Privacy policy

Last updated October 22, 2026.

ADHD Todo works without an account: your tasks then stay on your device. This page says what is collected when you sign in, why, and who else sees it.

What we collect

Your account: your email address and a display name. If you sign in with Google, we receive your Google account's email address and name; nothing else from your Google account is requested.
What you sync: your tasks, projects, categories, the reports your coding agents send, and the names of your signed-in devices. They are stored on our server so your other devices can show them.
Voice input: when you use the microphone, the recording is sent through our server to a speech-to-text service and the text comes back. The recording is not stored.

What we do not collect

No analytics, no advertising identifiers, no tracking across apps or websites.
API keys and model settings you enter stay on your device and are sent only to the AI provider you chose.

Who else processes data

Google, only if you choose "Continue with Google", to confirm who you are.
Resend sends our emails: sign-in codes and password resets.
Xiaomi MiMo turns voice recordings into text.
The AI provider you choose (for example Anthropic, OpenAI or DeepSeek) receives what you send to the assistant, under your own key.

We do not sell or share your data for any other purpose.

Keeping and deleting your data

Your synced data is kept while your account exists. To delete your account and everything synced with it, email us from the address you signed in with; we delete it within 30 days. Signing out on a device removes the sign-in from that device.

Security

Data travels over HTTPS. Passwords are stored only as hashes. Sign-in tokens are kept in your system's keychain (Keystore on Android).

Children

ADHD Todo is not meant for children under 13, and we do not knowingly collect their data.

Changes and contact

If this policy changes, the date above changes with it. Questions: sorlia7z@gmail.com.