01No account, no company server

My ToDo List has no login system and no backend server operated by the developer. All of your to-do notes and lists are stored using Apple's CloudKit, inside your own private iCloud account.

The developer has no access to that data, cannot view it, and does not store a copy of it anywhere. There is simply nothing on our side to look at.

02Shared lists

If you choose to share a list with someone using an iCloud share link, the notes on that specific list become visible to the people you invite. This happens through Apple's iCloud sharing system — not through any server the developer controls.

Lists you haven't explicitly shared remain private to you. Sharing one list never exposes the rest.

03The optional AI feature

My ToDo List includes an optional "AI quick-add" feature. It is off unless you turn it on and enter your own API key for a third-party AI provider — Google Gemini, OpenAI or Anthropic.

If — and only if — you have done that, then when you use the feature the text you type is sent directly from your device to whichever provider you chose, using your own API key, so it can be parsed into a note. That text goes to the third-party provider, not to the developer. How that provider handles the request is governed by the AI provider's own privacy policy, which you should review before enabling the feature.

If you never enable this feature, no data is ever sent anywhere for this purpose.

04Calendar access

If you tap the calendar button on a note, the app asks permission to add a single event to your device's Calendar app, using Apple's EventKit. This happens locally on your device, and no calendar data is transmitted anywhere by the developer.

05Notifications

The app asks permission to show local, on-device lock-screen reminders for tasks due today. These reminders are generated and scheduled entirely on your device — no notification data is sent to any server.

06No analytics, advertising or tracking

The app does not use third-party analytics SDKs, advertising networks or tracking technology. It does not sell or share your data with third parties for marketing purposes.

07Data retention and deletion

Completed or deleted notes move to a Trash area and are removed automatically after 30 days. You can also empty the Trash manually at any time.

Because all of your data lives in your own iCloud account, deleting a note in the app deletes it from your iCloud. To remove everything:

• Delete the lists in the app, or
• Uninstall the app and remove its data from iCloud via Settings > Apple ID > iCloud > manage storage.

There is no separate account for the developer to delete data from, because nothing is stored outside your own iCloud.

08Children's privacy

The app is not directed at children under 13 and does not knowingly collect data from them. In practice there is nothing to collect in the first place, since there is no account system.

09Changes to this policy

This policy may be updated occasionally. When it changes, the "Last updated" date at the top of this page will be revised. Continued use of the app after a change constitutes acceptance of the updated policy.

📋Your rights

Because your data stays in your own iCloud account, you already have direct control over it:

• Access: your notes and lists are visible to you at any time in the app, on any device signed into the same iCloud account.
• Deletion: delete a note or list in the app to remove it from your iCloud, and empty the Trash to remove it immediately rather than waiting 30 days. Uninstalling the app and removing its iCloud data clears everything.
• Portability and correction: you can edit any note directly, and the data is held under your own Apple ID rather than by the developer.

If you have a question about your data or this policy, get in touch using the address below.