LeanTask
Privacy Policy
Last updated: October 2026
LeanTask is built on the principle that your data is your data. This constraint has been part of LeanTask's architecture since the first line of code, and that hasn't changed.
01 Controller
The party responsible for data processing under this Privacy Policy is: Jochen Köneke · Am Pfeilgraben 11 · 39171 Sülzetal · Germany · Email: support@greyhead99.com
02 Data We Collect: The App
LeanTask does not collect any personal data. All task data is stored exclusively on your device and in your personal iCloud account. We have no access to your tasks, lists, or any other content you create in the app.
03 Data We Collect: This Website
When you visit this website, our hosting provider (STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany) automatically records standard server log files. These contain your IP address, the date and time of your request, your browser type, and the page you requested. This data is used solely to ensure the secure and stable operation of the website and is deleted after a maximum of 7 days. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in operating a secure website.
04 Language Preference
This website stores your language preference (preferredLang) locally in your browser using localStorage. No personal data is transmitted to us or any third party as part of this.
05 iCloud Sync & Sharing
When you use iCloud sync or the sharing feature, your data is transferred via Apple's iCloud infrastructure under Apple's Privacy Policy (www.apple.com/legal/privacy/). Apple acts as an independent data controller for this processing. We do not operate any servers involved in this process. Apple Inc. is based in the United States; data transfers from the EU to the US are covered by Apple's certification under the EU–US Data Privacy Framework (www.dataprivacyframework.gov/participant/4000).
06 Apple Calendar & Reminders
If you turn on “Show Tasks in Calendar” (LeanTask Plus), LeanTask asks for access to Reminders. It uses this access for a single list named “LeanTask”: it reads the names of your reminder lists to find that list, and reads and writes only the reminders in it. For each task with a due date, LeanTask stores the title, notes, due date, priority, completion status, an alert at the due time for tasks with a time, and a link containing the task's internal ID. From shared lists, this includes tasks assigned to you and unassigned tasks you created, so content written by other participants can appear in your list. LeanTask does not read or change the content of your other lists. The list is created in the account that holds your default list for new reminders, usually iCloud, and syncs through that account; for iCloud, the section above applies. Nothing is transmitted to us. When you turn the feature off, LeanTask offers to remove its entries. You can revoke access at any time in the iOS Settings under Privacy & Security → Reminders.
07 Analytics
LeanTask does not use any third-party analytics SDKs. We use App Store Connect's built-in aggregate statistics (provided and operated by Apple Inc.) to understand general usage trends. Apple processes usage data (such as device type and app version) before we receive any information; what we see is anonymised and aggregated. Apple acts as a separate data controller for this processing.
08 Purchases
LeanTask Plus subscriptions are processed entirely by Apple via In-App Purchase. We do not see or store your payment information. Apple acts as the merchant of record and an independent data controller.
09 Data Retention
We only retain personal data for as long as necessary for the stated purpose: server logs (website) for a maximum of 7 days, then automatically deleted; email correspondence (support) for up to 2 years after the matter is resolved, unless a longer retention period is required by law.
10 Transfers to Third Countries
Apple Inc. (iCloud, App Store Connect, In-App Purchase) is based in the United States. These transfers are covered by Apple's certification under the EU–US Data Privacy Framework. We do not otherwise transfer personal data outside the European Economic Area.
11 Your Rights
You have the following rights regarding your personal data: right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), and right to object to processing (Art. 21 GDPR). To exercise your rights, please contact: support@greyhead99.com
12 Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent authority is: Landesbeauftragter für den Datenschutz Sachsen-Anhalt, Leiterstraße 9, 39104 Magdeburg, Germany (www.datenschutz.sachsen-anhalt.de). You may also contact the supervisory authority in the EU member state where you reside or work.
13 Contact
Questions about privacy? We're happy to answer them. Reach us at support@greyhead99.com