Privacy Policy

Last updated: 10 September 2026

Daily Task Master ("the extension", "we", "us", "our") is a Chrome/Brave new-tab browser extension operated by Daily Task Master Team. This policy explains, in full, what user data the extension collects, how we handle it, where and how it is stored, and how (and with whom) it is shared. No section is omitted.

Local-first by design. Everything you create stays on your own device by default. Your data leaves your device only in the specific, optional situations described below (cloud sync, weather, payments, and AI features) — and only when you turn those on. The extension is fully usable with no account and nothing leaving your browser.

1. Information we collect

a. Content you create

The tasks, task notes, recurring-task settings, reminders, meetings and meeting notes, people/assignee names you enter, journal entries, saved standups, weekly-review data, and your preferences/settings. You provide this directly; the extension does not generate it about you.

b. Your bookmarks

With the bookmarks permission, the extension reads the entries in your browser's Bookmarks Bar (and folders you open) in order to display them on the new-tab page. This is read-only — the extension does not create, edit, or delete bookmarks — and your bookmarks are used only to render them locally on your screen. They are never transmitted to us or to any third party.

c. Website icons (favicons)

With the favicon permission, the extension displays the site icon next to each bookmark, using the browser's built-in favicon service. No browsing history is collected or sent to us.

d. Account information (only if you sign in)

Signing in is optional. If you choose Google Sign-In, we receive your name, email address, profile photo URL, and Google account identifier, used solely to authenticate you and to sync your content across your own devices. We use chrome.identity for the sign-in flow only.

e. Approximate location (only if you enable weather)

If you turn on the optional weather widget, the extension requests your device's approximate location (latitude/longitude) via the browser and sends those coordinates to the Open-Meteo weather service to fetch local conditions. Location is used only for this purpose and is not stored on our servers.

f. Payment & subscription information (only if you upgrade)

Pro subscriptions are processed by Razorpay. We do not collect or store your card, UPI, or bank details — Razorpay handles those under its own privacy policy. We store only your subscription status and the identifiers needed to provide Pro features.

g. Content you send to AI features (Pro feature, only if you use it)

AI assistance is an optional Pro feature. It never runs on its own — it only runs when you explicitly trigger one of four actions below, and each sends only the specific content that action needs. Before anything is sent the first time, we show you an in-app notice explaining what will be sent and to whom, and you must accept it to continue. You can switch AI off completely at any time in Settings, which removes the AI buttons entirely so nothing further can be triggered.

• Polish my standup — sends the standup text you wrote.
• Prep talking points for a 1:1 — sends that person's name and the titles of the tasks on their plate, that you're waiting on them for, and that they recently completed. No other content from your workspace is sent.
• Extract action items from meeting notes — sends the text of those meeting notes.
• Ask across my meetings — you type a question, and the extension first searches your meetings entirely on your device to find the ones most relevant to it. It shows you exactly which meetings (by title and date) it would use, and nothing is sent until you review that list and confirm. Only then does it send your question, together with the date, title, and notes of each meeting you confirmed — up to 5 meetings, within a size limit that may trim some notes or leave out lower-relevance meetings (the screen tells you when either happens). If you cancel instead of confirming, nothing is sent.

The content travels from your browser to our own backend (a Google Cloud Function we operate), which forwards it to OpenRouter, a third-party AI routing service. OpenRouter passes it to the model provider we have selected — currently OpenAI — which performs the actual processing, and the result is returned to you. We configure OpenRouter with prompt logging turned off, so it does not retain your content after the request completes, and our backend does not store the text you send or the AI's response — it only records that a request happened, for the purposes of enforcing your daily usage limit. If you never trigger one of these actions, no content is ever sent to OpenRouter or to us for this purpose.

h. Technical data

Standard, transient technical data (such as network/connection metadata inherent to any HTTPS request) is processed by our infrastructure providers to deliver the service. We do not use analytics, advertising, tracking pixels, or fingerprinting, and we do not build user profiles.

2. How we use (handle) your data

• To provide the extension's core features and save your content on your device.
• To sync your content across your own devices when you sign in and enable sync.
• To authenticate you and to create and manage your Pro subscription.
• To display local weather, when you enable it.
• To display your bookmarks on the new-tab page.
• To produce results for the AI actions you explicitly invoke (Pro feature), by sending the relevant content to our backend and on to OpenRouter for processing.
• To send local reminder notifications you set (with the notifications and alarms permissions). Reminder scheduling happens on your device; reminder content is not sent to us.

We use your data only to provide the features above (the extension's single purpose: a personal new-tab productivity workspace). We do not sell your data, we do not share it for advertising, and we do not use it to determine creditworthiness or for lending.

3. How and where we store your data

• On your device: your content is stored locally in your browser (IndexedDB and extension storage) using the storage and unlimitedStorage permissions. It stays there until you delete it, sign out, or remove the extension.
• In the cloud (only with sync on): if you sign in and enable sync, your content is stored in Google Cloud Firestore under your own account, protected by security rules so that only you can read or write it.
• In transit: all network communication uses encrypted HTTPS connections.

Retention: local data persists until you remove it or uninstall the extension. Synced cloud data is retained while your account is active; when you delete your account or ask us to delete your data, it is removed from our cloud storage.

4. How and with whom we share your data

We do not sell your personal data and do not share it except with the service providers below, strictly to deliver the features you use. Each receives only the data needed for its function:

• Google Firebase — Authentication & Cloud Firestore (Google LLC): stores your account information and, if you enable sync, your content — per-user and readable only by you. Firebase privacy.
• Razorpay: processes subscription payments and handles your payment details directly. Used only if you subscribe. Razorpay privacy.
• Open-Meteo: receives approximate coordinates to return local weather. Used only if you enable the weather widget.
• OpenRouter (via our own Cloud Function): receives the standup text, the person's name and task titles, the meeting notes text, or (for "Ask across my meetings") your question plus the date, title, and notes of the meetings you confirmed sending — whichever you submit to an AI action — solely to generate that result. Used only if you turn AI on and trigger an action; prompt logging is disabled on our OpenRouter account, and we do not retain the submitted content or the response beyond producing your result. OpenRouter privacy.
• OpenAI (reached via OpenRouter, not directly): performs the actual AI processing for the content described above, as the model provider we currently select. Used only if you turn AI on and trigger an action. If we change the model we use, this entry will name the new provider. OpenAI privacy.

We may also disclose data if required by law, or to protect our rights, safety, or users — and in a business transfer (e.g. merger), subject to this policy.

5. Browser permissions we request and why

• storage / unlimitedStorage — save your content locally on your device.
• bookmarks — read your Bookmarks Bar to display it on the new tab (read-only; never transmitted).
• favicon — show site icons for your bookmarks.
• geolocation — get approximate coordinates for the optional weather widget.
• notifications / alarms — schedule and show local reminder notifications you set.
• identity — perform Google Sign-In when you choose to sign in.
• Host access to Google (Firebase/Firestore/Identity) and Open-Meteo — to sync your data and fetch weather. Requests are made only for those features. There is no separate host permission for AI: those requests go through the Firebase SDK's own call to our Cloud Function (which then relays to OpenRouter), not through a browser-level host permission.

6. Your choices & rights

• Use fully offline: don't sign in, and nothing leaves your device.
• Access & export: download a complete backup of your data from Settings at any time.
• Delete: sign out to clear local data on that device; delete individual items in-app; or contact us to delete your synced cloud data and account. Uninstalling removes all local data.
• Depending on your region, you may have rights to access, correct, delete, or port your data — contact us to exercise them.

7. Chrome Web Store Limited Use

Our collection and use of information received from Google APIs, and all user data, adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We use the data only to provide and improve the extension's user-facing features, do not transfer it except as described above, do not use it for advertising, and do not allow humans to read it except as necessary for security, legal compliance, or with your consent.

8. Children

The extension is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their personal data.

9. Changes to this policy

We may update this policy; material changes will be reflected in the "Last updated" date above and, where appropriate, communicated in-app.

10. Contact

Questions, data-access, or deletion requests: dailytaskmaster2@gmail.com.