Effective date: 26 October 2026
Developer: John Paul Bizeray, trading as Mr-Bizzy, United Kingdom
Contact: [email protected]
Your lists, tasks, notes, comments, due dates, reminders, tags, saved filters and settings, and any files or photos you attach, are stored in 4Tasks' own folders on your phone. If you connect a sync account, 4Tasks also stores that account's address and user name, its password or token, which is encrypted with a key held in the Android Keystore before it is saved, the session cookies the server gives it, and any certificate you chose to trust. 4Tasks also keeps automatic backup files (section 3), a short diagnostic log on the phone that is never sent anywhere, and its 4Link records (section 5). Places attached to synced tasks are kept as coordinates only; 4Tasks does not look them up online. It stores nothing else. Android's Settings, Apps, 4Tasks, Storage, Clear storage deletes it all. When you uninstall 4Tasks, Android asks whether to keep its data; if you say no, it is deleted. A backup you saved to a folder of your own choosing stays where you put it.
CalDAV is an open standard for tasks and calendars, offered by many services and by servers people run themselves. When you add a CalDAV account in Settings, Accounts, Add account, 4Tasks connects to the address you typed.
http:// addresses are refused. By default only certificates your phone trusts are accepted. A server you run yourself with a self-signed certificate works only if you turn on Settings, More, Advanced, Allow self-signed certificates; you are then asked to trust that one certificate, and its name must still match the address. Turning the switch off forgets the certificates you trusted.Once a day 4Tasks automatically saves a backup file and keeps the newest seven, in the backup folder shown in Settings, Backups. Until you choose another folder this is 4Tasks' own folder on the phone, which Android deletes if you uninstall. You can turn this off, make a backup at any time, and read one back. The file holds your tasks, comments, filters and settings, and each sync account's address and user name, but never its password or token: after a restore, the account comes back and asks you to sign in again. Restoring a Tasks.org backup can bring back old account entries without their passwords; 4Tasks does not connect them. 4Tasks does not upload backups anywhere. If you choose a folder that a cloud service syncs, that service's policy applies.
4Tasks does not ask for your location, contacts, calendar, camera, microphone or storage. It has no microphone button; voice input is 4Dictate's job. If you turn on spoken reminders, the reminder text is passed to your phone's own text-to-speech engine.
4Tasks has one door for other apps on the same phone, called 4Link. It never shows anything on its own and works only on this phone.
4Tasks itself sends nothing over the internet through 4Link. If you use Reprocess on a dictated note, 4Tasks gives that note's text to 4Dictate, whose policy covers it. What 4Dictate does with your spoken words (to choose a function it may send them to its tidy-up service, even if tidy-up is off) is described in 4Dictate's privacy policy.
When you allow an app, that app receives what the allowed functions return (for example, the titles of your tasks). What it does with them is governed by that app's own policy. Tasks you add or complete through 4Link sync like any other change.
Some screens open a web page in your browser: this policy, the Mr-Bizzy website, the 4Tasks manual, the source code on GitHub, and a few help pages on tasks.org (the original Tasks.org project's site). Your browser, not 4Tasks, connects to those sites.
4Tasks is free software under the GNU General Public License v3, based on Tasks.org (https://github.com/tasks/tasks). The source is at https://github.com/mr-bizzy/4tasks. It has switched off, and cannot reach, Tasks.org's own account service, Google and Microsoft services, maps, location and calendar features, and it has no Firebase, analytics, crash reporting or payments.
4Tasks is not directed at children and collects no personal information from anyone.
On your phone: delete a task in the app, remove a sync account, clear 4Tasks' storage, or uninstall it. Data that has been synced lives on the server you chose; delete it there. We hold nothing, so there is nothing to ask us to delete.
If this policy changes, the new version will be published on this page with a new effective date.
John Paul Bizeray, trading as Mr-Bizzy, United Kingdom, [email protected]
The user manual is at mr-biz.uk/4tasks/manual.