Kailos privacy policy

This policy is published by Knivier for the Kailos app (also called Tasker) on macOS, Windows, Android and iOS, and for the Kailos website at knivier.com/Tasker. It describes the information the apps handle. Last updated 29 October 2026.

The short version

Your tasks live on your own device. If you sign in with Google or Apple, Kailos also keeps a copy on a hosted database so your devices stay in step. Kailos uses your email address (for Apple, the address you share, which may be Apple's private relay address) and a user id to recognize your account, and nothing else from Google or Apple. Nothing is sold, shared with advertisers, or used for advertising. You can delete the hosted copy at any time.

Who this covers

Kailos is a task manager for your own lists. Knivier is the developer and the party responsible for this policy. The app is not an advertising product, and it is not directed at children under 13.

Information stored on your device

Kailos keeps a database on the computer or phone where you install it. That file holds the library you create: list names and colors, task titles and descriptions, time estimates, due dates, completion, project structure, and strike history. It also holds settings such as your theme and which lists you hide. A snapshot of that file is kept on the same device for each of the last seven days, so a damaged file can be restored. Updating or reinstalling the app does not delete this file on a computer. On Android and iOS, uninstalling the app removes its data from the phone. On Android the app's data is left out of Google backups and device-to-device transfers, so a copy is not kept anywhere else.

Reminders are scheduled on the device itself, using the operating system's notification system, and on a phone you are asked for permission to show them. They are not sent through any server. A local log records technical failures so a problem can be diagnosed later. The log does not include task text, your email address, or sign-in tokens, and it is never uploaded automatically.

Google user data

What is accessed. The first time you open Kailos it asks you to sign in with Google, through Supabase Auth. Kailos asks Google only for the basic sign-in scopes (openid, email and profile). From that sign-in Kailos receives your Google account email address and a user id. Google also makes your name and profile picture address available to the sign-in service; Kailos does not read, show, store or use them. Kailos does not ask Google for your mail, contacts, calendar, Drive files or any other Google data.

How it is used. The email address and user id identify your account, so your library can be saved to you and synced to your other devices. They are not used for advertising, profiling, or any purpose unrelated to running Kailos for you.

Limited Use. Kailos's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sign-in tokens. After you sign in, a refresh token is stored in the operating system's credential store: the Keychain on macOS and iOS, Credential Manager on Windows, and Android's encrypted app storage on an Android phone. On an iPhone the token stays on that one phone: it is not copied to other devices or restored from a backup, and reinstalling the app asks you to sign in again. If a computer's credential store isn't available, the token is kept instead in a file in Kailos's data folder that only your user account can read. The short-lived access token stays in memory for the session. Signing out, or removing an account from the phone, removes the saved token and ends that sign-in on the server. It does not delete the library on your device.

Information sent to the sync service

If you are signed in, Kailos sends changes to a database hosted by Supabase so your other signed-in devices can receive them. The rows sent are your lists, tasks, strikes, and a few preferences: theme, whether completed tasks are hidden, whether the stats bar is shown, which board lists are hidden, and which lists are left out of the week view. Each row is tagged with your user id and the time it was edited. Deleting an item sends that deletion too, so your other devices can hide it. A deleted item keeps no text: its title, notes or list name are cleared on your devices and in the synced copy, and only its id and the time it was deleted remain. (Items deleted with versions released before November 2026 can still hold their text in the synced copy; deleting your account removes it.)

Window positions, "already notified" flags and other per-device state stay on the device that created them and are not uploaded.

Who it is shared with

Kailos shares information only with the providers it needs to work. Google and Apple provide the sign-in screens and confirm your email address (with Sign in with Apple you can choose to share a private relay address instead). When you delete an account that signs in with Apple on an iPhone, Kailos asks Apple to end that sign-in. On an iPhone the app also asks the App Store whether a newer version exists; that request carries only the app's id. Supabase hosts the authentication service, the database that stores synced rows, and the public file storage the apps use to check for updates. They process that information only so Kailos can sign you in and sync your account. Knivier does not sell your information, does not pass your library to any other company, and does not share it with advertisers or data brokers. Information is disclosed only if the law requires it.

Information that is not collected

Kailos does not include an advertising SDK or a third-party analytics SDK. Checking for an app update downloads a public version file. That request does not include your email, your tasks or an account id. Downloading an update fetches a public installer file in the same way.

How information is protected

In transit. Everything Kailos sends to Supabase, Google and Apple travels over HTTPS (TLS). Updates for the Mac app are installed only when they carry Kailos's own Developer ID signature.
At rest on the server. Synced data is stored in Supabase's hosted database, which encrypts stored data. Access rules on the database let a signed-in account read and write only its own rows.
Sign-in tokens. They are kept in the operating system's credential store or Android's encrypted storage (on a computer without a working credential store, in a file only your user account can read), and the app never contains a secret key that could read other people's data.
On your device. The library is a file in your own user area. Protect it with your device's lock screen and disk encryption.

No system is perfectly secure. If a breach affecting your information occurs, Knivier will tell affected users through the app or this page.

How long it is kept, and how to delete it

The on-device database and its seven daily snapshots remain until you delete them, or until you uninstall the app in a way that removes its data. Signing out leaves that local copy in place. Deleting a list or task in the app removes it from the device and, if you are signed in, syncs that deletion to the hosted copy.

The hosted copy of your account and synced library is kept for as long as you use Kailos. In the app: open Settings, then Manage account, then Delete account, and confirm. You are asked to confirm more than once, because it can't be undone. This deletes your account, the hosted copy of your library, and the sign-in record straight away. It can't be undone. You can also ask for deletion by writing to help@knivier.com (or through knivier.com), saying which Google or Apple account to remove; such requests are completed within 30 days of verification. Deleting the hosted copy does not by itself erase the database already stored on your devices; delete that by uninstalling the app or removing its data folder. Daily snapshots on a device are never uploaded.

Your choices

Kailos asks you to sign in with Google or Apple the first time it opens, and syncing needs it. You can sign out at any time, export a full backup or a Markdown list from the app, and delete your account and hosted copy from Settings as described above.

Changes to this policy

If Kailos changes how it uses Google user data, this page is updated before the change ships, and the date at the top changes with it.

Contact

Questions about this policy or requests to delete your data: help@knivier.com, or knivier.com.