Privacy

Last updated 14 October 2026

What TaskPop stores

Your tasks, categories, reminders, timers, quick note and settings are saved in a folder on your own computer (on a Mac in ~/Library/Application Support/TaskPop, on Windows in %APPDATA%\TaskPop), along with a backup copy. You can export your tasks and categories to a file, or delete them at any time. Uninstalling TaskPop on Windows offers to remove them too; on a Mac, delete that folder.

Hidden text in the quick note

Text you hide in the quick note is encrypted the moment you hide it, with a key that macOS keeps in your login keychain (“TaskPop Safe Storage”), or that Windows keeps for your user account. It’s never saved, backed up or copied as plain text, and it isn’t included when you export your tasks. The rest of the note is saved as ordinary text, like your tasks.

Before it shows or copies hidden text, TaskPop asks macOS for Touch ID or your Mac password, or Windows for Windows Hello or your Windows password. These are the system’s own dialogs: TaskPop never sees your fingerprint, face, PIN or password, only whether the system said yes. Shown text hides itself again after a minute, and copied text is taken off the clipboard after a minute if it’s still there.

What TaskPop sends over the internet

• Nothing about you or your tasks.
• Google Calendar (only when you choose it): “Add to Google Calendar” opens Google Calendar in your web browser with the event details you entered, for you to review and save. TaskPop doesn’t sign in to your Google account. From there, Google’s privacy policy applies.
• Update checks (downloaded from our website only): the version from our website asks TaskPop’s GitHub page whether a newer version exists, a few times a day. You can turn this off in Settings. Like any web request, GitHub sees your internet address and the TaskPop version. When you choose to update, the new version is downloaded from GitHub. The Microsoft Store version is updated by the Store instead and makes no such request.
• Installing (downloaded from our website only): the installer downloads the rest of TaskPop, the Electron runtime it’s built on, from GitHub, and checks it before installing.

The double-tap shortcut

To notice when you double-tap a key like Control or Shift, TaskPop checks whether those modifier keys are held down, and keeps a running count of other key presses and clicks so that shortcuts like Ctrl+C don’t count as a tap. It never records which keys you type, and none of this leaves your computer. On a Mac this is the Input Monitoring permission. You can turn the double-tap off in Settings.

Notifications and start-up

Reminders, timers (“Time’s up”) and the morning summary are shown by your computer’s own notification system, with your task titles in them. TaskPop starts with your computer so it can show your tasks when you open the lid or unlock; you can turn this off in Settings (on Windows: Settings → Apps → Startup).

This website

Visits to this website are counted with Vercel Web Analytics, and Vercel Speed Insights records how fast the pages load. Neither uses cookies, and neither receives your tasks or anything you type in TaskPop. The TaskPop app itself still has no analytics.

Children

TaskPop doesn’t collect personal information from anyone, including children.

Changes and questions

If this policy changes, the new version will be posted on this page with a new date. Questions are welcome on TaskPop’s GitHub page, where you can also read TaskPop’s source code and the technical details of what it stores and sends.