Todo it

Privacy Policy

Effective date: 19 May 2026

Todo it (the “App”) is published by Tocaan (the “Developer”, “we”, “us”). This policy explains what personal information the App handles, how it is used, and the controls you have over it. We have written it to be easy to read; if anything is unclear, please contact us at the email address at the bottom.

Summary in one paragraph

Todo it is an offline-first app. Every task, goal, document, contact reference, and setting you create is stored locally on your device. We do not run a server, we do not collect analytics, we do not run advertising, and we never see your data. The only network calls the App makes are to Google Fonts (to download fonts you select) and to Apple's iCloud — and iCloud uses your personal iCloud account, not ours.

1. Information we collect

We collect no personal information on our servers because we operate no servers. The following data types are processed entirely on your device:

• Tasks, goals, milestones, weekly reviews, tags, wallet documents you create — stored in the App's private database on your device.
• Documents you import or scan (PDF, images) — stored in the App's private files directory on your device.
• Contact names and phone numbers — only when you pick a contact to attach to a task. Copied into the App's local database; we do not read your full address book or upload it anywhere.
• Calendar event titles + times read from calendars you allow — used only to show events alongside your tasks. Never written, never copied off your device.
• Settings preferences (language, font, haptics, week-start day) — stored in iOS UserDefaults.

2. Permissions we request

Each permission is requested only when you use the related feature, and you can revoke any of them at any time in iOS Settings → Todo it.

• Camera — to scan documents into the Wallet and attach photos to tasks. Captured images are stored only on your device.
• Photo Library — to attach existing photos to tasks and Wallet documents. Picked images are copied into the App's private storage.
• Calendars — to display your existing events next to your tasks. Read-only by default.
• Contacts — to attach a person to a task for one-tap calling. We copy only the name and phone number you choose; the rest of the contact is ignored.
• Notifications — to fire local reminders you schedule. All notifications are scheduled locally; no push server is involved.

3. Optional cloud features

The App offers two cloud features that you must opt into:

• iCloud Sync — syncs your data between your own Apple devices using Apple's iCloud service. Data is end-to-end encrypted by Apple between your devices and never reaches our servers. You can toggle this off at any time.
• iCloud Drive backup — generates a JSON export of your data that you can save to iCloud Drive (or any Files-app location) via the standard iOS share sheet. We never see this file.

4. Third-party services

The App uses these third-party services strictly for functional reasons:

• Google Fonts — downloads the font family you select in Settings the first time you pick it. Google may log the request (IP address, user agent) per its own privacy policy. No personal data is sent.
• Apple iCloud, Apple Vision (on-device OCR), Apple QuickLook, Apple VisionKit (document scanner) — standard iOS frameworks; data stays on your device or in your own iCloud account.

5. Information we do not collect

• No analytics, no telemetry, no crash reporting SDKs.
• No advertising IDs (IDFA / IDFV).
• No location data.
• No tracking across other apps or websites (NSPrivacyTracking = false in our App Privacy manifest).
• No account creation, login, or email collection.

6. Children's privacy

The App is rated 4+ and is appropriate for all ages. Because we collect no personal information, we do not knowingly collect data from children under 13.

7. Data retention & deletion

All your data lives on your device. Deleting the App from your device deletes the App's database and files. iCloud Sync data is managed by your iCloud account — Apple purges it according to its own retention rules when the App is removed.

8. Your rights

Because we do not collect or store your data on our servers, there is no remote profile for us to access, rectify, or erase on your behalf. You have full control via iOS: delete individual items in the App, delete the App entirely, or revoke any permission in iOS Settings.

9. Changes to this policy

If we change this policy materially we will update the “Effective date” above and post the new version at the same URL.

10. Contact

Questions or concerns? Email us at todoit@tocaan.com.