This Privacy Policy explains how TODO-ish (“we”, “our”, or “the app”) collects, uses, and protects your information. By using TODO-ish, you agree to the practices described below.
1. Information We Collect
We collect only what is necessary to operate the app:
- Account data: email address and display name when you create an account or sign in with Google.
- User-generated content: tasks, notes, due dates, zones, steps, time tracking sessions, and file attachments you create inside the app. File attachments are stored in Firebase Storage (Google).
- Usage data: basic technical information such as app version, device type, and operating system, used to diagnose crashes and improve performance.
We do not collect location data, contacts, photos from your photo library, or advertising identifiers.
2. Biometric Data
TODO-ish offers optional Face ID and Touch ID features (App Lock and biometric confirmation for sensitive actions). All biometric authentication is handled entirely by iOS using Apple’s LocalAuthentication framework. We never access, receive, store, or transmit your biometric data. It never leaves your device.
3. Microphone and Speech Recognition
If you use voice input to create tasks, the app accesses your microphone and uses Apple’s Speech Recognition framework. Audio is processed by Apple on their servers in accordance with Apple’s privacy policy. We do not store or have access to your voice recordings.
4. File Attachments
Files you attach to tasks are uploaded to Firebase Storage, a Google service, and are associated with your account. Files are accessible only to you. Upon account deletion, your files are removed within 30 days.
5. Google Calendar Integration
If you connect your Google Calendar, the app reads your calendar events to display them alongside your tasks. We access only event titles, times, and calendar names. We do not modify, delete, or share your Google Calendar data. Google Calendar access is governed by Google’s Privacy Policy.
6. How We Use Your Data
- To operate and sync your tasks across devices
- To authenticate your identity
- To send reminders and notifications you have set up
- To diagnose technical issues and improve the app
- To fulfill legal obligations if required
We do not use your data for advertising, behavioral profiling, or sale to third parties. Ever.
7. Third-Party Services
- Firebase Authentication (Google) — user sign-in and identity
- Cloud Firestore (Google) — cloud storage for your tasks and settings
- Firebase Storage (Google) — storage for file attachments
- Google Sign-In — optional authentication via Google account
- Sign in with Apple (Apple Inc.) — optional authentication via Apple ID
- Google Calendar API — optional display of your calendar events
- Apple Speech Recognition — optional voice-to-text for task creation
- Apple App Store — app distribution and future in-app purchases
Each third-party service is governed by its own privacy policy. We do not integrate any advertising networks or social analytics platforms.
8. Guest Mode
You can use TODO-ish without creating an account. In guest mode, all your data is stored locally on your device only and is not transmitted to our servers. If you uninstall the app, guest data is permanently deleted.
9. Data Security
Your data is transmitted over encrypted connections (TLS) and stored securely using Google Firebase infrastructure. We apply reasonable technical and organizational measures to protect your information from unauthorized access.
10. Data Retention and Deletion
You can delete your account at any time from within the app (Settings → Delete Account). Upon deletion, your personal data and task content are removed from our servers within 30 days. Backup systems may retain copies for up to 90 days before permanent deletion.
11. Your Rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data. Residents of California (CCPA) and the European Economic Area (GDPR) may exercise these rights by contacting us. We respond within 30 days.
12. Children’s Privacy
TODO-ish is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
14. Contact
If you have any questions or requests regarding this Privacy Policy, please contact us at: support@it4music.com