Privacy and security

What it can see

When you sign in, Google asks you to allow two things: your Google Tasks, and your email address so your accounts can be told apart. Nothing else in your Google account: not your mail, calendar, files or contacts.

What it stores

• Your Google sign-in, encrypted, so it can reach your tasks when your AI app asks. It’s never shared with the AI app.
• Your account: your email address, your plan and any purchases you link.
• Your tasks, briefly: a copy for a few minutes while you work, so answers are quick. A delete preview keeps only task and list IDs, for ten minutes.
• Changes waiting for Google: when Google’s daily limit is reached, a change you ask for is kept, with its text, until it goes through, for up to 7 days, then removed.
• Your connected AI apps, so you can see and disconnect them. Their access tokens are stored only as hashes.
• Linked Macs, each one’s name, when it was linked and last checked, and its key to check your Premium, stored only as a hash.
• Counts, such as today’s deletes, for the free plan’s limits.
• A security log of events such as sign-ins and deletes, with no task content, kept for a year.

Cloudflare stores and processes this data in the United States and other countries, under its data processing addendum.

Task titles and notes are never written to logs and never used to train AI.

Who it’s shared with

Your tasks go only to the AI app you connect, when you ask it something. Sidekick for AI runs on Cloudflare. Premium and the Founder Edition bought on the web are sold by our payment provider, which acts as the seller (merchant of record); App Store purchases are sold by Apple.

Deleting your data

From your account page you can disconnect an AI app, disconnect a Google account when you have more than one, or delete your account. Deleting your account removes what Sidekick for AI holds about you, except security log entries, which hold no email or task content and expire after a year, and database backups, which expire within 30 days. It also cancels any web subscription and revokes its access to your Google account. You can also remove its access from your Google Account’s security settings at any time.

Separate from Sidekick for Mac

Sidekick for Mac has no servers for your tasks: they travel only between your Mac and Google. Sidekick for AI is a separate service with its own sign-in, and its own section in the privacy policy. If you link your Mac to your Sidekick account so Premium works in both, the Mac sends only what’s needed to check Premium, never your tasks or Google accounts (what it sends).

Google Workspace

Workspace accounts work where the administrator allows third-party apps to use Google Tasks. If your organisation blocks it, an administrator can allow Sidekick for AI in the Google Admin console, with the client ID and steps on this page.