Privacy Policy — Todoing.ly

We believe in minimal data collection. We only collect what is necessary to provide the App’s features and we do not sell, share, or monetize your personal information.

Account Information When you create an account, we collect your email address and, optionally, your display name. If you sign in with Google or Apple, we receive your email address from the identity provider. We do not collect profile photos, phone numbers, or physical addresses. Task & Project Data The App stores the tasks, projects, notes, and templates you create. For shared projects, task data is visible to all project members. Activity feeds record who created, completed, or modified tasks within shared projects. Social Features If you use the friends feature, we store your friend code (a short code you share to connect with others), your friends list, and friend request history. Your email may be used by other users to find and add you as a friend. Subscription Information If you subscribe to Todoing.ly Premium, we store your subscription status and transaction identifiers provided by the App Store, Google Play, or Stripe to verify your entitlement. We do not process or store payment card details — all payments are handled by Apple, Google, or Stripe. Local Preferences UI preferences (theme, sort order, notification settings) are stored locally on your device and are not transmitted to our servers.

We do not collect any of the following: • Device identifiers (IDFA, IDFV, or device ID) • Location data • Usage analytics or behavioral tracking • Crash reports or diagnostics • Contacts or address book data • Photos, camera, or microphone data • Browsing history Firebase Analytics is explicitly disabled in the App. We use no third-party analytics, advertising, or tracking SDKs.

Your information is used solely for: • Providing and maintaining the App’s features • Authenticating your identity and securing your account • Enabling collaboration features (shared projects, friends, activity feeds) • Verifying subscription entitlements across platforms (iOS, Android, web) We do not use your data for advertising, profiling, or marketing purposes.

Your data is stored in Google Firebase (Firestore) with servers located in the United States. All data is encrypted in transit via HTTPS/TLS. Firebase provides encryption at rest for stored data. Authentication is handled by Firebase Authentication with support for Google Sign-In, Apple Sign-In, and email/password. Passwords are hashed and managed by Firebase — we never have access to your plain-text password.

We do not sell, rent, or share your personal information with third parties. Your data is shared only in these limited circumstances: • With other users you choose to collaborate with — shared project members can see tasks, activity, and your display name within that project. • With infrastructure providers — Google Firebase (data storage and authentication) and Stripe (web payment processing) process data on our behalf under their respective privacy policies. • When required by law — we may disclose data to comply with legal obligations.

Your data is retained for as long as your account is active. You can delete your account and all associated data by contacting us at jeff@bravely.dev. Upon receiving a deletion request, we will remove your account and all associated data from our systems within 30 days.

The App is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The effective date at the top of this page will be updated accordingly. Continued use of the App after changes constitutes acceptance of the revised policy.