Updated: August 19, 2026
Small Task is an app for managing employee tasks within a single company. This page explains what data the app collects, why, who it is shared with, and how to delete it.
| Data | Purpose |
|---|---|
| Email address | Account login and password recovery. There is no other way to identify the user. |
| First and last name | Shown to colleagues: who is assigned to a task and who changed its status. |
| Company name | Groups employees into a single workspace. |
| Tasks: title, description, notes, deadlines, statuses, tags | This is the core content of the app. |
This data is stored on our server and is visible only within your company.
| Data | Purpose |
|---|---|
| Device identifier | To distinguish phones belonging to the same person, so access can be revoked from a lost device. |
| Notification token | Delivery of push notifications about assigned tasks. |
| Time zone | Defines day boundaries in reports: “for Tuesday” should mean Tuesday in your local time, not the server’s time. |
The app uses Firebase Crashlytics. When the app crashes, the following are collected: error type and the place in the code where it occurred, device model, Android version, app version, free memory amount, and an anonymized installation identifier.
The content of your tasks is not included in crash reports.
The app uses Firebase Analytics: which screens are opened and which features are used. This helps us understand what is not working well in the app. Anonymized events, device model, Android version, interface language, and approximate location at the country or city level, determined from the IP address, are collected.
On the free plan, ads are shown via Google AdMob. For ad display, the following are shared: advertising ID, device model, Android version, approximate location based on IP, and data about interactions with ads.
On the paid plan, ads are not shown, and data is not shared with advertising networks.
Precise location (GPS), contacts, photos and files, clipboard content, list of installed apps, microphone, call and message history. The app does not request the corresponding permissions.
| Recipient | What | Their policy |
|---|---|---|
| Google (Firebase Crashlytics, Analytics) | Crash reports, anonymized usage statistics, approximate location based on IP | firebase.google.com/support/privacy |
| Google AdMob | Advertising ID, device data, approximate location | policies.google.com/technologies/ads |
| Google Play Billing | The fact of subscription payment and its validity period. Payment details go through Google and do not reach us | policies.google.com/privacy |
The content of your tasks, employee names, and email addresses are not shared with advertising networks or analytics. We do not sell personal data.
If you are in the European Economic Area, the United Kingdom, or Switzerland, on first launch the app will ask for consent to use data for advertising. Declining does not limit the app’s functionality — ads will still appear, but will be non-personalized. You can change your decision in the app settings.
In Android settings: Settings → Privacy → Ads — you can reset or completely delete the advertising ID.
This data is anonymized and used only to find bugs and understand which features are not working well. In countries where consent is required, it is requested on the same screen as advertising consent.
Subscribe to the paid plan. Ads disappear, and data is not shared with advertising networks.
Tasks are deleted automatically after the retention period expires. The period is counted from the latest of: completion, cancellation, assigned deadline, or last modification of the task — so future and active tasks are not deleted while they are still needed. The company owner sets the period in the settings; the upper limit is set by the plan — one month on the free plan and one year on the paid plan.
Anonymized daily statistics (how many tasks were assigned and completed) are kept longer, so that reports for past periods do not change after tasks are deleted.
Retention periods for data in Google services are determined by their own policies, links to which are provided above.
In the app: Settings → Delete account. An employee deletes their own account; the company owner deletes the entire company along with tasks and employee accounts. This action is irreversible.
Without the app: write to admin@cuptrack.link from the address the account is registered with. We will delete the data within 30 days and confirm the deletion by reply email.
Passwords are stored only as irreversible hashes — the original password cannot be recovered, including by us. Data exchange between the app and the server uses HTTPS.
The app is intended for workplace use and is not designed for children under 13. We do not knowingly collect data from children.
The app is provided “as is” and “as available,” without any warranties — express or implied, including warranties of fitness for a particular purpose and uninterrupted operation.
The app is an auxiliary task-tracking tool, not a substitute for your own control over work. To the extent permitted by law, we are not liable for any direct or indirect damage, lost profits, or losses arising from the use of the app or the inability to use it, including for:
Responsibility for organizing work, verifying task completion, and safeguarding important data remains with the company and its employees. We recommend not relying on the app as the sole source of critically important information.
In the event of significant changes, we will update the date at the top of the page and notify you in the app.
Questions about data processing: admin@cuptrack.link