This Privacy Policy applies to the Jotdo List app by RogueFan (iOS / iPadOS / Android / macOS / Windows / Linux) and the website www.shanjushouji.com. Effective date: 8 September 2026.
Related: Personal Information Collected · Terms of Use · Support
1. Who we are
Developer: RogueFan. Product: Jotdo List (engineering name Lofi Valley). Contact us at jotdolist@gmail.com or via the support page.
The Mainland China edition syncs through our own service. The international edition, if you use it, uses a separate node with a separate user pool.
2. How the product handles data
If you are signed out, todos, focus records, and preferences stay on the current device. No account is required.
After you sign in (membership is not required), data syncs across your devices so lists, categories, preferences, and task briefs stay consistent.
We follow data minimisation. We do not collect data for advertising profiles unrelated to the product, and we do not sell personal information.
3. Information we may process
- Content you create: todo titles and notes, list names, subtasks, focus intentions, focus and break records, mood check-ins, and similar items needed for core features.
- Account information (only if you sign in): email address and credential material used to sign in. We use email to identify the product account for sync, dispatch quota, and membership. The China edition supports email and Sign in with Apple; the international edition may also offer Google sign-in.
- Purchase information: Apple processes App Store payments. We store transaction identifiers needed to verify entitlements (for example originalTransactionId), not card numbers. One-time Android purchases from our website currently go through Alipay; we store order and settlement status, not card numbers.
- Attachments (optional): if you attach photos or import / export backups, the app accesses photos, camera, or files after you grant permission. The system camera stack may show location, microphone, or motion permission prompts; this app does not use them for tracking, standalone recording, or motion profiling.
- Private lists (membership): on-device verification (biometrics / device passcode / app password) plus transport encryption. Private content is excluded from local JSON export, review, widgets, and notification previews. This version does not add extra application-layer encryption of list bodies at rest.
- Tiny AI Supervisor tasks: dispatch goals and briefs sync with the todo. CLI credentials, allowed folders, and raw tool logs stay on the executing computer and are not uploaded or run on phones or tablets.
- Referrals (optional): if you register with an invite code, we record the relationship to grant dispatch quota.
- Operational logs: the sync service may record IP address, time, and necessary request logs for security and debugging, not for ads.
This version does not include an advertising SDK, does not use IDFA, and does not collect data for cross-app tracking. If we later add rewarded or splash ads, we will update this policy and the collection list first.
4. How we use information
- Provide todos, focus timers, review, settings, and sync;
- Provide dispatch, quota accounting, and briefs;
- Verify membership, restore purchases, or confirm prepaid duration;
- Export, import, or help delete data at your request, and handle support;
- Meet legal obligations.
5. Sharing and third parties
- Apple: distribution, Sign in with Apple, In-App Purchase, and auto-renewal follow Apple’s rules.
- Alipay: Android prepaid purchases from our website are processed by Alipay, which may collect device and payment data under its own policy.
- Google (international edition only): if you choose Google sign-in, Google processes the relevant account data under its policy.
- Sync service: operated by us; this is not a sale of data to unrelated parties.
We do not share personal data with other third parties except as required by law or as needed to provide the features above. We do not use automated decision-making that produces legal or similarly significant effects.
6. Storage and retention
Cloud data for the China edition is stored on our service operated in Mainland China. The international edition uses a separate node and user pool.
On-device data is removed when you uninstall or clear backups in Settings. Synced cloud data is deleted within a reasonable period after you request account deletion or deletion of all cloud data, unless a longer period is required by law. Transaction records may be kept longer for accounting and fraud prevention.
See Delete Account for the in-app path (Settings → Account → Delete Account) and the email request process.
You can export and import a local JSON backup in Settings. Private list content is not included in that export.
7. Your rights
Where applicable law allows, you may access, copy, correct, complete, or delete your personal information, and limit or refuse non-essential processing. You can edit todos and profile data in the app, or contact us via the support page (including to close the product account and delete cloud data). We will verify your identity and respond within a reasonable time, unless the law provides otherwise.
8. Security
We use transport encryption, access control, and least privilege on the sync service. Private lists currently use on-device verification plus transport encryption. No system is perfectly secure; please also protect your device and password.
9. Children
The product is not directed at children under 13, or under 14 in Mainland China, and we do not knowingly collect their personal information. If we learn that we have collected a child’s information by mistake, we will delete it. Parents or guardians can contact us via the support page.
10. Updates
If how we process data changes in a material way (for example adding an ads SDK or a new sign-in or payment channel), we will update this page and the collection list and notice you in the app or on the website. Continued use means you understand the updated policy.