Privacy Policy for Sleek: To-Do & Tasks

Last Updated and
Effective Date:
January 23, 2026

This Privacy Policy describes how Sleek: To-Do & Tasks ("We", "Us", "Our", or the "Company") collects, processes, uses, and protects your personal data when you use our mobile application and related services.

We are committed to protecting your privacy in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, the Information Technology Act, 2000, and Google Play Data Safety guidelines.

🛡️ Executive Summary: 100% Offline & Private Guarantee

Sleek: To-Do & Tasks ("Sleek", "We", "Us", or "Our") is built strictly on an offline-first, privacy-by-design architecture. We believe your personal tasks, schedules, notes, and habits belong exclusively to you. Unlike traditional cloud-based productivity tools, Sleek does NOT collect, transmit, store, or process any of your personal data on external servers or cloud databases. No remote servers, no analytics or tracking (such as Firebase Analytics, Google Analytics, Mixpanel, Amplitude, or Meta Pixel), and no account required.

1. Roles Under the DPDP Act, 2023

►
Data Fiduciary: Under the DPDP Act, 2023, you are the Data Principal possessing full ownership and control over your personal data. To the limited extent that Sleek provides software tools for you to organize your data, Sleek acts as a local software provider adhering strictly to Purpose Limitation and Data Minimization without operating remote databases or servers.
►
Data Principal: You (the user managing tasks and habits on your device) act as the Data Principal under Section 2(j) of the DPDP Act. Since no personal data is collected by or transmitted to Sleek or any third party, Section 6 consent requirements for remote processing do not apply. All processing occurs locally under your direct control.

2. Notice of Itemized Data Collection (Section 5, DPDP Act)

We collect and process the following specific categories of personal data with your explicit consent:

A. No Remote Servers or Cloud Databases

►
What is collected: None (Zero server-side harvesting).
►
Purpose: All tasks, subtasks, categories, notes, shopping lists, and custom images are stored exclusively in local storage on your physical device (using local database engines such as Hive and SharedPreferences). We do not own, operate, or maintain cloud servers to capture or transmit your data.

B. No Third-Party Analytics or Tracking

►
What is collected: None.
►
Purpose: We do not use any third-party tracking, telemetry, advertising identifiers, or analytics tools (such as Firebase Analytics, Google Analytics, Mixpanel, Amplitude, or Meta Pixel). Your usage habits and task schedules remain completely private.

C. No Account or Personal Identity Required

►
What is collected: None.
►
Purpose: You do not need to register, sign in, or provide an email address, phone number, or name to use the core features of Sleek.

D. 100% On-Device Task & Media Storage

►
What is collected: Local tasks, notes, reminders, custom icons, and category cover images selected from your photo library.
►
Purpose: All data generated inside Sleek is saved strictly on your local device. When you personalize categories by picking images from your photo gallery (`READ_MEDIA_IMAGES`), those selected image files are copied directly to Sleek's private local application folder on your physical device and are never uploaded to any server.

Device Permissions & Justifications

To perform its advertised core functionality as an advanced time tracker, mission countdown tool, and exact alarm clock, our application requests specific operating system permissions:

POST_NOTIFICATIONS (Notifications)
Used locally to deliver timely reminders for due tasks, daily morning briefings, and evening recap overviews that you schedule. 100% Local (On-Device). Notification triggers are scheduled locally via the OS notification system with zero network exfiltration.
SCHEDULE_EXACT_ALARM, USE_EXACT_ALARM, RECEIVE_BOOT_COMPLETED (Alarms & Scheduling)
Required to ensure task reminders and daily briefing alerts fire at exact timestamps chosen by you, and to reschedule local alarms seamlessly after your device reboots. 100% Local (On-Device).
READ_MEDIA_IMAGES / Photo Library Picker (Photos & Media Storage)
Used when you choose to personalize Task Categories or Collections by assigning custom icons or cover images from your photo gallery. 100% Local (On-Device). Selected image files are copied directly to Sleek's private local folder and never uploaded.
VIBRATE, WAKE_LOCK (Vibration & Wake Lock)
Used locally to gently vibrate your device during task alerts and briefly wake the screen when an alarm rings. 100% Local (On-Device).
INTERNET (Internet Access)
Used exclusively for: (1) Opening our optional "Our Other Apps" catalog page within a secure in-app web view when you tap it in Settings; and (2) Standard platform license check (CHECK_LICENSE) by Google Play. No personal data is transmitted. The core task application requires zero internet connection to function.

3. Consent & Right to Withdraw Consent (Section 6, DPDP Act)

Since no personal data is collected by or transmitted to Sleek or any third party, remote processing consent requirements do not apply. All processing occurs locally on your device under your direct control.

Right to Withdraw Consent (Section 6(4))

You have the absolute right to withdraw your consent at any time. You can withdraw consent by:

►
Toggling off scheduled reminders or notifications directly inside the Sleek settings menu.
►
Revoking system permissions (`POST_NOTIFICATIONS`, `SCHEDULE_EXACT_ALARM`, or `READ_MEDIA_IMAGES`) directly in your OS Settings (`Settings > Apps > Sleek > Permissions`).
►
Deleting specific tasks, subtasks, notes, or categories right from the application interface.
►
Uninstalling Sleek or clearing app storage (`Settings > Apps > Sleek > Storage & Cache > Clear Storage`), which instantly and permanently wipes 100% of locally stored data.

Deletion happens instantly on your physical device without needing to submit server requests or wait for remote processing.

4. Right to Erasure / Account Deletion (Section 12(3), DPDP Act & Google Play)

Because you are the sole holder of your data inside encrypted local device storage (`Hive` and `SharedPreferences`), you can delete or reset your data at any moment without needing to submit a server request:

►
In-App Deletion: Delete Specific Items: Swipe or tap to delete individual tasks, categories, notes, or shopping items inside the app. Deleted items are immediately removed from local storage.
►
Manual Deletion: Complete Data Reset / Deletion: Go to Android `Settings` > `Apps` > `Sleek` > `Storage & Cache` > tap `Clear Data / Clear Storage` (or iOS `Settings` > `General` > `iPhone Storage` > `Sleek` > tap `Delete App`). Or simply uninstall Sleek from your device. Uninstalling permanently and irreversibly erases all local databases, images, preferences, and scheduled alarms.

5. Third-Party Data Processors & Disclosure (Section 8 & Section 16)

We adhere strictly to data minimization and zero server-side harvesting. Sleek does not integrate any third-party tracking, telemetry, advertising identifiers, or analytics tools (such as Firebase Analytics, Google Analytics, Mixpanel, Amplitude, or Meta Pixel). We do not sell, share, transmit, or disclose any of your data to any third-party processors or cloud servers. All data remains strictly on your local device.

6. Data Security & Storage (Section 8(5))

While all data is kept locally on your device, we utilize secure, industry-standard local storage frameworks (`Hive`, `SharedPreferences`) protected by your operating system's sandbox isolation and device-level encryption (such as Android Full-Disk/File-Based Encryption or iOS Data Protection). Your data remains stored on your device for as long as you keep the Sleek application installed. You are in total control of how long your information is kept.

7. Children's Privacy

Sleek does not knowingly solicit, collect, track, or transmit personal data from children under the age of 13 (or under 18 under India's DPDP Act Section 9). Because the application is 100% offline and contains no behavioral profiling, targeted advertising, or social tracking, Sleek is safe and compliant for use by children and minors.

8. Third-Party Links & In-App Web Views

Sleek may contain an optional link or web view in the Settings menu titled "Our Other Apps" (pointing to `https://otherapps.vercel.app/`), which allows you to discover our other offline productivity applications. When you visit this external link, your standard web browser or in-app web view interacts directly with that website. We strongly recommend reviewing the privacy notices of any external websites you visit. We do not track your activity on third-party websites.

9. Developer Contact & DPDP Act Compliance (Section 8(9) & Section 13)

In compliance with Section 8(9) and Section 13 of the Digital Personal Data Protection Act, 2023, the contact details of the Developer are published below:

►
Name: Sleek: To-Do & Tasks Developer
►
Role: Solo Developer / Grievance Officer
►
►
Address: Uttar Pradesh, India
►
Response Timeline: If you have any questions, feedback, or legal inquiries regarding this Privacy Policy, your data protection rights, or grievance redressal under the DPDP Act or GDPR, please contact us directly via email at tanayanandmishra@gmail.com.

Right to Approach the Data Protection Board (Section 13(3))

If your inquiry or grievance is not resolved to your satisfaction by the Developer, you have the statutory right to file a formal complaint with the Data Protection Board of India (DPBI).

10. Changes to this Privacy Policy

We may update our Privacy Policy from time to time to reflect improvements in our app or regulatory changes. Any changes will be posted on this page with an updated "Last Updated" date, and made accessible directly within the app under `Settings` > `Privacy Policy & Legal`. Your continued use of the app after any changes signifies your agreement to the updated policy.

11. European Union (GDPR) & California (CCPA) Privacy Rights

►
GDPR Legal Basis: European Union & UK GDPR: Any local storage and computation performed on your device is strictly necessary for the Performance of a Contract (Article 6(1)(b)) to provide the core functionality of the Sleek offline task management software. No personal data is transferred out of the European Economic Area (EEA) or the UK (Chapter V). You retain complete rights to access, rectification, erasure ("Right to be Forgotten"), restriction of processing, and data portability directly through your local device.
►
CCPA "Do Not Sell or Share My Personal Information": California Consumer Privacy Act (CCPA / CPRA): We do not collect personal information from your device over the network. All personal data created inside Sleek stays on your device. We do not sell, rent, trade, or share any personal information (`Do Not Sell or Share My Personal Information`). We have sold zero (0) categories of personal information and shared zero (0) categories of personal information with third parties in the preceding 12 months or at any time.