Privacy Policy

Last updated: October 1, 2026

This policy describes Local Tasks Bridge, an open-source macOS app (source code) that synchronizes Apple Reminders with Google Tasks. The app runs entirely on your Mac; there is no Local Tasks Bridge server.

Data the app accesses

• Your Google account identity — the account ID and email address of the Google account you sign in with (OpenID Connect openid and email scopes).
• Your Google Tasks — task lists and tasks (Google Tasks scope), including titles, notes, due dates, completion status and identifiers.
• Your Apple Reminders — the Reminders lists you select in the app, read and written on your Mac through Apple's EventKit framework.

How the data is used

The data is used only to synchronize the Reminders lists you selected with Google Tasks: to create, update, complete and delete the corresponding items, detect conflicts, verify results, keep each sync tied to the same Google and Apple accounts, and show you the sync status. It is not used for advertising, profiling, analytics or training AI models, and it is not sold.

Local Tasks Bridge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Where the data is stored

Everything the app keeps is stored on your Mac in files readable only by your macOS user account: the Google sign-in token, settings, the sync map (task identifiers, titles used for matching, and hashed account identities), a status file (no task titles), and logs (which can contain task and list titles). The sign-in token file includes the ID token Google issues at sign-in, which contains your Google account ID and email address; the sync map and status file record the account only as a one-way hash.

To recognize synced items, the app adds a short footer to the notes of each synced Google task (for example “Synced from Apple Reminders.”, the list name and opaque identifiers). It stays in your Google account like the rest of the task.

What is sent where

• To Google (official OAuth and Tasks API endpoints, over HTTPS): your sign-in and the task changes needed to keep the selected lists in sync.
• To GitHub, only when you choose “Check for Updates…”: a request for the latest release version. No personal data is included.
• To the developer or any third party: nothing. The app has no analytics, crash reporting or telemetry.

Release builds may include a shared “Local Tasks Bridge” Google OAuth client so you can sign in without creating your own. With it, Google shows Local Tasks Bridge as the app requesting access, but your sign-in and task data still go only between your Mac and Google. You can instead use your own Google Cloud OAuth client.

Retention and deletion

Local data stays on your Mac until you remove it. In the app, Settings → Advanced → Uninstall can revoke Google access and delete all local settings, sync state and logs; the command ltb uninstall --revoke --delete-data does the same. You can revoke the app's access at any time at myaccount.google.com/permissions. Deleting the app's local data does not delete tasks or reminders stored by Google or Apple.

Security

Sign-in uses Google's OAuth flow with a loopback redirect on your Mac, PKCE and state validation, and the app refuses a sign-in that does not grant the Google Tasks permission. Access is limited to the scopes shown on Google's consent screen. No method of storage or transmission is completely secure; please report security issues privately.

Children

The app is not directed at children and does not knowingly collect data from them.

Changes and contact

Changes to this policy are published on this page with a new date. Questions: GitHub Issues, or the support email shown on Google's consent screen.