Workspace
Privacy Policy
Local-first by default. Your text, your device.
Local-first storage
Your analyses, templates, actions board, and settings are stored in your browser's local storage on your device. They are not uploaded to us or saved on our servers unless you sign in and choose to sync.
What is sent to AI providers
When you analyze text, that text is transmitted to the configured AI provider (for example TokenRouter) solely to generate the analysis: extracted actions, deadlines, urgency, and a summary. The provider receives your text once; the results are then stored locally on your device. We do not retain or log the text you analyze beyond the request itself.
Translation
If you translate a summary, the summary text is sent to the translation provider to produce the translation. The same local-first rule applies: only the text you explicitly ask to translate is transmitted.
Analysis chat
When you use the analysis chat to ask about a result, the original message and that analysis are sent to the AI provider (such as OpenCode Zen) to generate the answer. Voice reading of translated summaries uses your device's built-in speech engine and never sends text anywhere.
Share links
Share links are created by encrypting the analysis with a server-side secret (AES-256-GCM), so the raw result can't be read from the URL alone; the shared page is generated by decrypting it on the server. The raw input is only included when you choose to include it, and when you mark a share as sensitive the input is never sent to the page. Links do not expire, and are not stored on our servers. Anyone with a working link can open the share, so treat it like a document link.
Account data
If you create an account, your email address and a securely hashed password are stored to authenticate you, and your synced data (history, templates, board) is associated with that account so you can merge it on another device. You can back up, merge, or delete all of this data at any time from Settings, and deleting your account erases the data we hold about you.
Advertising
Advertisements on this site are served by third-party providers (such as Google AdSense) only if you have consented to non-essential cookies and if the site is configured for ads. You can withdraw consent at any time from Settings.
Cookies & sessions
We use a small number of strictly-necessary cookies: a theme preference and, when signed in, a secure session cookie for authentication. No analytics or tracking cookies are used.
Security
Passwords are hashed with a slow, salted hash (scrypt) and never stored in plain text. Sessions use signed, HttpOnly, SameSite cookies that expire after 30 days. Public endpoints are rate-limited to discourage abuse. Despite these measures, no method of transmission or storage is completely secure, and you use the service at your own risk.
Data retention & your rights
Local data stays on your device until you clear it. Account data can be exported or erased at any time from Settings; account deletion permanently removes your user record and synced data. To exercise any data rights, use the account controls in Settings.
Changes
We may update this policy as features evolve. Material changes will be reflected here, and continued use after changes constitutes acceptance.
TaskMind - Turn confusing messages into clear actions · Last updated August 2026