Last updated October 1, 2026

Privacy Policy

00Todo is a task and project app for iPhone and iPad, with a hosted API that syncs your data and can connect to assistants you approve. This page explains the information used to provide those features.

Information we process

When you sign in with Apple, we receive an Apple account identifier and may receive an email address, including an Apple private relay address. We use the stable identifier to keep accounts separate. We store tasks and projects you create, including titles, notes, dates, completion state, and their relationships. The service also stores account sessions and connection grants for assistants you authorize.

How we use it

We use this information to sign you in, sync and display your lists, process edits, manage authorized assistant connections, protect the service, and troubleshoot failures. The website itself has no account form or advertising tracker.

On your device

The app keeps a local snapshot and pending changes so you can work offline. Its Home Screen widget receives a limited shared snapshot with item titles, project names, dates, and completion state. It does not receive notes or account credentials. Quick Add drafts use Apple’s on-device models where available; speech recognition is requested for voice entry only when you choose to use it. A draft is sent to our API only after you approve adding the item.

Assistant connections

If you connect an MCP-compatible assistant, you sign in with Apple and approve its requested access. That client can then read or change tasks and projects according to its granted scope. You can review and revoke connections in the app. The assistant provider may process information it receives under its own terms and privacy policy.

Service providers and sharing

We use Apple for sign-in and device features, and Cloudflare to host the API and store synced data. We share information with them as needed to run 00Todo. We do not sell personal information or use it for targeted advertising.

Retention and deletion

Your synced data remains while your account is active, unless you delete individual items. You can delete your account in the app’s Settings after signing in with Apple again. Account deletion removes your tasks, projects, sessions, and assistant grants from the service. Local pending changes and caches are managed by the app; sign-out may retain unsynced changes for the same account until they can sync.

Security

Connections use HTTPS. App session credentials are stored in the iOS Keychain, and the service stores credential hashes rather than plaintext credentials. Access to task and project records is scoped to the signed-in account.

Children and changes

00Todo is not directed to children under 13. We may update this policy as the app changes and will post the new date on this page.

Contact

For privacy questions, use the contact route on our Support page. Please do not post private task content or credentials in a public issue.