Last updated 10 October 2026
Todo Pet ("the app", "we") is a to-do app with a virtual pet, published by Boson Chang, an individual developer. You can reach us at boson0710@gmail.com. This policy explains what data the app handles, why, who receives it, and your choices.
Without an account, everything stays on your device and nothing is sent to us. If you sign in, your data is stored with Google Firebase to sync across devices and to power optional groups. We do not sell your data, show ads, use analytics or advertising SDKs, or track you across other apps or websites.
Your pet, tasks, coins and settings are stored only on your device. Nothing is sent to us. Deleting the app deletes this data.
Signing in with Apple or Google lets you sync across your devices. We then store:
This data is stored with Google Firebase (Authentication and Firestore) and used only to run sync, groups and the features described below.
Groups are optional. If you create or join a group, the group name, messages, shared tasks, your display name and a small thumbnail of your photo are stored in Firestore and are visible to every member of that group. Anyone with the invite code can join, so do not post anything you would not want other members to see. Members may copy or screenshot content, and we cannot control that.
You can report a message or block a member from the chat. A report sends the message text, the reported user's ID and your user ID to us for review. Reports are kept for as long as needed to enforce our rules and meet legal obligations. Blocking is saved with your account so it applies on all your devices. We may remove content or accounts that break the chat rules.
If you allow notifications, reminders are scheduled locally on your device. When you are signed in, we also store a device push token (Firebase Cloud Messaging / Apple Push Notification service), tied to a Firebase installation ID that Firebase creates for your device, so we can notify you when a shared task is completed. You can turn notifications off in iOS Settings.
Optional paid plans are bought through Apple's In-App Purchase. Apple processes the payment and manages billing and cancellation; we do not receive your card or payment details. The app reads your purchase status from Apple to unlock the features you bought. Manage or cancel in your Apple ID subscription settings.
We use the data above only to provide the app: account sign-in, sync, groups, chat, shared tasks, notifications, subscriptions, safety and moderation, and support. Where the GDPR or UK GDPR applies, our legal bases are performing our contract with you (providing the app), our legitimate interests (security, preventing abuse, moderation), legal obligations, and your consent where you grant it (for example, notifications and photos).
We do not sell or share your personal data for advertising. Because Google's servers can be located outside your country, including the United States, your data may be transferred internationally; Google relies on safeguards such as standard contractual clauses for these transfers.
We keep your account data while your account exists. When you delete your account we delete your account, synced data, profile photo, blocked list and push token. Messages and completed tasks you posted in a group stay in that group with your display name so its history remains readable. Backups and logs held by our providers are removed on their normal schedules.
In the app, open the account screen and choose Delete account. This permanently deletes your account and synced data from our servers and revokes the Sign in with Apple token. Data on your device stays until you delete the app. You can also email us to request deletion.
Depending on where you live (for example the EEA, UK, California and other US states), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to your data protection authority. We do not sell or share personal data as defined by the California privacy laws and do not use it for automated decisions with legal effects. Most of this you can do in the app; for anything else, email us and we will respond within 30 days.
Data is sent over encrypted connections and stored with Google Firebase, which applies access rules so you can reach only your own account and the groups you belong to. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affecting you occurs we will notify you as the law requires.
Todo Pet is not directed to children under 13 (or under 16 where local law sets a higher age for consent), and accounts and groups are not intended for them. We do not knowingly collect personal information from children below that age. If you believe a child has given us data, email us and we will delete it.
We may update this policy as the app changes. The date at the top shows the latest version; for material changes we will also notify you in the app.
Questions, requests or complaints: support or boson0710@gmail.com.
← Todo Pet