Privacy Policy

Last updated: 23 October 2026

To Do is a to-do list app made in the United Kingdom. This policy explains what happens to your information.

To Do is run by C. Jebsen, a sole trader in the United Kingdom, who is responsible for the small amount of personal information described below (the “data controller”). You can reach us at hello@thetodo.app.

Your to-dos stay yours

Your lists, to-dos, notes and settings are stored on your devices and in your own iCloud account, using Apple’s iCloud. We can’t see them, and they are never sold or shared.

Shared lists

When you share a list, the people you invite can see and change that list. They see the first name and colour you choose in To Do, and Apple’s invitation shows the name of your Apple Account. So that people in the list can remind you, the app also keeps your device’s notification address (a code Apple uses to deliver notifications) in the shared list. The list is stored in your iCloud and shared through Apple’s iCloud sharing. You can stop sharing, remove someone, or leave a list at any time; when you leave, your name and notification address are removed from the list.

Reminders to other people

When you use Remind on a shared list — or when the app tells someone you’ve ticked off a to-do they reminded you about — the message (the to-do’s words, for example “Buy oat milk”, or “Ben ticked off Buy oat milk”) and the other person’s device address (a code Apple uses to deliver notifications) are sent through a small service we run, only so that Apple can show the notification on their device. They are passed on straight away and not stored or logged. Cloudflare, which runs this service for us, briefly handles your device’s internet (IP) address to pass the message on, as any internet service does. Reminders set for a later time, or repeated until a to-do is done, travel with the shared list in iCloud instead. To prevent misuse, the service counts how many reminders a device receives in an hour; that count is deleted within two hours.

Your calendar

If you switch on Calendar in TODAY, To Do reads today’s events from the calendars you choose, only on your device, to show them in TODAY. It never changes your calendar, and your events never leave your device. You can switch it off at any time in To Do’s Settings, or in your device’s privacy settings.

If you write to us

When you use “Report a problem” in the app, or email us, we receive your email address, your message and the app and device details the app adds at the bottom (for example “To Do 1.1 (30) · iPhone · iOS 27”). We use them only to answer you, and delete them once your question is answered, at the latest after 12 months.

Crash reports

If you’ve chosen in your iPhone or Mac settings to share analytics with app developers, Apple may send us crash reports to help fix problems. They don’t contain your lists or to-dos.

No tracking, no ads, no analytics

To Do does not track you, does not show ads, and does not use analytics or third-party tools.

Notifications

Reminders are scheduled on your device. If you allow notifications, they appear on that device.

This website

This website doesn’t use cookies, analytics or any tracking, and loads nothing from other companies. Cloudflare, which hosts it, handles your internet (IP) address to deliver the pages to you, as any website does.

Why we handle this information

Delivering a reminder you send is part of providing the feature you asked for. For the person receiving it, it’s in their legitimate interest: they joined the list and expect reminders from it. Counting reminders to prevent misuse, and answering your emails, are in our legitimate interest of keeping To Do safe and helping you.

Who helps us

Apple (iCloud, notifications and the App Store), Cloudflare (which runs the reminder service, hosts this website and forwards your emails) and Google (whose Gmail receives them) handle this information on our behalf, under their own data protection terms. They may process it outside the UK, including in the United States; such transfers are protected by the UK–US data bridge or by contract terms approved in the UK.

Your rights

You can ask us what information we hold about you, and ask us to correct or delete it, to stop or limit using it, or to send it to you. Because To Do has no accounts and keeps your lists in your own iCloud, we usually hold nothing about you at all, apart from any emails you’ve sent us. Write to hello@thetodo.app and we’ll answer within one month.

Complaints

If you’re unhappy with how we’ve handled your information, please tell us first. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.

Deleting your data

Delete a to-do, a list or the app at any time. To remove everything from iCloud, go to Settings › [your name] › iCloud › Manage Account Storage › To Do › Delete Data.

Children

To Do is suitable for everyone and doesn’t knowingly collect information from anyone.

Changes to this policy

If this policy changes, we’ll update it here and change the date at the top. Bigger changes will also be mentioned in the app’s “What’s New”.