Todiax Privacy Policy

Language and precedence

This Privacy Policy may be available in English and in the language selected in the app. Translations are provided for convenience.

If there is any inconsistency, the English version prevails to the maximum extent permitted by applicable law.

Data you create

Todiax may process tasks, notes, project names, project steps, due dates, reminders, settings, imports, exports, and other content you enter into the app.

In the local-first model, much of this data may remain on your device unless you sign in, enable a server-backed feature, use purchase restoration, or otherwise use functionality that requires backend processing.

Account and purchase data

If you create an account, Todiax may process your email, display name, authentication identifiers, session state, profile role, and account deletion requests.

If you use a supported social sign-in provider, Todiax may receive and store the display name, email address, provider user identifier, and profile-photo URL returned by that provider. Todiax does not use this feature to access your device photo library.

For Premium, Todiax may process app user identifiers, anonymous purchase identifiers, product identifiers, entitlement status, store, environment, renewal or expiration dates, and related technical metadata.

Premium trial eligibility

Guest trials are recorded only on this app installation. Clearing its data, a clean reinstall, or another device can remove that local record and allow another guest trial. Signed-in trial eligibility is checked by confirmed email across devices.

To prevent repeat account trials, we store a keyed HMAC-SHA256 digest of the confirmed email after trimming whitespace and converting it to lowercase, together with trial start and end times, in a restricted server table. We do not store the plaintext email there. The digest is pseudonymous personal data, not anonymous. We process this limited record on the basis of our legitimate interest in preventing repeated promotional trials, where applicable. We keep the record while a linked account exists. Its deletion is scheduled for 12 months after deletion of the last linked account. After that date, it is no longer used to decide trial eligibility, and an hourly automated cleanup deletes expired records. You may use the privacy contact below to request review, object to the processing, or request earlier erasure under applicable law. We assess each request under applicable law and take the required steps when erasure is approved. Once removed, a new account using the same email may be eligible for another trial.

Optional first-launch survey

If you answer the optional first-launch survey or explicitly choose Skip, Todiax sends your answer or skipped status, a random installation identifier, app name and version, platform, locale, user-agent, submission time, and, if you are signed in, your account identifier.

This data is used for app functionality, aggregate acquisition and product analytics, outreach measurement, and duplicate or abuse prevention. You can close the survey without submitting it. It is not used for third-party advertising or to create an advertising profile.

Premium screen analytics

When optional analytics is enabled and permitted, Todiax may tell RevenueCat that a version of the Premium screen was shown and that a plan was selected or a purchase was started. The event may include a pseudonymous app user identifier, paywall and offering identifiers, time, app environment, platform, operating-system context, and technical SDK context. Verified purchases, renewals, cancellations, expirations, and refunds come from RevenueCat and the app store rather than from client analytics.

These analytics events do not include your tasks, notes, projects, email address, payment-card details, or other local productivity content. They are used to measure Premium-screen conversion and reliability, are separated between test and production environments, and do not grant or revoke Premium access. Purchases continue to work when optional Premium-screen analytics is disabled.

Support and feature requests

When you use the in-app developer contact or feature request form, Todiax sends the message and any reply contact you provide. It also sends the request type and source, installation ID, app name, version and environment, platform, locale, user-agent, and, if you are signed in, your account identifier, email, display name, and authentication provider.

The backend creates an irreversible network fingerprint for abuse prevention. The raw network address is not stored. These records are used to answer messages, evaluate feature requests, maintain service security, and handle disputes. Spam records are ordinarily deleted after 90 days; other support records are ordinarily deleted after 24 months unless longer retention is required by law or for an active dispute.

Technical and network data

When you use a server-backed feature, network and service infrastructure may process your IP address, approximate city, region, or country inferred from it, request time and route, response status and latency, user-agent, app, platform, or SDK context, and error details. Todiax does not request GPS or precise location for this purpose.

This data is used to deliver the requested service, diagnose reliability, prevent abuse, protect security, meet legal obligations, and produce aggregate analytics. The support database stores an irreversible network fingerprint rather than the raw IP address; infrastructure providers may retain the raw IP address and derived approximate location in routine technical logs, ordinarily for up to 90 days subject to provider settings and legal requirements.

Synchronization

If you enable synchronization, Todiax sends task and related app data to backend servers in encrypted form so the data can be synchronized across your devices.

The server is not designed to read encrypted task content. However, backend systems may process sync metadata such as account id, device id, record type, encrypted record size, timestamps, key envelope metadata, and technical routing information.

A recovery code may be required to restore encrypted synced data on a new device. If you lose all trusted devices and the recovery code, Todiax may be unable to restore the encrypted synced data because the server does not store the plaintext encryption key.

When Premium or other qualifying Sync access expires, the active encrypted Sync copy becomes inaccessible immediately. It is scheduled for deletion 90 days after the latest access expiration date. Todiax displays in-app warnings when 30 days and 7 days remain before the scheduled deletion. Operating-system and email notifications are not promised.

Deleting your account or explicitly choosing to delete or reset Sync data removes the active encrypted Sync copy immediately. Inaccessible operational backups may retain deleted encrypted data for no more than 30 additional days. During that period, the data is unavailable for synchronization or restoration.

Third-party data processors and service providers

Todiax may use services such as Supabase for authentication and backend storage, RevenueCat for purchase validation and entitlement sync, Google Play and App Store billing for purchases, Google or Apple sign-in where enabled, and Google Tasks when you choose to import tasks from Google.

These providers process data under their own terms, privacy policies, and data processing commitments. Todiax aims to share only the data needed for the requested feature.

Google Tasks import

If you choose to import Google Tasks, Todiax requests access to Google Tasks only for the import feature. The import is started by you and is used to create or update task data inside Todiax.

Imported data may include:

• Google task lists;
• task titles;
• task notes or descriptions;
• task dates;
• completion status;
• completion date where available;
• parent-child task structure;
• task ordering or rank within a task list, where available;
• source links returned by Google Tasks; and
• technical Google Tasks identifiers needed to avoid duplicate imports or update previously imported tasks.

Google Tasks import limitations: deleted tasks and hidden tasks are not imported by default; Google Tasks reminders may be unavailable through the Google Tasks API; recurring or repeating task information may be unavailable or incomplete; task dates from Google Tasks may contain only the day and not an exact time; some source links may open a Google service rather than the exact original item if Google or the user account does not provide direct access.

Final import limitations depend on the Google Tasks API available at the time of import: Google Tasks API reference.

Todiax does not use imported Google Tasks data for advertising, ad targeting, advertising profiles, resale, or unrelated marketing. Todiax does not change or delete your Google Tasks when the feature is configured as one-way import.

No advertising data sharing

Todiax does not sell your tasks, notes, projects, reminders, account data, or purchase state.

Todiax does not transfer user data to third parties for advertising, ad targeting, advertising profiles, or unrelated marketing purposes.

Retention and deletion

To request deletion of your account or cloud sync data, visit Todiax account and data deletion. You can submit a request by email without reinstalling the app. That resource also explains processing times and the limited data retained after deletion, including retention periods and the handling of provider records and backups.

Local data may remain on your device until you delete it, clear app data, or uninstall the app, depending on platform behavior.

Server-side data may be deleted when you delete your account, subject to limited retention needed for security, fraud prevention, purchase verification, legal compliance, accounting, dispute handling, or backup integrity.

Developer and privacy contact

For privacy questions, contact the Todiax developer at programer.dn.jp@gmail.com. You can also use Settings > Help & Support > Developer contacts in the app or the support contact in the app store listing.