This list describes personal information involved in the current Jotdo List build. Read it together with the Privacy Policy. Developer: RogueFan. Effective date: 8 September 2026.
While signed out, the items below stay on-device by default. After sign-in, items not marked “on-device only” sync to our service.
1. Collection list
| Feature | Data | Purpose | How collected | Required? |
|---|---|---|---|---|
| Todos and lists | Titles, notes, subtasks, list names, categories, completion, due dates, reminder times | Capture, organize, and complete todos | Entered in the app | Required for core use |
| Focus and review | Intentions, focus / break duration, session records, mood check-ins | Timers, companion history, and review | Entered or generated while you use the feature | Required when you use the feature |
| Account and sync | Email, credential material; Apple user identifier and (if you share it) email when using Sign in with Apple | Identify the account, sync, dispatch quota, and membership | Submitted at sign-up / sign-in, or via Apple | Required only if you sign in; local use works without an account |
| Membership (App Store) | Transaction identifiers (e.g. originalTransactionId), plan, expiry, subscription status | Verify membership, restore purchases, prevent duplicate charges | Returned by Apple after payment; we keep fields needed to verify | Required to subscribe |
| Membership (website Android) | Order id, payment channel, settlement status, prepaid days | Verify prepaid duration | Returned by Alipay and our server after you confirm payment | Required for that purchase channel |
| Attachments | Photos or images you choose | Attach files to a todo | Picked from photos or camera after permission | Optional |
| Backup import / export | Todos and categories in a local JSON backup (private list bodies excluded) | Move on-device data between devices | Started by you in Settings | Optional |
| Private lists | Lists marked private and their todos | Protect lists under membership, view after verification, sync after sign-in | You enable private mode and enter content; verification stays on-device | Required when you use the feature |
| On-device verification | Result of biometrics / device passcode / app password | Access control before opening a private list | Verified on-device; raw biometric data is not uploaded | Required for private lists; on-device only |
| Tiny AI Supervisor tasks | Dispatch goals, task status after you confirm, written-back briefs | Run work on an authorized desktop and write back to the todo | Written and confirmed by you | Required when you use the feature |
| local runtime for the Tiny AI Supervisor | CLI credentials, allowed folders, raw tool logs | Run tools you authorize on that computer | Stored only on the executing device | On-device only; not collected by our servers |
| Referrals | Invite code and referral link | Grant dispatch quota rewards | You enter or share a code | Optional |
| Operations | IP address, time, necessary request logs | Secure the sync service and debug failures | Generated when calling cloud APIs | Required when you use sync |
2. System permissions
Permissions are requested only for the matching feature and only after you agree. Denying a permission does not block unrelated features.
| Permission | Purpose | Personal data? |
|---|---|---|
| Photos | Pick attachments; import or export backups | Only the files you select; we do not scan the whole library |
| Camera | Capture an attachment | Only while you take a photo; not used for face recognition |
| Save to photos | Save an attachment or backup to the library | Only when you choose to save |
| Notifications | Local reminders | Scheduled on-device; this does not upload extra personal data to us |
| Network | Sign-in, sync, updates, membership checks, and payment | See “Account and sync” and “Operations” above |
On some devices the system camera stack may also prompt for location, microphone, or motion. This app does not use those prompts for tracking, standalone recording, or motion collection.
3. Third parties
| Party | Data | Purpose | Where |
|---|---|---|---|
| Apple | Apple ID identifiers, payment and subscription credentials | Distribution, sign-in, In-App Purchase, auto-renewal | iOS / iPadOS / macOS |
| Alipay | Order and payment status; Alipay may also process device data under its rules | One-time Android purchases from our website | Mainland China Android website build |
| Account information you authorize, such as email | Third-party sign-in | International edition only; not in the China edition |
This version does not include an advertising SDK, analytics SDK, or IDFA. If a later version adds collection items or third parties, we will update this list and the Privacy Policy.
4. What we do not collect
- Contacts, SMS, or call logs;
- IDFA / GAID for advertising tracking;
- Precise location trails (location is not a product feature);
- Standalone microphone recordings or motion / health data outside the camera prompt;
- Bank card numbers or payment passwords.
For access or deletion requests, use the support page. Full detail is in the Privacy Policy.