This app is made and run by nerdens, an independent developer.
For anything to do with privacy, write to nerdens.seong@gmail.com.
2. What we do not collect
There is no sign-up, and there is no server run by the developer. None of the following is collected or transmitted:
Names, email addresses, phone numbers or anything else that identifies you
The titles and contents of your tasks — they are never sent to the developer
Advertising identifiers (IDFA or the Android advertising ID) — that library is excluded from the build entirely
Location
Contacts, photos, calendars, microphone, camera or any other data on your device
The app contains no advertising SDK and does not track what you do in other companies' apps or websites, so it never shows the App Tracking Transparency prompt.
Anonymous statistics about how the app is used are collected; section 6 below sets out exactly what those are.
3. What is stored on your device
Your tasks, their repeat rules and their completion history live in a single file inside the app's own folder. A summary of today's list is kept alongside it, in storage the app shares with its home screen widget.
Both stay on your device, and both go when you delete the app.
4. Syncing through iCloud
If your device is signed in to iCloud, your list syncs between your iPhone, iPad and Mac through your own iCloud account. Two things are used for this:
The iCloud key-value store, which holds the list itself.
The CloudKit private database, which holds one copy of the same list so that the widget on your other devices can refresh straight away.
Both live in the private part of your own iCloud account. The developer has no access to them and cannot read their contents. Storage and transport are handled by Apple's iCloud service, so Apple's privacy policy also applies to that leg of the journey.
If you are not signed in to iCloud, or you have turned iCloud off for this app, it works entirely on the device and nothing leaves it.
5. Silent push notifications
When the list changes on another device, a silent push with no content is delivered so this device can redraw its widget. Nothing appears on screen, and there is no sound and no badge. The app never asks for notification permission and never sends you a notification.
The push travels through Apple's push service (APNs). The device token that makes this possible is managed by Apple; it is not passed to or stored by the developer. No task text is ever carried in a push.
6. Usage statistics
To understand which features are actually used and improve the app, anonymous usage statistics are collected through Google's Firebase Analytics. This is the whole of what is collected:
The fact that an action happened — a task added, completed, deleted, or its repeat rule changed. Only the count is recorded; the task title is never sent.
The categories attached to that action — the repeat type (none, daily, weekly), whether a due date was set, and whether the task repeats.
The baseline events Firebase records on its own — app open, session and update events, app version, device model, OS version, language, and the country inferred from your IP address.
An app instance ID generated at random for each installation. It is not tied to a name or an account, and deleting and reinstalling the app produces a new one.
Google processes these statistics in order to provide the Firebase service, so Google's privacy policy also applies to that leg. What the developer sees is aggregate numbers, not individual users.
Collection is switched off in the debug builds used during development.
7. Sharing with third parties
The contents of your tasks are never shared with any third party, and nothing is ever sold.
The usage statistics in section 6 are processed by Google, as the provider of Firebase Analytics. No other third party receives anything.
The iCloud and push mechanisms described in sections 4 and 5 are Apple platform features running under your own Apple account. They are not a route by which data reaches the developer.
8. Retention and deletion
The developer holds no data that identifies you. Your tasks stay on your device and in your iCloud until you delete them, and the usage statistics are deleted automatically once the retention period configured in Firebase elapses.
You can delete things in these ways:
A single item — delete the task in the app, or tap Clear on the completed list.
Everything on the device — delete the app.
Everything in iCloud — open Settings > your name > iCloud > Manage Storage and delete this app's data. Removing the app from all of your devices clears it too.
The usage statistics — deleting the app discards the app instance ID, so nothing after that is tied to this device. If you need statistics already collected to be removed, write to the address below.
9. Your rights
The developer holds nothing that identifies you. Your tasks sit on your own device and in your own iCloud account, where you can read, change and delete them at any time, and the usage statistics exist only in a form that is not linked to a particular person.
If you would still like access, deletion or anything else confirmed, please use the contact address below.
10. Children
The app is suitable for all ages and collects no information that identifies anyone, age included. The statistics in section 6 identify no individual and are never used for advertising to or profiling children.
11. Changes to this policy
If this policy changes, this page and its effective date are updated. Any change that materially alters how data is handled is also called out in the release notes of the app update that introduces it.
Appendix — where the data actually sits
A table kept so that the wording above cannot drift away from the code.
What
Where
Leaves the device?
Your to-do list
todos.json inside the app's own folder on the device
No
Summary of today's list for the widget
The App Group container shared by the app and its widget, on the device
No
Your to-do list
Your own iCloud key-value store
Yes — but only into your own iCloud account
One copy of the same list, to refresh the widget
The CloudKit private database in your own iCloud
Yes — but only into your own iCloud account
A silent push (a wake-up signal with no content)
Apple's push service (APNs)
Signal only — no task text is carried
Anonymous usage statistics (action counts, device and app info)