ToDoForce ("the app", "the Service", "we", "us", or "our") is a personal task manager built around the Eisenhower Matrix. We use personal information to provide the app and the optional features you choose. We do not sell your personal information. Optional third-party video players may display ads and have their own data practices, as explained below. This Privacy Policy explains what we collect, why we collect it, how it is stored and shared, how long we keep it, and the rights you have over it.
This policy applies to everyone who uses ToDoForce, whether you create an account with email and password, sign in with Google or Apple, or use the "Try the demo" mode without an account. By using the app, you agree to the practices described here.
We collect the following categories of data, and only for the purposes described in Section 3:
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, name, and profile photo that you or your sign-in provider supply. Sign in with Apple may provide a private relay email address. | You / your sign-in provider |
| Account eligibility | Your declaration that you are at least 18, the account policy version, and the server-recorded confirmation time. This declaration does not request your full date of birth or identity documents and is not identity verification. | You |
| Task content | Tasks, lists, quadrant placement, due dates and times, notes, focus ("Must-Do") selections, completion and "done" status | You |
| Photo attachments | Photos you choose to attach to a calendar appointment, within your plan's limit. The app resizes each one before it leaves your device and never reads your photo library on its own — you pick each file yourself through your device's own picker. Photos attached to an appointment you share are visible to the family members you shared it with. | You |
| Reminder data | A device push-notification token, and your reminder on/off preference | Your device (only if you enable reminders) |
| Feedback | Messages you send through "Send Feedback" and the contact email you provide there | You |
| Billing data | If you buy the Family Plan, we store the identifier your payment processor assigns to you, the identifier of your subscription or one-time payment, the plan you bought, and the date on which your access renews or ends. We never receive or store your card number, because Stripe, Google Play, and the App Store handle payment details on their own systems. | Stripe, Google Play, or the App Store, when you complete a purchase |
| Technical and diagnostic data | Basic request information (for example, IP address and browser type). When a signed-in session encounters a reportable error, diagnostic records may include the account identifier, error message, stack, page URL, browser or device information, build identifier, and time. These records help diagnose faults and keep the Service secure. | Automatically |
In "Try the demo" mode, you are not asked for an email or password. Demo content is sample data and is not tied to a personal identity.
ToDoForce does not use your account or task content to build advertising profiles, and we do not sell or rent your personal information. Optional third-party video content is described in Section 6.
Where data-protection laws such as the GDPR apply, we rely on the following legal bases:
ToDoForce uses Google's Gemini API for optional task organization, Smart voice organization, and productivity reports. Before the first AI request, the app asks for your permission and explains which content will be sent. Task organization sends the text you enter; voice organization sends transcribed text, not the audio recording. Reports send the relevant task titles, notes, dates, completion information, and report prompt. Your request is sent through our backend to Google Gemini. AI output can be inaccurate. You may cancel before sending, or withdraw permission in Settings → AI data sharing; withdrawing stops future AI requests and does not undo processing already completed. Raw voice typing is a separate device/browser speech-recognition feature. In the iOS app it uses Apple Speech after microphone and speech-recognition permission. Depending on the device and language, audio may be processed by Apple over the network. ToDoForce does not upload that audio to Gemini; text you save becomes part of your task data.
Our Gemini API requests use a project with active billing. Google's paid-service data terms apply. Google's current abuse-monitoring policy describes keeping prompts, context, and responses for 55 days and allowing authorized staff to review flagged content for safety and policy enforcement. Paid access does not mean that no data is retained; Google's applicable terms also address required legal disclosures.
ToDoForce uses the following providers for the features you choose. These include account and storage services, payment processors, and optional video providers:
| Provider / service | Purpose |
|---|---|
| Firebase Authentication | Account creation, email, Google, and Apple sign-in, session management |
| Cloud Firestore | Secure cloud storage and sync of your tasks and lists |
| Cloud Storage for Firebase | Storing your attached photos and serving them to authorized viewers; checking availability and streaming our optional Family Plan video. Video requests include normal network and browser/device request information. |
| Firebase Hosting & Cloud Functions | Serving the app and running secure backend logic (including the AI report proxy) |
| Firebase Cloud Messaging and Apple Push Notification service (APNs) | Delivering reminder notifications, including their task or appointment text, to your device |
| Apple Sign In and Speech services | Providing the Apple sign-in flow and recognizing dictated audio in the iOS app when you choose these features and grant the required permissions |
| Google Gemini API | Organizing task/transcribed text and generating reports after your permission (see Section 5) |
| Stripe | Processing payments you make on the web, storing your card details on Stripe's own systems, and providing the billing portal in which you update your card or cancel your subscription |
| Google Play Billing | Processing purchases you make inside the Android app, which Google's payments policy requires for in-app digital subscriptions |
| Apple App Store | Processing in-app purchases and restoring purchases in the iOS app, when App Store billing is enabled |
| RevenueCat | Linking native purchase receipts to your ToDoForce account, verifying purchase status with the store, and providing subscription analytics. We provide the account identifier and transaction information needed for these purposes. |
| YouTube embedded player (website and Android) | Displaying the optional demo video after you open its window. Google/YouTube receives player and request information; playback can send additional usage information. |
Optional demo video. On iOS, the demo plays a video bundled with the app and does not load YouTube or send playback information to Google/YouTube. On the website and Android, the demo uses YouTube API Services. Loading its player sends basic network, device, and player information to Google/YouTube; playing the video sends additional playback information. The player may use cookies or similar storage and may display advertisements under YouTube's policies. Google's Privacy Policy and the YouTube Terms of Service apply. You can use ToDoForce without opening the video.
The Google services listed above process data under Google's security and privacy terms. Stripe processes your payment data under its own privacy policy, and it acts as an independent controller of that data for fraud prevention and for meeting its legal obligations. We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users and the Service.
ToDoForce stores data on your device to support cached startup and offline work. The web app can cache its application files after an online visit; the native iOS app includes those files in the installed app. Cached account content and saved drafts are separate from application files. First sign-in, AI, photo uploads, and server-only operations require a connection.
We use these first-party storage features to operate the app, not to build advertising profiles. The optional YouTube player's storage is described in Section 6. Browser site-data settings or removal of the native app can clear local data. This removes cached sessions and may discard work that has not synchronized; preserve that work first.
Google operates data centers around the world, so your data may be stored and processed in countries other than the one where you live, including the United States. Where required, such transfers are protected by appropriate safeguards under Google's data-processing terms. If you buy the Family Plan on the web, Stripe likewise processes your payment data outside your country of residence, including in the United States, under the transfer safeguards set out in its own privacy policy.
We take reasonable measures to protect your data, including:
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your password and devices safe.
We keep account and task data while your account is active. Individual task deletion is recoverable for 30 days; retiring a Routine preserves its history. You can request permanent account deletion in Settings → Delete account, after confirming your identity. This deletes your account, owned tasks/lists, uploaded photos, and authored comments. Temporary Storage failures are retained as cleanup jobs and retried. Subscription cancellation in Google Play or the App Store must be managed through that store; deleting ToDoForce does not itself cancel a store subscription. Payment providers may retain their own transaction records under their policies.
Account deletion clears this app's own drafts and temporary export files for that account on the current device. Firestore maintains one device-wide offline database, so account deletion does not selectively erase every cached record. Signing out prevents another account from accessing your data through the app. You can clear browser site data or remove the native app to erase its remaining local cache; first save any other account's unsynchronized work. Copies you exported or shared elsewhere remain under your control.
Depending on where you live, you may have the right to:
To exercise any of these rights, email frack318@gmail.com or use the in-app "Send Feedback" option. We will not discriminate against you for exercising your rights.
ToDoForce is for adults aged 18 and over, including each person using a family group. We ask account holders to confirm this eligibility and record the account declaration described in Section 2. That declaration is separate from permission for optional AI processing. Existing account holders can access account management to export their data, manage an existing subscription, sign out, or request deletion without confirming eligibility for normal app features. If you believe an underage person has created an account, contact us so we can review it and handle their data appropriately.
ToDoForce does not build cross-app advertising profiles from your account or task content. The optional YouTube player has its own data practices, described in Section 6. We do not change our own processing in response to a browser's "Do Not Track" signal.
We may update this policy as the app evolves or as the law changes. When we make material changes, we will update the "Last updated" date above. Your continued use of the app after a change means you accept the updated policy.
If you have questions, requests, or concerns about your privacy, email frack318@gmail.com or use the "Send Feedback" option inside the app. We aim to reply within 5 business days.