Privacy Policy

Last updated: September 10, 2026

Todos (“the app”) is operated by Hasan Demir (“we”, “us”). The app helps households share shopping and to-do lists. This policy explains what we collect, why, and your choices.

Information we collect

• Account data — When you sign in with Apple or Google we receive your user ID, display name, email address (when provided), and profile photo URL (when provided).
• List content — Items, notes, tags, comments, assignees, and family membership you create are stored in Google Firebase Cloud Firestore.
• Device tokens — We store Firebase Cloud Messaging tokens so we can deliver push notifications about shared list changes. We do not use these tokens for advertising.
• Microphone / speech — Only when you use voice input. Audio is processed on-device by Apple or Google speech APIs and is not stored on our servers.
• Clipboard — If enabled in Settings, the app reads clipboard text only after you focus a text field, to suggest importing list items. Clipboard content is not uploaded.
• Local preferences — Settings such as reminder toggles are stored on your device (UserDefaults / SharedPreferences).

How we use information

• Authenticate you and sync lists with members of your family group.
• Send notifications about shared list activity (additions and reminders).
• Show assignee names and avatars inside your family group.
• Operate Home Screen widgets via an App Group on your device.

Sharing

Other members of your family group can see your display name, profile photo URL, and the items you add. We do not sell personal information and we do not use it for third-party advertising or cross-app tracking.

Third-party services

We use Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging) and, if you choose it, Google Sign-In. Apple processes Sign in with Apple and on-device speech recognition. Firebase: firebase.google.com/support/privacy. Google: policies.google.com/privacy. Apple: apple.com/legal/privacy.

Data is processed on Google Cloud infrastructure and may be located outside your country, including the United States.

Retention and deletion

You can delete your account in the app: Settings → Delete Account. This permanently removes your authentication account, profile, push tokens, and family membership. If you are the only member, that family’s lists are also deleted. If other members remain, shared lists stay.

Your choices

• Turn off clipboard suggestions in Settings.
• Decline microphone / speech; typing still works.
• Turn off notifications in system settings.
• Leave a family or delete your account at any time.

Children

The app is not directed at children under 13. We do not knowingly collect their personal information.

Contact

Questions about this policy: todos@qrserve.co
Support: todos.qrserve.co/support.html