Privacy Policy

1. Introduction

Welcome to TodoLife. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Please read this Privacy Policy carefully. By using TodoLife, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

When you create an account or use our service, we may collect the following personal information:

• Name and email address
• Account credentials (username and encrypted password)
• Profile information (optional)
• Communication preferences

2.2 User Content

We collect and store the content you create, upload, or share through our service, including:

• Tasks, notes, and documents
• PDF files and annotations
• Images uploaded for background removal or OCR processing
• Timer and productivity data
• AI assistant conversation history

2.3 Usage Information

We automatically collect certain information about your device and how you interact with our service:

• Device information (type, operating system, browser type)
• IP address and general location data
• Usage patterns and feature interactions
• Log data (access times, pages viewed, errors encountered)
• Cookies and similar tracking technologies

2.4 Analytics Data

We use analytics tools to understand how users interact with our service. This helps us improve functionality and user experience. Analytics data is aggregated and anonymized whenever possible.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• To create and manage your account
• To provide, maintain, and improve our service
• To process and store your content
• To enable features like AI assistance, OCR, and background removal

3.2 Communication

• To send you service-related notifications and updates
• To respond to your inquiries and support requests
• To send you marketing communications (with your consent)

3.3 Security and Fraud Prevention

• To detect, prevent, and address technical issues
• To protect against fraud, abuse, and security threats
• To enforce our Terms of Service

3.4 Analytics and Improvement

• To analyze usage patterns and trends
• To develop new features and improve existing ones
• To personalize your experience

4. Data Storage and Security

4.1 Data Storage

Your data is stored securely using industry-standard cloud infrastructure. We use Supabase for database management and Firebase for authentication services. Your content is encrypted both in transit and at rest.

4.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Regular security audits and updates
• Access controls and authentication mechanisms
• Secure password hashing

4.3 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our service:

• Cloud hosting providers (Vercel, Supabase)
• Authentication services (Firebase)
• Analytics providers (anonymized data only)
• Email service providers

These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change and provide you with choices regarding your data.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

6.1 Access and Portability

You have the right to access your personal data and request a copy in a portable format.

6.2 Correction

You have the right to correct inaccurate or incomplete personal data.

6.3 Deletion

You have the right to request deletion of your personal data, subject to certain legal exceptions.

6.4 Objection and Restriction

You have the right to object to or restrict certain processing of your personal data.

6.5 Withdraw Consent

Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@todolife.com. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and collect usage data.

7.1 Types of Cookies We Use

• Essential Cookies: Required for the service to function properly
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use our service
• Authentication Cookies: Keep you logged in securely

7.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our service.

8. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 13, we will delete that information as quickly as possible.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at privacy@todolife.com.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

13. Data Processing for AI Features

When you use our AI-powered features (productivity assistant, image processing), your data is processed as follows:

• Image processing (background removal, OCR) is performed in your browser when possible
• AI assistant conversations may be processed by third-party AI providers
• We do not use your content to train AI models without your explicit consent
• Processed data is not retained longer than necessary to provide the service

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of the service after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: