Your account
Passwords are hashed, sign-up closes after the owner account, and you can add passkeys and two-factor authentication. Single sign-on with your own provider is optional.
About and trust
Made in the open, for people who want their task list to be theirs.
A task app holds the next few years of your plans, so it is fair to ask who is behind it and what happens if they stop. This page answers that as plainly as we can, and links to the files where you can check it yourself.
- First release
- 0.1.0, 11 October 2026
- Latest release
- 0.6.0, 16 October 2026
- Licence
- AGPL-3.0
Who makes it
OpenTodo is built and maintained by Raffaele Pizzari, with contributions from people who use it. Builds OpenTodo in the open: one container, your own server, every feature specified before it is built.
It started as a replacement for subscription task apps for one household and grew from there. It is not a company, has no investors and sells nothing. Work happens in public on GitHub: issues, pull requests, specifications and releases.
- Every release is listed on What's new with what changed; the first was 11 October 2026, the latest 0.6.0 on 16 October 2026
- Questions and bug reports go to the issue tracker; security reports go by email, see below
- The blog is written in the first person by the maintainer, dated and concrete
The licence, in plain words
AGPL-3.0: free to use, and it stays free
You can run OpenTodo for anything, study how it works, change it and share it. The one condition is that anyone who offers a changed version to other people over the network must publish their changes under the same licence.
For you, that means three things. Nobody can paywall a feature you rely on. If the maintainer stopped tomorrow, the code, the container images and the specifications would still be there for anyone to carry on. And the licence cannot be changed on the copy you already have.
What the licence does not do
It does not give anyone access to your server or your data. The licence is about the program's source code, not about what you keep in it. Your tasks are yours and leave with you as one file whenever you like.
Security
How your account and your data are protected
The security model is written down in the app's security policy, which also says how to report a vulnerability privately by email. The short version:
Your tasks
They live on your server and nowhere else. If you want, end-to-end encryption encrypts titles and notes on your devices, so not even the server can read them.
Nothing phones home
The app has no telemetry and makes no request to anyone but your server, unless you configure one: a backup destination, a webhook, or an AI provider with your own key.
Written down before it is built
Every feature has a specification you can read
Each feature starts as a written proposal with testable scenarios, and only then becomes code. The specifications describe how OpenTodo behaves today, and they are public. If the documentation and the app ever disagree, the specification settles it.
The demo
The public demo gives every visitor a private sandbox with sample data. Nobody else can see it, and it is deleted after two hours without activity and every night, so it is not a place to keep anything real. How the demo works
This website
What this site says, and what it collects
Everything here about the app describes OpenTodo v0.6.0, the latest release: the version, the documentation, the screenshots and the release notes come from that release's own files, never from memory. Every statement about what the app can do links to its documentation page, and a build check fails when one does not.
- Comparisons name where other apps are ahead and show the date they were last checked
- Nothing is published without the maintainer's review; drafts arrive as pull requests on the website's repository
- This website, and only this website, counts visits with self-hosted Umami: no cookies, no personal data, no third-party scripts. The app loads no analytics at all
- The words and images here are CC BY 4.0, the site's code is MIT
Leaving
You can go at any time, with everything
Every person on a server can download all their data as one file and import it on another OpenTodo server, or read it anywhere, since it is plain JSON. The server owner can take the whole data folder with them. Nothing keeps you here except that it works.
Your to-do list, on your own server.
Try the demo in your browser. When you like it, install OpenTodo on your server and import your tasks.