How Prior protects your data

Where your data lives, what is encrypted, when your content goes to an AI provider, who can see it and the controls you have. A plain summary of the privacy policy.

This page summarizes what Prior does with your data. The privacy policy is the full text, and it prevails if the two differ.

#Your data starts on your device

Prior is local-first. Each device keeps its own copy of your data (a database in the desktop and Android apps, browser storage on the web), so it works offline. Signing in adds a copy on Prior's server, which is what syncs your devices and lets you share projects. Reminders are scheduled by each device: Prior uses no push notification server.

Uninstalling an app or clearing your browser data removes the copy on that device. The server copy stays until you delete your account.

#Where the server copy lives

Prior's server, its database and its backups are hosted by Contabo, a German company, on a server in the European Union. Connections are encrypted (HTTPS), the database is not reachable from the internet, and server backups roll over within 30 days.

#How access is protected

• Passwords are stored as bcrypt hashes. Prior never keeps your password.
• Session tokens and access keys are stored only as hashes.
• Secrets that must be readable by the server are encrypted: Google tokens, API keys you save, and two-step verification secrets.
• You can turn on two-step verification and revoke connected apps: see Sign out and manage your sessions.

#Who can see your content

You do, and the members of a shared project, according to the role you gave them. The publisher does not look at your content, except at your request to help you, or when the law or the security of the service requires it. Prior does not sell your data, shows no advertising and does not use your content for advertising.

#When your content goes to an AI provider

Only when you use an AI feature: the assistant, Today recommendations, duration estimates, suggestions while you type a task, mail to task, assisted import, flashcards, budget quote reading, splitting a story, or dictation. The request carries only what it needs. For the assistant, that is your message and the tasks, projects, habits, notes and events it needs to answer.

• With Prior AI, the text is written by Claude (Anthropic). If that fails, the request goes to OpenRouter, which also serves the decision model and dictation.
• With your own OpenRouter or OpenAI key, or Codex on desktop, the request goes to that provider under your account and its terms.
• Prior does not use your content to train AI models. Nothing the AI proposes is created or changed until you confirm it.
• The audio of a dictation is turned into text and not kept by Prior.

More in Prior AI and your privacy.

#Connected accounts and payments

• Google Calendar is read-only and Gmail lets you read, archive, delete, star and label from Prior. The server keeps only the account's address and an encrypted refresh token. Your emails and events are read by your device directly from Google and are not stored on Prior's server.
• Payments go through Stripe. Prior never receives your full card number.

#Crash reports

When something breaks, Prior can send a technical report to an error tracker that Prior hosts itself, with no third party: the error, where in the app it happened, the version and the system. It never includes your tasks, notes, email or anything you type. It is on by default. To stop it, turn off Send anonymous crash reports in Settings → General, under Privacy. The setting follows your account.

#Cookies

Prior shows no cookie banner because its cookie is strictly necessary. When you are signed in on the web, the app sets one cookie on the priortasks.com domain, prior_signed_in, whose value is 1 and nothing else. It lets the website show a button that opens the app, and it is removed when you sign out. The website itself sets no cookie.

#Your rights

You can export your data and delete your account yourself, at any time. For any other request about your data (access, correction, objection), write to contact@priortasks.com: Prior answers within one month. You can also complain to the CNIL, the French data protection authority, or to the authority of your country. Prior is for people aged 15 or over.

#Good to know

• To report an unauthorized use of your account, write to contact@priortasks.com without delay.
• The terms of use and the legal notice are on the website too.

Updated 5 November 2026