todd privacy policy

summary

todd collects account information and the content you enter (tasks, notes, sessions, and completion history) so the app can work across devices. todd may show on-device session notifications. payment processing is handled by Google Play Billing. todd does not sell your personal data.

who we are

todd is operated by a solo developer and is the data controller for your information. you can contact todd at biz.ezpz@gmail.com.

information we collect

• account data: email address and authentication details provided through Supabase Auth.
• app content: tasks and areas, tags, categories, colors, notes, due dates, recurrence settings, session logs (start and end times), time entries, completion history, and reflections.
• usage data: in-app activity derived from your use of core features (for example, completion times and session totals) to show insights. we do not use a third-party analytics service at this time.
• notification permission: if you enable notifications, your device stores that preference so todd can show session timers. no push token is collected for these on-device notifications.
• payments: if you purchase paid features, transactions are processed by Google Play Billing. we receive purchase tokens, product identifiers, entitlement status, and transaction identifiers, not your full payment details.
• support: emails or messages you send to support.
• log data: service providers like Supabase and Google may collect standard logs such as IP address, device information, and timestamps to operate and secure their services.

if you choose to include sensitive information in task titles or notes, that information will be stored with your account.

what we do not collect (currently)

• push notification tokens: todd shows on-device session notifications and does not send remote push notifications. if that changes, this policy will be updated.
• third-party crash reports: todd does not use a separate crash reporting service at this time.

how we use information

• provide, maintain, and improve the app.
• sync your data across devices and keep your account secure.
• process subscriptions and manage access to paid features.
• respond to support requests and communicate service updates.

sharing and processors

todd uses Supabase to store data and manage authentication. payment processing is handled by Google Play Billing. Google may process personal data as described in the Google Privacy Policy. todd does not share data with third-party advertisers and does not use a third-party analytics provider at this time.

data location and transfers

your data is stored in the Supabase region configured for this project. Supabase and Google may process data in other locations (for example, for redundancy, security, or support).

local device storage

the app may store local settings and cached data on your device (for example, notification permission state or session state) to keep the experience responsive.

data retention

data is kept while your account is active. you can delete your account in the app, or request deletion at itstodd.com/delete-account. deletion requests are processed as quickly as possible. supabase maintains backups for disaster recovery, so data may persist in backup systems for a limited period.

your choices

• access or update your data through the app.
• request deletion of your account and data.
• opt out of non-essential communications.
• todd does not use targeted ads or cross-app tracking.

security

reasonable technical and organizational measures are used to protect your data. no method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

children

todd is not directed to children under 13. if you believe a child has provided personal information, please contact support to request deletion.

changes

this policy may be updated as the product evolves. the effective date will be revised and the latest version will always be available at this page.

contact

for questions or requests, email biz.ezpz@gmail.com.