ddTask Privacy Policy
- Last updated
- 9 October 2026
- Application
- ddTask for Android (
in.dd99.task) and iPhone, and the ddTask web panel at task.dd99.in - Provider
- Dabster International Private Limited, Rajkot, Gujarat, India
- Contact
- care@deodap.com · +91 96386 66602
This policy explains how Dabster International Private Limited ("DeoDap", "we", "us") handles personal data in ddTask: the ddTask mobile app for Android and iPhone, and the ddTask web panel at task.dd99.in.
1. Who this app is for
ddTask is an internal work tool for DeoDap's employees and for users of partner agencies who work with DeoDap. It is not a consumer app, and it is not meant for the general public or for anyone under 18. Accounts are created and managed by DeoDap; there is no public sign-up.
2. Information we collect
Account and identity
When you sign in, we use the following, supplied by DeoDap's records:
- your name, employee code and internal user ID;
- your email addresses (your account and official email);
- your mobile number, from DeoDap's HR records;
- your role, department, designation, and agency if you have one;
- a profile photo, if you add one.
What you create in ddTask
- tasks, meetings, comments, checklists and reminders;
- chat messages and reactions, and the earlier versions of messages you edit (shown to that chat's members);
- files you choose to attach: photos, videos, audio files, PDFs, Office documents, text, CSV and ZIP files;
- leave requests and their approvals, and the work reports you file.
Work and HR information
- your attendance record, copied from DeoDap's HR system;
- your reward points;
- work-activity summaries shown in DeoDap's reports on the web panel: daily totals from DeoDap's computer-activity system (Monitor360) for company computers that run it (check-in and check-out times, and active, idle, productive, keyboard and mouse time), and the number of emails sent each day from your company email account (the count only, never the content).
Activity in the app
- which tasks you have opened, and which chat messages and notifications you have read.
Device and technical data
- when you sign in, and from which IP address and app or browser (for security);
- for each phone you use: an installation ID the app creates, the device model, the operating system and app versions (used to check whether an update is available), and the language setting;
- a push notification token for that phone, if you allow notifications, used only to deliver ddTask notifications to it;
- a sign-in token, kept in your phone's secure storage (Keychain on iPhone, Keystore on Android) so you are not asked to sign in every time.
What we do not collect
- We do not collect your location. The app asks for no location permission, and the IP address in the sign-in record is used for security only, never to locate you.
- We do not read your phone's contacts, calendar, call log or SMS, and we do not record microphone audio. The staff directory is DeoDap's list, not your phone's contacts.
- We do not use advertising IDs, and the app contains no advertising.
- We do not use third-party analytics or behavioural tracking, and we do not track you across other apps or websites.
- We do not collect payment, financial or health information. The app has no payments.
3. How device permissions are used
| Permission | Why |
|---|---|
| Notifications | Showing ddTask notifications on your phone: tasks assigned to you, meetings, approvals, reminders and other work updates. |
| Photos and videos | Choosing photos or videos to attach, or a profile photo. The app uses the system picker, so it receives only the items you select. |
| Files | Choosing documents or audio files to attach. Only the files you pick are read. |
| Camera | Taking a new photo or video to attach, only when you choose to. It is used only for the attachment you are adding. |
| Network access | Connecting to DeoDap's servers, and showing when you are offline. |
Permissions are requested at the point of use and can be turned off at any time in your phone's settings. Turning a permission off disables only the related feature.
4. How information is used
Collected information is used only to:
- sign you in and apply your role, department and permission scope;
- run ddTask: tasks, meetings, chat, leave and attendance views, work reports, reward points and leaderboards, and the staff directory;
- keep it secure: showing and removing your signed-in devices, preventing misuse, and keeping an audit trail of changes;
- send the notifications you allow, in the app, on your phone, in your browser and by email, and work reminders by SMS or WhatsApp to your mobile number where DeoDap uses them;
- support DeoDap's management of work, as your role and DeoDap's HR policies allow, for example approvals, reports, work-activity summaries and performance points;
- tell you when an app update is available;
- meet legal duties, for example keeping HR records for the time the law requires.
We do not use your information for advertising, and we do not sell it.
5. Storage and sharing
What you create is sent over HTTPS to DeoDap's ddTask servers (task.dd99.in) and stored there. The servers, the database and attached files are hosted by Amazon Web Services in India (the AWS Mumbai region).
Stored on your phone: your sign-in token and the installation ID (in secure storage), and copies of what you have viewed, such as lists, images and downloaded files, kept in the app's private, encrypted storage so it opens faster and can show recent data while you are offline. Signing out deletes them all from the phone.
Who can see your data
- Your colleagues see what ddTask shows them for their work: your name, photo, department and designation, the tasks and meetings you share, and the chats you are in.
- Managers, HR and administrators see more where their role needs it, for example approvals, attendance and reports.
Services that process data for us
We do not share your personal information with third parties for their own purposes. These services store or process it only on our behalf, to provide ddTask:
| Service | What for |
|---|---|
| Amazon Web Services | Hosting ddTask's servers and database, and storing attached files and images |
| Google Firebase Cloud Messaging | Delivering notifications to your phone. It receives the phone's push token and the notification's text, for example who assigned you a task and the task's title. |
| Apple Push Notification service | Delivering notifications to iPhones |
| Your browser's push service | Delivering web panel notifications to your browser, if you allow them |
| Google Workspace | Sending ddTask emails (sign-in codes and notifications), Google sign-in on the web panel, and the daily count of emails sent from your company account |
| GoKwik | Sending work reminders by SMS and WhatsApp to your mobile number |
| Monitor360 | The daily computer-activity summaries for company computers |
| DeoDap's HR system | Checking sign-in for staff accounts, and the attendance records |
Information may also be disclosed where the law requires it, or to protect DeoDap's legal rights.
6. Retention
- Work records (tasks, meetings, chats, approvals, leave, attendance and other HR records) are kept for as long as DeoDap needs them for business and statutory record-keeping.
- Account data is kept while your account is active. When your employment or authorisation ends, DeoDap deactivates your account; your work records stay as DeoDap's records.
- Sign-in records are kept for as long as they are needed for security and audit.
- Deleted items: a deleted task goes to the trash and can be restored; a chat message deleted for everyone is removed, together with its earlier versions.
- A phone's device record, with its push token, is removed when you sign out of that phone or remove it from your device list.
7. Security
- All traffic between the app and our servers uses HTTPS.
- Chat messages are stored encrypted on our servers.
- Access needs credentials issued by DeoDap, and is limited by role, department and permission.
- Attached files are opened through short-lived links.
- The sign-in token is kept in your phone's secure storage and is left out of device backups.
- One exception: images you insert into the text of a task description or comment are stored at a permanent web link that opens without signing in. Don't insert sensitive images there; attach them as files instead.
No system is perfectly secure, but we take reasonable measures appropriate to an internal work tool.
8. Your rights and choices
As ddTask is a work tool provided by DeoDap, requests to see, correct or delete your personal data, and complaints about how it is handled, including under India's Digital Personal Data Protection Act, 2023, are handled through DeoDap. Write to care@deodap.com.
Work records, such as tasks, approvals and HR records, are business records, and generally cannot be deleted on request while the law or an employment obligation requires DeoDap to keep them. We will tell you which records and why.
You can also:
- turn notification categories off in ddTask's notification settings, or turn notifications off for the app in your phone's settings;
- sign out of a phone, or remove one from your device list, which stops its notifications.
9. Children
ddTask is not directed at children and is not intended for anyone under 18. We do not knowingly collect data from children.
10. Changes
Material changes will be posted here with an updated "Last updated" date, and where appropriate announced in the app.
11. Contact
Dabster International Private Limited
Email: care@deodap.com
Phone: +91 96386 66602 · +91 98896 63378
Rajkot, Gujarat, India