Vercel, Inc. web application hosting
• Apple Inc. / Google LLC (Google Play) mobile app distribution

5.3 Legal and safety

We may disclose information to comply with a subpoena, court order, or other legal obligation; to protect the rights, property, or safety of 168th Street Entertainment LLC, our users, or the public; or to investigate suspected fraud, abuse, or violation of our Terms.

5.4 Business transfers

If 168th Street Entertainment LLC is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5.5 With your consent

We may share information for purposes not described above only with your explicit consent.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we delete or anonymize your personal data within ninety (90) days, except:

• Data required by law to retain (for example, tax records, typically up to seven years)
• Aggregated or anonymized data that can no longer identify you
• Data necessary to resolve pending disputes or enforce our Terms

Pod administrators may retain data about former pod members for recordkeeping required under applicable wage-and-hour, labor, or regulatory laws.

7. Data Security

We use industry-standard technical and organizational safeguards to protect your data, including:

• Encryption of data in transit (TLS)
• Encryption of sensitive data at rest (Firebase encryption)
• Role-based access controls and Firestore security rules
• Authentication via Firebase with email verification
• Regular security review of the application and infrastructure

No system is completely secure. If we become aware of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

8. Your Privacy Rights

8.1 All users

Regardless of where you live, you may:

• Access and update your account information from within the App
• Request a copy of the data we hold about you by contacting privacy@frameworkstudio.dev
• Request deletion of your account and data by contacting privacy@frameworkstudio.dev
• Opt out of non-essential email communications (unsubscribe links appear in every marketing email)

8.2 EEA, UK, and Swiss residents (GDPR)

In addition to the rights above, you have the right to:

• Rectify inaccurate personal data
• Restrict processing in certain circumstances
• Object to processing based on legitimate interests
• Data portability: receive your data in a structured, commonly used, machine-readable format
• Lodge a complaint with your national data protection authority

8.3 California residents (CCPA/CPRA)

You have the right to:

• Know the categories and specific pieces of personal information we have collected about you
• Delete personal information, subject to legal exceptions
• Correct inaccurate personal information
• Opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.
• Limit use and disclosure of sensitive personal information, including precise geolocation. To limit our use, contact privacy@frameworkstudio.dev
• Non-discrimination for exercising your privacy rights

8.4 Other U.S. state residents

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have rights similar to those above, including access, deletion, correction, and opt-out rights. Contact privacy@frameworkstudio.dev to exercise any applicable rights.

8.5 How to exercise your rights

Send a written request to privacy@frameworkstudio.dev. We will verify your identity before fulfilling the request. We respond within the time frames required by law, typically thirty (30) days for GDPR requests and forty-five (45) days for CCPA/CPRA requests, with possible extensions.

9. Cookies and Similar Technologies

TaskCheck+ uses cookies and similar technologies to maintain your session, remember your preferences, and understand how the App is used. We use:

• Essential cookies required for authentication, security, and core functionality
• Analytics cookies to understand usage patterns and improve the App (you can disable these via your cookie preferences)

On your first visit, we present a cookie consent banner where you can review and control your preferences. You can change your cookie preferences at any time through the in-App cookie settings.

We do not use cookies for advertising, retargeting, or user profiling.

10. Children's Privacy

TaskCheck+ is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from someone under 18, please contact privacy@frameworkstudio.dev immediately and we will delete it.

11. International Data Transfers

168th Street Entertainment LLC is based in the United States, and our service providers (Firebase, Stripe, Resend, Vercel) operate data centers in the United States and other jurisdictions. If you are located outside the United States, your information will be transferred to and processed in the United States and other countries. By using the App, you consent to this transfer.

For EEA, UK, and Swiss users, we rely on appropriate safeguards, including Standard Contractual Clauses or equivalent mechanisms provided by our service providers, to protect your information during international transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes (for example, a new category of data collection or a new sharing relationship), we will notify you via email or in-app notice before the change takes effect. Your continued use of TaskCheck+ after the update constitutes acceptance of the updated Policy.

13. Contact

For privacy questions, data-subject requests, or to exercise any of your rights:

• Privacy and data-subject requests: privacy@frameworkstudio.dev
• General legal inquiries: legal@frameworkstudio.dev
• Operated by: 168th Street Entertainment LLC
• Product: TaskCheck+