Privacy Policy — Smart Todo

Last updated: 13 September 2026

Smart Todo ("the app") is a collaborative task list. This policy explains what the app collects, why, and what control you have. Contact: freelancejagraj@gmail.com.

What we collect

Account information — when you sign in with Google we receive and store your name, email address, profile photo URL, and a Google account identifier. Your email is stored so other people can invite you to a shared board by email, and so an invite sent before your first sign-in can be matched to you.

Your content — task text, due dates, reminder times, completion status, board and list names, and the permissions you grant to people you invite.

Nothing else. The app does not collect or access your location, contacts, photos, files, calendar, microphone, camera, call logs, SMS, installed apps, or device identifiers for advertising. There is no advertising SDK, no analytics SDK, and no third-party tracker in the app.

How it is used

Only to make the app work: to sign you in, to store your tasks, to sync a board between the people who share it, and to show reminders you set.

We do not sell or rent your data. We do not use it for advertising or profiling. We do not use it to train machine learning models.

Who can see your data

• People you share a board with. Anyone you invite to a board can see that board's tasks and the names and email addresses of its other members, and can add, edit, or complete tasks according to the permissions you gave them. Removing a member revokes their access.
• Google (Firebase). The app uses Firebase Authentication and Cloud Firestore, operated by Google, to authenticate you and store data. Google acts as our processor. See Google's privacy policy at https://firebase.google.com/support/privacy.

No other third party receives your data.

Where it is stored and how it is protected

Data is held in Google Cloud Firestore. Traffic between the app and Firestore is encrypted in transit (TLS/HTTPS), and Google encrypts data at rest with AES-256. Access is restricted by Firestore security rules so that a board — including its name, lists and tasks — can only be read or written by its owner and the members invited to it.

Your content (board names, list names, task text, due dates and similar fields) is stored in a readable form on our servers — it is not end-to-end encrypted. This means the people you share a board with, and Smart Todo as the service operator, can read that board's contents in order to provide the collaborative features (sharing, invites, reminders and sync). We only ever access it to operate and support the app, never for advertising, profiling, or model training.

Reminders are scheduled and displayed locally on your device.

Retention and deletion

• Deleting a task or board removes it for everyone on that board.
• You can delete your account and all associated data from the app: Profile → Delete account. This removes your profile, the boards you own (including their tasks and member records), and your Google sign-in link. See the account deletion page for full details.
• To request deletion without using the app, email freelancejagraj@gmail.com from the address you signed up with and we will delete your data within 30 days.
• Content you added to a board owned by someone else stays on that board when you delete your account, because it belongs to that shared board. Ask the board owner to remove it if you want it gone.

Children

The app is not directed to children under 13 and we do not knowingly collect data from them.

Permissions the app requests

The app does not request location, contacts, storage, camera, or microphone.

Changes

If this policy changes we will update this page and the "last updated" date. Material changes will be announced in the app.