YATA · com.mj.yata
Privacy Policy
What YATA stores, what it sends, and what it never touches — written to match exactly what the app does, not a generic template.
In short
- No account is required, and there's no server of ours your tasks get sent to.
- Your tasks, notes, and personal data stay on your device by default.
- Backup and sync are off by default. If you turn one on, your data goes only to the destination you configure — your own GitHub repo, or your own SFTP/FTP/FTPS server — never to us.
- No ads, no analytics or tracking SDKs, no in‑app purchases, and we never sell or share your data.
- Export or delete your data from inside the app, any time.
01 Information stored on your device
Everything below lives in YATA's local database and app‑private storage. None of it is transmitted anywhere unless you explicitly enable a backup/sync destination (section 3) or use the share feature (section 4).
| Data | Details |
|---|---|
| Tasks & subtasks | Title, notes, due/start dates, times, priority, recurrence, reminders, comments, and any attachments you add. |
| Projects, Lists, Tags, Groups | Names, colors, and icons for whatever you create to organize tasks. |
| People | Names and, optionally, a photo you add — used only to track who a task is delegated to. This is typed in by you, not read from your phone's Contacts app. |
| App settings | Theme, notification preferences, and feature toggles. |
| App Lock PIN | If enabled, only a salted PBKDF2 hash of your PIN is stored — never the PIN itself. Excluded from Android's automatic device backup. |
| Crash logs | If the app crashes, a diagnostic entry is written to an in‑app log (Settings → Diagnostics). It stays on your device and is never uploaded automatically. |
Uninstalling the app, or using the in‑app delete/clear‑data options, removes this data from your device — subject to the short Trash/undo window the app itself gives you.
02 Permissions the app requests
| Permission | Why YATA asks |
|---|---|
| Notifications | Task reminders, daily agenda, and overdue nudges you configure. |
| Exact alarms / Boot completed | So reminders fire at the exact time you set, and survive a phone restart. |
| Ignore battery optimizations | Optional — so background reminders aren't delayed if you choose to allow it. |
| Vibrate | Haptic feedback for reminders and in‑app actions. |
| Record audio | Only while you're dictating a task. Speech is converted to text by Android's on‑device recognizer where available — audio isn't stored or sent to us. |
| Read calendar | Only when you explicitly import calendar events as tasks. Read on demand, converted locally — never synced back. |
| Biometric | Only to unlock the optional App Lock with your fingerprint/face, handled entirely by Android — YATA never receives the biometric data itself. |
| Storage / file access | When you manually export a backup, attach a photo, or import a file via the system picker. |
| Internet / network state | Only used for features you opt into — cloud sync, importing a shared task link, opening an external support link. With sync off, YATA makes essentially no network requests. |
YATA never requests location, contacts, SMS, call‑log, or camera permissions.
03 Optional cloud backup & sync
Off by default
YATA can optionally back up or sync your data — in the same JSON format used for local export — to a destination you choose under Settings → Backup & Sync:
- GitHub — commits an encrypted or plain snapshot to a repository you authorize with your own personal access token.
- SFTP / FTPS / FTP — uploads a snapshot to a server address and account you provide.
What this means in practice
Connection details and credentials you enter (server address, username, token/password, optional encryption passphrase) stay in YATA's local, app‑private storage. We never receive or see them. Your task data travels directly from your device to the destination you configured — never through, or stored on, a server we operate. You can turn on an encryption passphrase so the backup content itself is encrypted before it leaves your device. Once your data reaches GitHub, or your own server, it's governed by that provider's own policy — or by how you run your own server. You can disconnect any destination at any time.
05 Notifications
All reminders and notifications are scheduled and delivered locally through Android's own alarm and notification systems. YATA doesn't use a push‑notification service, so no notification content is ever routed through a third‑party push server.
06 Home‑screen widgets & Tasker integration
Widgets read your task data locally to display it and introduce no additional data collection. The optional Tasker "Create Task" integration — off by default — lets other automation apps on your device create tasks via a local broadcast. It involves no network transmission, and you must explicitly turn it on in Settings before anything can use it.
07 No ads, analytics, tracking, or data sale
YATA contains no advertising SDKs, no analytics or usage‑tracking SDKs, and no third‑party crash‑reporting services. We don't sell, rent, or share your personal data with advertisers or data brokers, and there are no in‑app purchases. A "Support the developer" button, where present, opens an external Buy Me a Coffee page in your browser — we receive no data from that unless you choose to pay there, which Buy Me a Coffee handles under its own policy.
08 Children's privacy
YATA is a general‑purpose productivity tool, not directed at children, requires no account creation, and does not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction).
09 Security
- Your App Lock PIN is never stored in plain text — only a salted PBKDF2 hash.
- While App Lock is on, YATA hides its content from the Android Recents/Overview screenshot preview.
- Optional cloud sync supports end‑to‑end encryption of the backup content via a passphrase you set.
- No system is perfectly secure, but by default your data is designed to never leave your device.
10 Your choices
- Export a full backup of your data any time — Settings → Backup & Data.
- Delete individual tasks, people, projects, lists, or tags — or clear all app data — from within the app.
- Turn off any optional feature: voice input, calendar import, People, Tags, Projects, cloud sync, Tasker integration, notifications.
- Uninstall to remove all locally stored data from your device. Remote backups you set up remain at the destination you configured until you delete them there yourself.
11 Changes to this policy
We may update this policy as YATA's features change. Material changes are reflected by updating the "Last updated" date above and, for significant changes, noted in the app's changelog.
12 Contact
Questions about this policy or your data:
App source & release notes: github.com/rjwarrier/yata