Privacy & terms.

Information we handle

Task & Tale stores account identifiers, sign-in details handled by Firebase Authentication, tasks and completions, stories, world descriptions, images and preferences. Guest sessions also have an account identifier. Contact messages, access requests, usage events and error reports may include account identifiers and technical details.

How information is used

We use this information to save your progress, provide AI features, manage access, respond to messages and investigate errors and misuse.

Hosting and AI processing

Firebase provides authentication, database and file storage. Relevant prompts and context are sent to external AI services to generate stories, world details, images and other AI responses. Providers can include Google, Anthropic, OpenAI, Moonshot and OpenRouter and its model providers, depending on the feature and configuration. Processing may occur outside your country. Avoid including sensitive information or information about others that you do not have permission to share.

Saved OpenRouter keys are encrypted in storage and decrypted by the server to make requests. You can remove your saved key in Settings.

Shared worlds

Gallery submissions are reviewed. Once approved, other readers can access and use the submitted world and its included images, opening text, thumbnail, description and author name.

Cookies and browser storage

The tt_entered cookie remembers that you entered the app and lasts up to ten years. Browser storage also supports sign-in, appearance preferences and local drafts. Clearing browser data can remove local drafts.

Your data

Use Settings → Content to download your tale. This is a story export, not a complete copy of all account data. For access, correction, deletion or gallery-removal requests, see Contact.

Using Task & Tale

Task & Tale is an independent alpha project made under the Bearhelm Inc. name. Features and availability may change. Keep copies of work you want to preserve using Settings → Content.

Your content

You retain any rights you hold in the material you submit. You allow us to store and process that material to provide the features you use, including processing by AI providers. Submit only material you have permission to use.

Sharing and acceptable use

Gallery submission permits us to review your world and, if approved, make it available to other readers. Do not upload unlawful material, share private information without permission, infringe others’ rights or attempt to compromise the service. Access or submissions may be restricted for misuse.

AI and costs

AI output can be inaccurate, unexpected or similar to other output. Review it before relying on or sharing it. Generated stories are fiction, not professional advice. If you supply an OpenRouter key, usage through that key is billed under your provider account; set spending limits there.

Accounts

Guest progress may become inaccessible if you clear browser storage or lose the session. Linking an account helps you return to your work.

Report a problem

Report suspected data exposure or vulnerabilities using the contact email below. Include the affected page, approximate time and a short description. Never send passwords, API keys or other users’ data, or post sensitive reports publicly.

Protect your account

Protect your sign-in credentials. If an OpenRouter key may be exposed, revoke it at OpenRouter; removing it from Task & Tale does not revoke it at the provider.

How we respond

We investigate reports, take steps to contain exposure and assess who and what information was affected. We notify affected people and the relevant authority where required, and work to fix the cause before restoring affected features.

Get in touch

For support, data access, correction, account deletion, gallery removal or security reports, email bearhelm.inc@gmail.com.

You can also send a private message through Settings → Contact in the app, including as a guest. Include a reply email if you want a response. Identify the account concerned for data requests; we may need to verify your identity before releasing or deleting data.