TodoLot Privacy Policy
TodoLot is a voice-to-alarm to-do app for iPhone made by Viktor Gorbatiuk, an independent developer (“we”, “us”). Your tasks live on your device. There is no account to create, no advertising, and your personal data is never sold. This page describes exactly what leaves your device, where it goes, and why, in plain language.
At a glance
- No sign-up. We never ask for your email, phone number or a password. You can type an optional first name in Settings so the morning briefing greets you by name; it stays on your device and is part of the briefing text described below.
- Your tasks stay on your device. They are never uploaded to us.
- Three things leave the app on purpose, as text: a dictation (to turn it into tasks), an alarm or briefing phrase (to generate a natural voice, if you turned that on), and the short description you type for a custom wake-up sound (Pro). All go over encrypted connections.
- Everything else is anonymous, aggregate usage analytics and crash reports tied to a random ID, not to you.
What the app processes, and where
Microphone and speech recognition
When you dictate tasks, your speech is transcribed by Apple’s built-in iOS speech recognition, with your permission. Depending on your device and language, Apple may process the audio on the device or on Apple’s servers; see Apple’s Privacy Policy. Your audio never reaches us or any other third party.
Turning dictation into tasks
The text of your dictation (never the audio) is sent over an encrypted connection to an AI service that splits it into individual tasks, times, repeats and early reminders. Today that service is OpenAI; we may also use Anthropic. Along with the text, the request includes your dictation language, time zone, the current time, the hours you count as morning, midday, evening and night, and the names of your task groups, so the AI can place tasks correctly. No device identifier or account is attached to the request. We do not store or log your dictation text, and we use these providers’ developer APIs, which under their published API data policies are not used to train their models.
Natural alarm voice and wake-up sounds
If the natural alarm voice is enabled, the text of an alarm phrase and of the morning briefing (including the optional first name) is sent over an encrypted connection to ElevenLabs, which generates the audio. The generated audio is cached on your device so the same phrase is not sent twice. With Pro, the short description you type for a custom wake-up sound is sent to the same provider’s sound generation service. If the natural voice is turned off, or the network is unavailable, the voice is generated entirely on your device using Apple’s built-in text-to-speech.
Anonymous identifier, usage analytics and crash reports
On first launch the app creates an anonymous user ID via Google Firebase Authentication. It is a random identifier; no name, email or password is ever asked for or collected. Using this anonymous ID, the app collects:
- Usage analytics (Firebase Analytics) to understand how the app is used and how much it costs to run: app opens and screen views; the steps you take through setup and purchase; permission choices; simple counts such as how many tasks a dictation produced and how many characters of speech were generated; and, when you buy a subscription, the product, price and currency. These are counts and event names only, never the content, wording or subject of your tasks or dictations, and never your payment details.
- Crash reports (Firebase Crashlytics) so we can find and fix bugs.
- Standard technical context these Google SDKs collect automatically, such as device model, operating-system version and a coarse region derived from your IP address.
This data is linked to the anonymous ID, not to your identity, and is used only to operate and improve the app. The app has no in-app switch for analytics yet; deleting the app stops all collection, and you can ask us to delete the records (see your rights).
Purchases
Billing is handled entirely by Apple through the App Store; we never see your payment details. To reliably unlock your subscription across reinstalls, the app records subscription status (which plan is active and its renewal state, nothing more) with RevenueCat, keyed to the same anonymous ID.
Tasks, alarms and settings
Your tasks, alarm times, groups, reminders and settings are stored locally on your device. If you use iCloud or device backups, this local data may be included in your backups, which are managed by Apple.
This website
This site is static and sets no cookies. It is served by Cloudflare, which processes visitor IP addresses to deliver the pages under Cloudflare’s privacy policy.
Who we share data with
We do not sell your data and do not share it for advertising. We share the minimum necessary with the service providers below, each acting on our behalf under its own privacy terms:
| Provider | What it receives | Why |
|---|---|---|
| Apple | Speech audio/text (on-device or Apple servers); purchase and billing data | Speech recognition; App Store payments |
| OpenAI (or Anthropic) | Dictation text + language, time zone, time, day-part hours, group names | Turn dictation into tasks |
| ElevenLabs | Alarm/briefing phrase text; custom wake-up sound description (Pro) | Generate the natural voice and sounds |
| Google Firebase | Anonymous ID, analytics events incl. purchase product/price, crash data, technical context | Analytics and crash reporting |
| RevenueCat | Anonymous ID, subscription status | Unlock Pro across reinstalls |
What we don’t do
- No sign-up: we never ask for your email or phone number.
- No advertising and no ad networks; we do not track you across other apps or websites.
- No selling or sharing of personal data for marketing.
- Your dictation audio never leaves Apple’s speech recognition.
- We never send the content of your tasks to analytics or crash tools.
Your rights and choices
Depending on where you live (for example under the EU/UK GDPR or the California CCPA/CPRA), you may have the right to access, correct or delete your data, to object to certain processing, and not to be discriminated against for exercising these rights. Because we do not hold your name or email, we identify your records by the anonymous ID associated with your installation. You can:
- Stop all collection by deleting the app; the app has no separate analytics switch.
- Delete your data: email us with the approximate date you installed the app and your device model, and we will delete the analytics, crash and subscription records associated with your anonymous ID.
- Manage or cancel your subscription in iOS Settings → your name → Subscriptions.
We do not “sell” or “share” personal information as those terms are defined under California law.
Data retention and deletion
Deleting the app deletes your tasks, settings and generated audio from your device. We keep no copy of your dictations. Analytics events, crash reports and subscription status are retained by Firebase and RevenueCat under their policies, keyed only to the anonymous ID. To have that data deleted, email us the request and we will remove it.
Children
TodoLot is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
If the app’s data practices change, this page will be updated and the effective date above will be revised.
Contact and controller
The data controller is Viktor Gorbatiuk, independent developer. Questions about privacy, or a data request: vibeprogerai@gmail.com