Privacy Policy

Last updated: November 2024

1. Introduction

TodoG ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our task management application.

2. Data We Collect

We collect minimal data necessary to provide our service:

  • Email address — for authentication and account identification
  • Task data — titles, descriptions, dates, and organizational metadata you create
  • Usage data — basic timestamps (account creation, last sign-in)

3. How We Use Your Data

Your data is used solely to:

  • Authenticate you and maintain your session
  • Store and sync your tasks across devices
  • Provide the core functionality of the application

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis (GDPR)

Under GDPR, we process your data based on:

  • Contract — processing necessary to provide the service you signed up for
  • Legitimate interest — basic operational needs like security and service improvement

5. Data Storage & Security

  • Data is stored in secure PostgreSQL databases
  • All connections use HTTPS encryption
  • Passwords are not stored — we use magic link authentication
  • API keys are stored as secure hashes

6. Your Rights (GDPR)

You have the right to:

  • Access — request a copy of your data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data
  • Portability — receive your data in a portable format
  • Object — object to certain processing

To exercise these rights, contact us via our support page.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data will be permanently removed within 30 days. Archived tasks are retained until you request deletion.

8. Cookies

We use essential cookies only for authentication (JWT session tokens). We do not use tracking cookies or third-party analytics.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or in-app notification.

10. Contact

For privacy-related inquiries, please use our support page.