Your tasks stay on your server.

The Android app

• Where your data goes: only to the OpenTodo server whose address you enter when you first open the app. That server is run by you or by your organisation, not by the developer.
• Collected by the developer: nothing. The app contains no analytics, no crash reporting, no advertising and no third-party SDKs.
• Stored on the phone: the server address; the next seven days of reminders (their titles only when you allow it and your account is not end-to-end encrypted); what the Today widget last showed; and, if you turn on fingerprint unlock, your account key, encrypted with a key in the phone's secure hardware that needs your fingerprint or face for every use. All of it is in the app's private storage, excluded from Android backup and device transfer.
• In transit: https. Plain http is accepted only for addresses on the phone or your local network, after a warning.
• Permissions: network access to reach your server, notifications and exact alarms for reminders, starting after a restart to set reminders again, and biometrics for the optional fingerprint unlock.
• Deleting your data: signing out, "Change server" or uninstalling removes everything the app stored on the phone. Your tasks and account live on your server, where you or its owner can delete them.

The server software

The OpenTodo server stores your account and tasks in its own database on the machine you run it on. It sends no telemetry. It connects only to services that you or the server's owner configure, such as an email server, a backup destination, an AI provider you choose, or calendar feeds, and, while maps are turned on, to an OpenStreetMap-based map provider through the server's own proxy, without account data. Whoever runs a server is responsible for the data on it.

The public demo

The demo at demo.open-todo.app gives each visitor a private, short-lived sandbox with sample tasks. It needs no sign-up. A session cookie keeps you in your sandbox, and sandboxes are deleted every night. Please don't enter personal information there.

This website

open-todo.app counts page views with a self-hosted instance of Umami. It sets no cookies and stores no personal data or IP addresses, and the counts never leave the developer's own server. The site loads no other third-party scripts.

Changes and contact

When this policy changes, the date above changes with it, and the history is public in the website's repository. For questions, open an issue on the app's issue tracker or write to the email address on the app's store listing.