1. Who we are
Tamam Tasks ("Tamam", "we", "us", "our") is a mobile task management application developed by elblasy.app. This privacy policy explains how we handle your information when you use Tamam on iOS, Android, iPad, or the web.
Contact: app@elblasy.app
2. What data we collect
2.1 Data you provide
| Data | Purpose | Stored where |
|---|---|---|
| Name, email | Account creation + login | Your Odoo workspace |
| Tasks, projects, comments, labels | Core app functionality | Your Odoo workspace |
| Password | Authentication | Hashed by Odoo (pbkdf2). We never see or store the plaintext. |
2.2 Data collected automatically
| Data | Purpose | Can you opt out? |
|---|---|---|
| Anonymous usage analytics (screen views, feature usage) | Improve the app, fix bugs, understand which features matter | Yes — disable in Settings |
| Crash reports | Fix crashes and stability issues | Yes — disable in Settings |
| Device type, OS version, app version | Compatibility and debugging | Collected only with analytics |
| Firebase Cloud Messaging token | Push notifications | Yes — deny notification permission |
2.3 Data we do NOT collect
- We do not read the content of your tasks, projects, or comments
- We do not collect your location
- We do not collect your contacts or phone data
- We do not use advertising trackers
- We do not sell or share your data with third parties for marketing
3. Where your data lives
All your task data (projects, tasks, comments, labels, team members) is stored in your Odoo workspace — either on our shared hosted instance or on your own self-hosted Odoo server if you chose "Connect Odoo".
Our proxy server (p-tamam.elblasy.app) routes requests between
the app and your Odoo workspace. It does not store your tasks,
projects, or any content data. It stores only:
- Your email (for session management)
- An encrypted session token (rotated on each login)
Analytics data is processed by Firebase Analytics (Google). Firebase receives anonymous, aggregated data — not your task content. See Firebase Privacy.
4. Third-party services
| Service | Purpose | Privacy policy |
|---|---|---|
| Firebase Analytics | Anonymous usage analytics | Link |
| Firebase Cloud Messaging | Push notifications | Link |
| Apple App Store / Google Play | In-app purchases (subscription billing) | Apple · Google |
| Odoo S.A. | Backend platform (data storage + processing) | Link |
We do not use any advertising SDKs, social media trackers, or data brokers.
5. In-app purchases
Tamam offers optional Pro subscriptions via Apple App Store and Google Play. Payment is processed entirely by Apple or Google — we never see or store your payment card details.
We store a purchase token and transaction ID on your Odoo partner record to verify your subscription status and provide customer support. These tokens cannot be used to charge your card.
6. Data retention
- Active account: Your data is retained as long as your account is active.
- Deleted account: When you delete your account (Settings → Delete Account), your partner record is archived immediately. Archived data is retained for up to 90 days for legal compliance, then permanently deleted.
- Analytics data: Retained by Firebase for 14 months, then automatically purged.
7. Your rights
You have the right to:
- Access your data — everything is visible in the app
- Export your data — contact us and we'll provide a full export
- Delete your account — Settings → Delete Account (immediate)
- Opt out of analytics — Settings → disable analytics
- Opt out of notifications — deny notification permission on your device
For any privacy-related request, email app@elblasy.app. We respond within 7 business days.
8. Children's privacy
Tamam is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Security
- All communication between the app and our servers uses HTTPS/TLS encryption
- Passwords are hashed with pbkdf2 by Odoo — never stored in plaintext
- Session tokens are JWT-signed and rotated on each login
- The proxy server stores zero task content — it's a stateless relay
- Server disks use filesystem-level encryption
10. Changes to this policy
We may update this privacy policy from time to time. When we make significant changes, we'll notify you via the app or email. The "Last updated" date at the top always reflects the current version.
11. Contact
If you have questions about this privacy policy or your data, contact us:
- Email: app@elblasy.app
- Website: tamam.elblasy.app
- Developer: elblasy.app