Who operates NoteTasker
NoteTasker is operated by Marc Vallverdú. This policy covers the NoteTasker iPhone app, this website, and the NoteTasker public-link service. The app is currently in private testing.
For privacy questions, access requests, or deletion requests, email marc@remarcablevc.com. Do not email passwords, service credentials, or sensitive page content.
What stays on your iPhone
Your task titles, private notes, schedules, task library, saved source text, and prepared summaries are stored on your iPhone. You do not need an account to use the current build, and it does not sync your task library between devices.
NoteTasker keeps a small activity log on the device to help the app work. It is capped at 1,000 events and 30 days. It contains event names, timestamps, source-presence flags, and timing values, not your task text, source text, URLs, account identifiers, or passwords.
Reminders use Apple's local notifications. Their previews can show task titles, depending on your iOS settings. An export is created only when you ask for one, and you choose where to send it. NoteTasker cannot recall an exported or shared copy.
How public-link preparation works
When you save a supported public link, NoteTasker sends it to the NoteTasker service. Ordinary page URLs go to Firecrawl for capture. For supported public X posts, only the public post identifier goes to the FxEmbed (FxTwitter) thread API, without your X account credentials or browser cookies.
OpenAI, or OpenRouter and the free-model provider it routes to when that route is enabled, receives bounded public page text and a query-free page URL to create a short summary and select readable source content. OpenRouter's routed provider may change between requests. Both the first selection and an independent review use the same retained source.
The current app uses a fixed public-source purpose for these summarization requests. It does not send your written task title, private notes, schedules, or unrelated tasks to Firecrawl, FxEmbed, OpenAI, OpenRouter, or a routed model provider. Older app versions may send a task title to the NoteTasker service to bind a request, but the service does not forward that title to those providers.
Public URLs and page text can still contain personal information. Do not submit private, signed, credential-bearing, or sensitive links. NoteTasker's URL checks reduce obvious risks but cannot identify every personal detail in a URL or page.
Known tracking parameters and fragments are removed before capture. Deliberate product options may remain in a URL sent to Firecrawl, while the explicit page URL sent to an AI provider has its query removed.
Service and security records
Apple App Attest helps verify supported installations. The service processes an installation identifier, attestation public key and replay information, device authorization, request/task/source identifiers, a store-scope fingerprint, public URLs, and preparation results. Hosting and network systems can also process connection IP addresses and security metadata. These records are not anonymous.
Provider credentials stay on the server rather than in the app. Service job requests and results are encrypted with a server-held key.
Retention and outside providers
NoteTasker job payloads expire 24 hours after admission. A periodic cleanup removes expired payloads, although a cleanup failure can delay removal. Content-free job tombstones remain for a separate seven-day period after job expiry. Authentication, ownership, revocation, quota, and replay ledgers have separate security-retention boundaries.
Payload expiry is not a promise to erase infrastructure logs, host-level backups, or historical copies. Firecrawl capture requests disable its capture cache. OpenAI requests turn completion storage off. OpenRouter requests disallow data-collection endpoints. None of these settings is a zero-retention guarantee.
Firecrawl, FxEmbed, OpenAI, OpenRouter, routed model providers, Apple, and hosting providers apply their own processing and retention rules. NoteTasker cannot delete copies they retain independently.
Provider policies
Your choices and deletion
You can stop automatic link processing in Settings. Links saved while processing is stopped remain pending. Resuming processing authorizes those pending links to be prepared.
Deleting a task removes its local content and queues cancellation of its service job. If you are offline, that cancellation stays pending until the service acknowledges it. In Settings, you can stop link processing and request device revocation without deleting your saved local tasks. If confirmation is lost, the app keeps a cleanup credential so you can retry the revocation.
Deleting all local data clears local tasks, saved sources, pending captures, app-held exports, activity metadata, and task reminders. It does not recall copies you exported, content already processed under a provider's own policy, or historical infrastructure copies outside NoteTasker's direct control.
This website
This is a static product website. NoteTasker does not run an account, signup form, advertising tracker, or analytics script here, and it does not set its own marketing cookies. Cloudflare hosts the site and can process ordinary request information such as IP address, browser details, requested pages, and security signals to deliver and protect it.
Policy changes
If the app, website, or link-processing route changes in a way that affects this policy, the updated policy will be published here with a new date.