Privacy Policy

What Tacktile Is

Tacktile is a physical todo system with thermal printer integration. You create todos that print on a thermal printer when due, pin them to a bulletin board, and complete them by scanning a QR code. Tacktile also supports telegrams — short notes sent between household printers.

Information We Collect

Account Information

When you create an account, we collect your username, email address, and password (stored as a salted hash — we never store plaintext passwords).

Todo and Telegram Data

We store the todos and telegrams you create, including their titles, descriptions, due dates, recurrence settings, completion history, and any hand-drawn sketches you attach.

Printer Information

If you use a Tacktile printer, we store its hardware identifier, network configuration, and print job history.

Google Calendar Data (Optional)

If you choose to connect your Google Calendar, we request read-only access (calendar.readonly scope) to display your calendar events alongside your todos when scheduling. We store:

• An OAuth refresh token to maintain the connection
• A short-lived access token (refreshed automatically)

We do not store your calendar events. Events are fetched on demand when you view the todo creation/edit screen and are not persisted in our database. You can disconnect Google Calendar at any time from your settings page, which immediately deletes all stored tokens.

How We Use Your Information

Your information is used exclusively to operate the Tacktile service:

• Authenticating you and managing your account
• Creating, scheduling, and printing your todos and telegrams
• Displaying Google Calendar events when scheduling todos (if connected)
• Sending password reset emails

We do not sell, rent, or share your personal information with third parties. We do not use your data for advertising. We do not use your data to train machine learning models.

Data Storage and Security

Your data is stored on servers located in the United States. All connections to Tacktile are encrypted via TLS (HTTPS). Passwords are hashed using Django's default PBKDF2 algorithm with a SHA256 hash.

Third-Party Services

Tacktile integrates with the following third-party services:

• Google Calendar API — Only if you explicitly connect your Google account. Used solely to display your calendar events when scheduling todos. Governed by Google API Services User Data Policy.
• Postmark — For transactional emails (password resets, alerts).

Data Retention and Deletion

Your data is retained as long as your account is active. If you wish to delete your account and all associated data, contact us at the email below.

Disconnecting Google Calendar immediately deletes all stored OAuth tokens. No calendar event data is retained because it is never stored.

Your Rights

You can:

• Access, update, or delete your todos and telegrams at any time
• Disconnect Google Calendar at any time from your settings page
• Request a copy of your data or account deletion by contacting us

Google API Services Disclosure

Tacktile's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

Contact

For questions about this privacy policy or your data, email support@tacktile.ink.