Privacy Policy

Last updated: December 28, 2025

1. INTRODUCTION

Welcome to Taskbl, operated by Shtrak BG Ltd ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application.

Shtrak BG Ltd is registered in Bulgaria, European Union (VAT: BG201099172). We comply with the General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act (PDPA).

2. DATA CONTROLLER

The data controller responsible for your personal data is:

• Shtrak BG Ltd
• VAT: BG201099172
• Address: Tzar Osvoboditel 72, office 1, Bulgaria
• Email: taskbl@shtrak.bg

3. DATA WE COLLECT

We collect and process the following personal data:

• Email address (for account creation and authentication)
• Task content (the text of tasks you create)
• Task metadata (creation dates, completion status, priority settings)
• Notification preferences and schedules
• Device information for push notifications

4. HOW WE USE YOUR DATA

We use your personal data for the following purposes:

• To provide and maintain our service
• To authenticate your account and secure your data
• To synchronize your tasks across devices
• To send scheduled task reminder notifications
• To improve our service and user experience

5. LEGAL BASIS FOR PROCESSING

Under GDPR, we process your personal data based on:

• Contract Performance: Processing necessary to provide you with our service
• Consent: For optional features like push notifications
• Legitimate Interest: To improve our service and ensure security

6. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Account data is retained until you delete your account. Task data is retained until you delete individual tasks or your account.

7. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication through Firebase
• Regular security assessments
• Access controls and monitoring

8. YOUR RIGHTS (GDPR)

Under GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interest
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us or use the account deletion feature in the app settings.

9. THIRD-PARTY SERVICES

We use the following third-party services to operate our app:

• Google Firebase (Authentication and Database) - GDPR compliant
• Expo (Push Notifications) - GDPR compliant

These services are bound by their own privacy policies and data processing agreements.

10. INTERNATIONAL DATA TRANSFERS

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. CHILDREN'S PRIVACY

Our service is not intended for children under 14 years of age (as per Bulgarian law). We do not knowingly collect personal data from children under 14. If you believe a child has provided us with personal data, please contact us immediately.

12. SUPERVISORY AUTHORITY

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) if you believe we have violated your data protection rights.

• Website: https://cpdp.bg/en/
• Address: 2 Prof. Tsvetan Lazarov blvd., 1592 Sofia, Bulgaria

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy in the app and updating the "Last updated" date.

14. CONTACT US

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: taskbl@shtrak.bg
• Address: Tzar Osvoboditel 72, office 1, Bulgaria
• Company: Shtrak BG Ltd (VAT: BG201099172)