Karo Privacy Policy: Your Data, Location and Choices

Last updated: 24 October 2026

This policy explains what information Karo (the Karo app on Android, iPhone and the web, and the Karo website with its blog) collects, why, who it is shared with, and the choices you have. Karo is run by L. V. R. (“we”, “us”).

By creating an account or using Karo you agree to this policy. If you do not agree, please do not use Karo.

What we collect

Information you give us:

Account details: your name, your email address or mobile number, and your password (stored only in scrambled, hashed form; we cannot read it). You can also add a job title.
Your profile photo, if you add one. Anyone signed in to Karo can see it next to your name.
Your Karo Pin: the short ID we give you so other people can find and add you.
Your work: tasks, sub-tasks, descriptions, notes and comments, due dates, priorities, reminders, repeating schedules, categories, links and status changes.
Files you attach: photos, documents and videos you choose to upload, and voice notes you record.
Your contacts and organizations inside Karo: the people you have added by their Karo Pin, the organizations you create or join, and your role in them. Karo does not read the address book on your phone.
Your settings: time zone, language, reminder and daily-summary choices, and the order of your organization tabs.
Places you save for place reminders (in the app or on the web): each place’s name, where it is (its latitude and longitude, and an address if you add one), how near counts as being there, and which of your tasks it is attached to.

Information collected automatically:

A push-notification token for your phone (and whether it is Android or iOS), so we can send you task alerts.
Your sign-ins: for each phone or browser you are signed in on, the kind of device, the app version, the network (IP) address and when it was last used. You can sign a device out, and so can our administrators.
A record of what happens in your account, for example sign-ins, changes to your profile and the tasks you work on. It is kept for 180 days, to keep Karo secure and to help when something goes wrong.
Your IP address, which our server also uses to stop password guessing.

We do not track where you are: the only locations we keep are the places you save yourself (see “Location and place reminders” below). We do not read your phone contacts, and we do not use advertising or analytics trackers, in the app or on the website.

Phone permissions

Karo asks for a permission only when you use the feature that needs it, and you can turn each one off in your phone settings at any time:

Camera: to take a photo to attach to a task, or a profile photo.
Photos and files: to pick a photo or document to attach, or a profile photo. Only the items you pick are uploaded.
Microphone: to record a voice note on a task. The microphone is used only while you are recording.
Notifications: to alert you about new tasks, reminders and updates.
Location: when you press “Use my current location” to save a place where you are (a browser asks you too); and on Android, only if you use place reminders, to notice when you arrive at a place you saved.

Location and place reminders

Place reminders are optional. You save places such as Home, Office or Warehouse, in the Karo app or on the web, each with how near counts as being there (a new place starts at 100 metres, and you can change it), and attach one to a task you give yourself. The Karo app on Android then reminds you when you arrive.

What we keep: your saved places (each one’s name, where it is, its address if you add one, and its distance) and which of your tasks each is attached to. They are stored with your account so every phone you sign in on can use them. Only you see them.
To say where a place is, you can press “Use my current location”, or paste a map link or its latitude and longitude instead (the Android app can also look an address up). Only that button reads where your phone or computer is, at that moment, to fill in the place; when you save the place, that point is kept with it like any other. Your phone or browser works that point out with its own location service, and the Android app looks up its address, or an address you type, with the phone’s built-in geocoder. On most Android phones both are Google services, which receive that point or the words you typed.
To notice when you arrive at one of your places, the Android app checks your phone’s location on your phone only. That location is never sent to Karo, our servers or anyone else, and we keep no record of where you have been.
Your phone uses location in the background only while you have open tasks with a place attached. When none are left, Karo stops checking.
You can delete a place, or take it off a task, at any time, and you can turn off location for Karo in your phone settings (or, on the web, in your browser’s site settings). Deleting your account deletes your places too.

Our website

Anyone can read the Karo website (the home page, the feature pages and the blog) without an account. Our administrators write its pages and posts. Log in and Register open the Karo web app.
The Contact page has a message form. What you send (your name, email address, phone number if you give one, the topic and your message) is kept with your IP address and browser, so we can answer you and stop abuse, and is emailed to our support inbox.
Neither the website nor the web app uses cookies. They keep a few things in your browser’s own storage on your device: light or dark, an announcement you closed, and in the web app your sign-in. The website looks only at whether you are signed in, to take you straight to your tasks.
If the website shows numbers, such as how many people use Karo, they are totals and never about any one person.
Links to our pages on other sites (for example Instagram) take you to those sites, and their own policies apply there. Nothing from them is loaded on our pages.

How we use your information

To create and run your account and sign you in.
To show your tasks to you and to the people you share them with, and to send the tasks, reminders, nudges and daily summaries you set up.
To let people find you by your Karo Pin, and to run your contacts and organizations.
To keep the places you save, so your phones can remind you when you arrive at one.
To send password-reset emails when you ask for one, and reminders you choose to get by email.
To answer the messages you send us, for example with the website’s contact form.
To keep Karo secure, prevent abuse and fix problems.
To meet our legal obligations.

We do not sell your information, and we do not use it for advertising.

Who can see your information

People you work with: anyone on a task (whoever set it, the people doing it, people kept in the loop, and the owner and admins of the organization it is filed under) can see that task, its history, its files and the names of the people on it. Other people in that organization see it only if they are on it.
Your contacts and the people in your organizations can see your name, job title, Karo Pin and photo, and can give you tasks. Any of them who owns or runs an organization can invite you to it; you are not added until you accept.
People who have your Karo Pin can see your name, job title and Karo Pin, and can send you a contact request or an organization invite.
Your email address is never shown to other users. If you save a mobile number, it goes to the people who can remind you about a task, so that their “Nudge on WhatsApp” opens a WhatsApp chat with you: on a task given to you (even before you accept it), whoever gave it, whoever reviews it, and the owner and admins of the organization it is filed under; on a task handed in to you for review, the people doing it. Karo never sends WhatsApp messages itself: the sender chooses whether to send one.
Our administrators: a small number of Karo administrators can see accounts, signed-in devices, the activity record and tasks to provide support, deal with abuse, and keep the service running. They do this only when needed.

We use a few trusted companies to run Karo. They process information only on our instructions and only to provide their service to us:

Cloud hosting and database providers, which store Karo’s data and files on secure servers.
Expo (expo.dev), Google Firebase Cloud Messaging and Apple Push Notification service, which deliver push notifications to your phone. They receive your push token and the text of the alert.
An email provider, which delivers password-reset emails, and reminders you choose to get by email, to your email address, and messages from the website’s contact form to our inbox.
Google Fonts, which serves the typeface the website and the web app use. Your browser downloads it from Google, so Google receives your IP address and browser details. Nothing else on the website or in the web app is loaded from another company.

When you save a place, the location service and geocoder of your own phone or browser are used too (see “Location and place reminders”). They are not ours, and their own privacy policies apply.

We may also disclose information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business (in which case this policy will continue to apply).

Security

Information travels between the apps, the website and our server over encrypted connections (HTTPS). Passwords are stored hashed, files can only be opened through short-lived signed links, and access is limited to people who need it. No system is perfectly secure, so please use a strong password and keep it to yourself.

How long we keep it

Your account and work: for as long as your account exists.
Alerts in the bell: deleted automatically after 90 days.
Files uploaded but never attached to a task: deleted after one day.
Messages sent with the website’s contact form: kept until we delete them. Ask us and we will delete yours.
Our server’s own logs (sign-ins and what happens to tasks, with names, task titles and part of the IP address, never a password): deleted automatically within 14 days.
When you delete your account: see the next section. Copies in our backups are overwritten within 30 days, and in our server’s logs within 14 days.

Deleting your account

You can delete your account at any time, in the Karo app (More → Delete account) or on the web (Settings → Delete account, or the Delete your account page). You will be asked for your password.

When you delete your account we immediately delete your name, email, mobile number, password, Karo Pin, job title and settings; your contacts and pending requests; your organization memberships; your devices and alerts; your saved places; and every task, repeating schedule and category that only you were on, including their files and voice notes.

Tasks you shared with other people belong to them as well, so they stay in their accounts, with your name shown as “Deleted user”. Organizations you owned pass to one of their admins or members, or are deleted if nobody else is in them. Deleting your account cannot be undone.

If you cannot sign in, email us from the email address on your account (or tell us your mobile number) and we will delete it for you.

Your choices and rights

You can see and correct your details under My profile, change your settings at any time, delete your saved places, turn off notifications, location and other phone permissions in your phone settings, and delete your account as explained above. Depending on where you live (for example under India’s Digital Personal Data Protection Act, 2023 or the EU/UK GDPR) you may also have the right to ask for a copy of your information, to have it corrected or erased, to withdraw your consent, and to complain to a data protection authority. To use any of these rights, contact us at the address below.

Children

Karo is meant for people aged 18 and over and is not directed at children. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Where your information is stored

Karo’s servers and our service providers may be located outside the country where you live. Wherever your information is processed, we protect it as this policy describes.

Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above, and for important changes we will let you know in Karo. Continuing to use Karo after a change means you accept the updated policy.

Contact us

Questions, requests or complaints about your privacy (including grievances under India’s Digital Personal Data Protection Act): email karotaskdotcom@gmail.com. We aim to reply within 7 days.

L. V. R.