Privacy Policy
The short version: what you say goes to one AI service to be understood, your list lives in your own iCloud, and there is nothing else — no accounts with us, no analytics, no tracking.
What we collect
Nothing that identifies you. To-did has no user accounts, no analytics SDKs, no advertising identifiers, and no profile of you anywhere. We never see your name or email unless you write to us.
What leaves your device
When you capture a thought, the recording (or the text you typed), together with the titles and dates of your currently open tasks for context, is sent to our capture service and forwarded to Google's Gemini API to be interpreted. Google processes it under the Gemini API terms.
To count captures per person rather than per install, the capture service receives the identifier of your iCloud user record and keeps only a one-way hash of it, alongside a random per-install device identifier and the number of captures made. Neither can be turned back into your name, email or Apple ID.
The audio is not stored — not by us, not after the reply comes back. Our service keeps only anonymous counters (how many captures a device made this month, how long they took, which app version and store it came from, and whether the capture started from the app, a shortcut or a notification) so we can meter free usage and keep the service running.
Where your list lives
Your tasks are stored in the app's local database on each device, and — when iCloud sync is on — in your own iCloud account's private database, which Apple encrypts and we cannot read. We have no copy of your tasks on any server of ours.
Reminders are local notifications scheduled by your own device.
The microphone
The microphone is active only while you are capturing — while the recording indicator is showing — and the recording file is deleted from the device once it has been processed. A capture that fails keeps its recording locally until it can be retried, then that copy is deleted too.
Deleting your data
Swipe or click any task to delete it. Deleting the app removes its local database; turning off iCloud sync for To-did in your iCloud settings removes the synced copy. Write to us and we will delete the usage counters tied to a one-way hash of your iCloud account identifier and to your device identifier.
Children
To-did is not directed at children under 13 and we do not knowingly collect information from them.
Changes and contact
If this policy changes in a way that affects what leaves your device, the app will say so before the change takes effect. Questions: hello@to-did.app.
Last updated: September 19, 2026