GapRail Privacy Policy

Last updated: August 2, 2026

Who we are

GapRail ("GapRail," "we," "us," or "our") is a scheduling and task-management service operated by TaskForth LLC. GapRail connects to your calendar(s), finds the free gaps between your meetings, and helps you decide which tasks fit those gaps. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

This policy applies to the GapRail application at app.gaprail.com and the GapRail website at www.gaprail.com. By using GapRail, you agree to this Privacy Policy.

The short version

• We collect your account details, the calendar information you choose to connect, and the tasks you create.
• We use that information to run the service — computing your free time and recommending what to work on.
• We connect to your calendar with read-only access by default. We only ask for permission to add events to your calendar if you turn that feature on.
• We do not sell your personal information, and we do not use your calendar data for advertising or to train AI models.
• You can disconnect your calendar, export your data, or delete your account at any time.

Information we collect

Account information. When you create an account, we collect your email address and the credentials you use to sign in (managed securely by our authentication provider). If you sign in with Google or Microsoft, we receive basic profile information such as your name and email from that provider.

Calendar information. When you connect a calendar (Google, Microsoft/Outlook, or Apple iCloud), we access and store information about your calendar events so the app can show your schedule and calculate your free time. This includes event start and end times and event titles. We request read-only calendar access by default. If you choose to enable the feature that adds your scheduled tasks to your calendar (currently available for Google Calendar), we will request write access, and use it only to create and manage those task events. For Apple (iCloud) calendars, we connect using an app-specific password that you create for GapRail; it is stored in encrypted form and used only to read your calendar.

Tasks and content you create. We store the tasks you add, including their descriptions, due dates, time estimates, notes, the Area you assign them to, and any files you attach. This includes how long tasks actually take to complete, which we use to improve the accuracy of your future estimates (see below).

Payment information. If you subscribe to a paid plan, payments are processed by our payment provider (Stripe). We do not store your full card number; Stripe handles that. We keep limited billing records such as your subscription status.

Information collected automatically. Like most online services, we automatically collect basic technical and usage information — such as your device and browser type, IP address, and how you interact with the app — through logs and cookies, to keep the service running, secure, and improving.

How we use your information

• Run the service — connect your calendars, calculate your free time, show your schedule, and recommend which tasks fit your available gaps.
• Estimate task durations and provide forecasts. The descriptions of the tasks you enter are processed by a third-party AI service to estimate how long tasks will take and to provide planning insights. We also use the tasks you create — including how long they actually take to complete — to improve the accuracy of your own future time estimates; this learning is based on the activity within your own account. This processing is only to provide these features to you. We do not use your information to train generalized AI models shared across other customers, and we do not use the calendar data we receive from Google, Microsoft, or Apple to train AI models.
• Manage your account and communicate with you about the service, including support and important notices.
• Keep GapRail secure and prevent fraud or abuse.
• Comply with legal obligations.

How we share your information

We do not sell your personal information. We share information only with the service providers who help us run GapRail ("subprocessors"), and only as needed to provide the service:

• Hosting and database — our application and data are hosted on Replit's infrastructure.
• Authentication — sign-in and account security are handled by our authentication provider.
• Calendar providers — Google, Microsoft, and Apple, to connect to the calendars you authorize.
• AI processing — a third-party AI service processes your task descriptions to generate duration estimates and planning insights.
• Payments — Stripe processes subscription payments.
• Website and marketing — our public website is hosted on HubSpot.

We may also disclose information if required by law, or to protect the rights, safety, and security of GapRail and its users.

Google user data — Limited Use disclosure

GapRail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, information we receive from Google Calendar is used only to provide and improve the user-facing features of GapRail. We do not use it for advertising, we do not sell it, we do not transfer it to others except as needed to provide the service or as required by law, and we do not use it to train generalized AI/ML models.

Microsoft user data

When you connect a Microsoft or Outlook calendar, information we receive from Microsoft is used only to provide GapRail's user-facing features, in accordance with Microsoft's applicable terms. As with Google data, we do not sell it, use it for advertising, or use it to train AI models.

Apple user data

When you connect an Apple (iCloud) calendar, we access it read-only using the app-specific password you provide, and the information we receive is used only to provide GapRail's user-facing features. We never modify or delete events on your Apple calendar, we do not sell this information, use it for advertising, or use it to train AI models. You can revoke GapRail's access at any time by deleting the app-specific password in your Apple account settings or disconnecting the calendar in GapRail, which also deletes the stored credential.

Data retention

We keep your information for as long as your account is active. If you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must retain certain records to comply with legal obligations. You can disconnect a calendar at any time, which stops further syncing and removes the stored calendar data associated with that connection.

How we protect your information

We take reasonable measures to protect your information. Calendar access credentials are stored in encrypted form. Access to systems is restricted, and data is transmitted over secure (HTTPS) connections. No method of storage or transmission is completely secure, but we work to protect your information and to promptly address any issues.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export the personal information we hold about you, and to withdraw consent (for example, by disconnecting a calendar). You can exercise these directly in the app (disconnect a calendar, edit or delete your data, or delete your account) or by contacting us at privacy@gaprail.com. We will respond within the time required by applicable law.

If you are in the European Economic Area, the United Kingdom, or a U.S. state with privacy laws (such as California), you have additional rights under those laws, including the right not to be discriminated against for exercising them. GapRail does not sell your personal information.

Cookies

Our website and app use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the service is used. You can control non-essential cookies through the cookie settings on our website.

Children's privacy

GapRail is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

International users

GapRail is operated from the United States. If you access GapRail from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of GapRail after an update means you accept the revised policy.

Contact us

If you have questions about this Privacy Policy or your information, contact us at:

TaskForth LLC
Email: privacy@gaprail.com

This policy is governed by the laws of the State of Arkansas.