Privacy Policy
Last updated: 14 September 2026
This policy describes what Lapaas Projects collects when you use it, why, how long it is kept, and how to have it removed. It covers the web app at projects.lapaas.com and the iPhone, iPad and Android apps, which are one service on one account.
Who we are
Lapaas Projects (“the Service”) is provided by Lapaas Digital Marketing (“we”, “us”), Delhi, India. On the App Store the app is listed as Lapaas: Team Tasks & Projects.
What we collect
Information you give us
- Your name and email address, when you create an account or are invited to a workspace.
- Your content — the projects, tasks, comments, attachments and chat messages you create, and who you share them with. This is the material the Service exists to hold.
Information collected automatically
- Usage and diagnostic data — which screens are opened, IP address, device model, operating system version, app version, and crash reports with the stack trace that produced them. We use this to find faults and to see which parts of the product are worth improving.
- A device identifier, used for analytics and to measure our own marketing. On iOS this is only collected if you allow it when the system asks; declining changes nothing about how the app works.
Sign-in through Apple and Google
You can create an account with Sign in with Apple or with Google. We receive your name and email address from them and nothing else. Sign in with Apple supports Apple’s Private Email Relay, so you can keep your real address private from us — the account is keyed on the identifier Apple gives us, not on the address, so hiding it or turning the relay off later does not affect your account.
Permissions the apps ask for
Each of these is optional, is asked for at the moment it is needed, and can be withdrawn in your device settings.
- Calendar and Reminders, to show your existing commitments alongside your tasks and to write tasks back if you ask for that. This stays on your device unless you choose to sync it.
- Notifications, to tell you about work assigned to you, mentions and reminders.
- Local network access, used only if you run Lapaas on a server inside your own network, to find that server.
The apps do not ask for your location, your camera, your photo library or your contacts.
What we do with it
- To provide the Service and keep your account working.
- To contact you about your account, work assigned to you, and security or service notices.
- To diagnose faults, keep the Service secure, and decide what to build next.
- To meet a legal obligation where one applies.
We do not sell your personal data, and we do not sell or share your content.
Your content, and end-to-end encrypted chat
Projects, tasks and comments are stored on our servers so that everyone you share them with can read them. Chat is different: messages are end-to-end encrypted on your device, and we hold only material we cannot read.
Who else sees it
- People you share with. Anyone in a workspace or on a project you belong to can see your name and the work you put there.
- Service providers who run our infrastructure, delivery of email and push notifications, and crash and analytics reporting. They process data on our instructions and for no purpose of their own.
- Authorities, where we are legally required to disclose, or where it is necessary to protect our rights or someone’s safety.
- A buyer, if the business is merged or sold. We will tell you before your data becomes subject to a different policy.
Where it is held
Our servers and our providers may be outside your country, so your information may be transferred across borders. We take reasonable steps to see that it is protected wherever it is processed.
How long we keep it
Your content is kept while your account exists. Diagnostic and usage data is kept for a shorter period, except where it is needed for security or we are required to keep it longer.
Deleting your account and your data
You can delete your account from inside the app — on iPhone and iPad it is under Profile → Delete account. It removes your projects, tasks and messages from our servers. Some records may be kept where the law requires it.
If you cannot sign in, email [email protected] from the address on the account and we will do it for you. You can also ask us for a copy of what we hold, or ask us to correct it.
Security
Traffic is encrypted in transit, passwords are stored hashed, and chat is end-to-end encrypted. No system is perfectly secure, and we do not claim otherwise — but if something goes wrong we will tell you.
Children
The Service is not intended for anyone under 13, and we do not knowingly collect information from them. If you believe a child has given us personal data, contact us and we will remove it.
Links to other sites
The Service may link to sites we do not run. We are not responsible for their content or their privacy practices.
Changes to this policy
We may update this policy. Changes are posted on this page with a new date at the top, and we will tell you by email or in the app before anything significant takes effect.
Contact us
Questions about this policy, or about your data, go to [email protected]. Practical help is on the support page.