Privacy Policy
HubidubiTask has no servers. We, the developer, do not collect, receive, store, sell or share any of your data. The apps are open source, so anyone can check what they do.
Your tasks, notes, photos, recordings, files and calendar stay on your own devices. They travel only between devices you paired yourself, and to services you choose to use.
What the app stores, and where
Everything you put into HubidubiTask is stored on the device you put it on. On Android it lives in an encrypted database whose key is protected by the Android Keystore, and the app opts out of Android's cloud backup. On a Mac or a Linux computer it lives in the app's folder in your user account, and API keys are kept in the system's keychain (on a Linux computer without a working keyring, in a file only your user account can read).
Where data goes, and only when you make it go
| When | What is sent | To whom |
|---|---|---|
| You pair and sync devices | Your items and their attachments | Your own paired devices, directly over your local network. The connection is encrypted and pinned to the certificate exchanged at pairing. |
| You ask Claude to review an item (optional) | The item you asked it to review | Anthropic's Claude API, with the API key you entered, under Anthropic's own terms. The key stays in your device's secure storage. |
| You ask an OpenAI-compatible model to review an item (optional) | The item you asked it to review | The server whose address you entered in Settings, one you run or choose. |
| You ask your own agent to review an item (optional) | The item you asked about, and a text copy of your projects, open tasks, notes and calendar so it can look things up | The agent at the IP and port you entered, which you run yourself, for example OpenClaw, Hermes Agent, opencode, Kilo or Ollama. What it keeps and which model answers depend on how you set it up. With opencode and Kilo the app deletes each question's session once it has answered. Without HTTPS, the app talks only to addresses in your home network. |
| You take a photo with the Photo note widget (optional) | That photo, made smaller, to be written out as a note. Nothing else: not your other items | The AI you chose in Settings, as in the rows above: Claude, your OpenAI-compatible server, or your own agent. If it can't read the photo, the photo is kept on your phone as a photo note instead. With Settings › Photo to text › None, the photo goes nowhere and is kept as a photo note. |
| You say a voice note with the Voice note widget (optional) | The words written down on your phone, to be tidied into a note: punctuation, a title, words it misheard. Nothing else: not the sound, not your other items | The AI you chose in Settings, as in the rows above, when you have set one up. Without one, or if it can't answer, the words are kept as they were heard. With Settings › Speech to text › None, nothing is written down and nothing is sent: what you say is kept on your phone as a voice memo. |
| You add a feed (optional) | A request for the web page or feed you entered, once a day, week or month; then the lines that changed on it | The page's own server, and the AI you chose in Settings, to write the task: Claude, your OpenAI-compatible server, or Ollama. When your choice is your own agent that can run commands on your computer (OpenClaw, Hermes Agent, opencode, Kilo, or one the app can't tell), Claude writes it instead, with your Claude key: the page's words are a stranger's. |
| You import from Todoist (once) | The API token you paste, to read your tasks | Todoist's servers. The token is used for that import only and is not saved. |
| You import a calendar (once) | A request for the iCal address you paste | The host of that address, such as Google Calendar. The address is not saved. |
We are not involved in any of this traffic and never see it. Nothing else leaves your device. The apps contain no advertising, analytics, crash-reporting or tracking code, and need no account.
Permissions
- Microphone: to record a voice memo or say a voice note, only while you are recording. A voice note is written down on the phone itself by Android's own speech recognizer working on the phone, or, as you choose in Settings, kept on the phone as a voice memo; the sound is sent nowhere.
- Network access, Wi-Fi state and multicast: to find your other devices on the local network and sync with them, and to reach an AI or import source you chose.
Taking a photo opens your phone's own camera app; HubidubiTask receives only the photo you take and asks for no camera permission. The microphone is optional; the app works without it.
Deleting your data
Delete any item in the app and the deletion syncs to your paired devices. Uninstalling the app removes everything it stored on that device. Because we hold no copy, there is nothing for us to delete, and nothing we could recover for you, so keep a second paired device if you want a copy.
Children
HubidubiTask is a general productivity tool and is not directed at children under 13.
This website
This site sets no cookies, runs no analytics and stores nothing in your browser. Fonts and images are served from this site, not from third parties. The pages follow your device's light or dark setting. The web host may keep standard access logs, such as IP addresses, for security.
Changes
If this policy changes, the new version will be published on this page with a new effective date. Because we collect nothing about you, a change can only concern what the apps do on your devices.
Contact
Questions about privacy: ask in the project's issue tracker.