Privacy Policy
todrift is a calm to-do list. It works fully without an account, keeps your thoughts on your device by default, and has no ads and no tracking. This page explains exactly what is stored, where, and what you can do about it. It covers the website, the installable web app and the iOS app.
The short version
- Without an account, your thoughts stay on your device. We never receive them.
- If you choose to sign in, your thoughts and boards are synced to your account so they follow you across devices.
- We don't run ads, analytics or tracking, and we don't sell or share your data.
- You can export your data, or delete your account and everything in it, from Settings inside the app.
What we handle
1. Your thoughts and boards (on your device)
The text, dates, importance, boards and theme choice you create are stored on your device: in your browser's local storage on the web, and in the app's storage on iOS. If you never sign in, this is the only place they exist. Clearing your browser data or deleting the app removes them.
2. Your account (optional)
Signing in is optional and only turns on sync. If you sign in with Google, Apple or email and password, we receive a sign-in identifier and, depending on the method, your email address (and your name if the provider supplies it). Apple may give us a private relay address instead of your real one. Passwords are handled by our authentication provider, Firebase Authentication, and are never visible to us.
3. Your synced thoughts (only if you sign in)
When you are signed in, your thoughts and boards are copied to our cloud database (Google Cloud Firestore) under your account so they sync between your devices. Access is restricted by security rules to the signed-in owner of the data. Deleted thoughts are kept as short-lived markers so deletions sync to your other devices, and are removed from the cloud after 30 days.
4. Subscriptions (todrift Pro)
Pro is an optional paid subscription. Purchases are processed by Apple (on iOS) or by our billing provider, RevenueCat, together with its payment processor (on the web). We never see or store your card number. RevenueCat receives your account identifier and purchase and subscription status so that your Pro access follows your account across devices.
5. Technical data
Like any website, our hosting provider (Vercel) and the services above receive basic technical information such as your IP address, browser type and request time when your device loads the site or talks to them. We use it only to deliver and secure the service. We do not build profiles from it.
6. What we don't do
- No advertising, and no advertising identifiers.
- No analytics or behavioral tracking, and no third-party tracking cookies.
- We don't sell your data or share it for marketing.
- We don't read your thoughts, and we don't use them to train AI models.
Services that process data for us
We use a small number of providers to run the optional parts of the app. They process data only to provide their service to us, under their own privacy policies.
| Provider | Used for | Data involved |
|---|---|---|
| Google (Firebase Authentication, Cloud Firestore) | Sign-in and sync | Account identifier, email, synced thoughts and boards |
| RevenueCat | Pro subscription status | Account identifier, purchase and subscription status |
| Apple | Sign in with Apple, App Store purchases | Per Apple's own terms |
| Vercel | Hosting this website and web app | Standard request data such as IP address |
| Google (gstatic.com), jsDelivr | Delivering the sign-in and billing code libraries when you use those features | Standard request data such as IP address |
Cookies and local storage
We use local storage and a service worker cache only to make the app work: to save your thoughts, remember settings such as your theme, and let the app load offline. We do not use cookies for tracking. Our sign-in provider may store a session token in your browser so you stay signed in.
Your choices and rights
- Export: download all your thoughts as a file from Settings.
- Sign out: removes the local copy from that device. Your thoughts remain safe in your account.
- Delete your account: in Settings, choose Delete account. This permanently deletes your synced thoughts and boards and your sign-in account. Deleting your account does not cancel a subscription; manage that in the App Store or the billing portal.
- Local-only data: if you never signed in, we hold nothing about you. Clear your browser data or delete the app to remove it.
Depending on where you live (for example the EU, UK or California) you may also have the right to access, correct, delete or port your data, and to object to or restrict certain processing. The in-app export and Delete account tools above cover access, portability and deletion.
Retention
Synced data is kept for as long as your account exists and is deleted when you delete your account. Backups and provider logs may persist for a short time afterwards before they are removed on the providers' normal schedules.
Security
Data is encrypted in transit (HTTPS), and cloud data is protected by access rules that limit it to the signed-in owner. No system is perfectly secure, so we can't guarantee absolute security, but we keep the amount of data we hold small on purpose.
Children
todrift is not directed at children under 13, and we don't knowingly collect personal information from them. If a child has created an account, it can be deleted at any time from Settings with Delete account.
International transfers
Our providers may process data in countries other than your own, including the United States. Where required, they rely on recognized safeguards for such transfers.
Changes to this policy
If we change this policy in a meaningful way, we'll update the date above and, where appropriate, tell you in the app. Using todrift after a change means you accept the updated policy.