Privacy policy
for Todofy.

Effective date: September 16, 2026
Last updated: September 16, 2026

Summary

Todofy is a local-first application. When you use Todofy without an account, your tasks and other app content remain on your device. Todofy does not include analytics, advertising trackers, behavioural telemetry, or crash reporting.

Cloud Sync is optional and available through Todofy Pro. When you enable it, Todofy sends only the account and content data described below so it can be synchronized across your signed-in devices.

1. Who is responsible

UnifyBrowse Studio, operated by Salar Zeidanlou (“we”, “us”, or “our”), is responsible for the processing described in this policy.

For privacy questions or requests, use the UnifyBrowse contact form.

2. What this policy covers

This policy covers:

• the official Todofy desktop application for Linux, macOS, and Windows;
• Todofy accounts and Todofy Pro Cloud Sync;
• optional Google sign-in and Google Calendar integrations; and
• Todofy subscription and license management.

The general UnifyBrowse Privacy Policy also applies to the UnifyBrowse website and shared account, billing, and support systems.

This policy does not cover a copy of Todofy that you build yourself and connect to infrastructure you control. In that situation, the operator of that infrastructure is responsible for its data processing, and your synced content is not sent to the official Todofy Cloud Sync service.

3. Data stored locally

When you use Todofy without an account, we do not receive your tasks or other app content.

Todofy stores the following locally:

• tasks, subtasks, labels, journal entries, local calendar events, focus history, reminders, and settings in a SQLite database;
• your Todofy sign-in session, if you sign in, in your operating system’s secure credential store; and
• Google Calendar authorization tokens, if you connect Google Calendar, in your operating system’s secure credential store.

Standalone local calendar events are not included in Cloud Sync and are not pushed to Google Calendar.

4. Account data

If you create a Todofy account, we process:

• your email address;
• authentication records needed to sign you in and keep your account secure; and
• if you use Continue with Google, your Google account identifier and email address through the openid and email scopes.

Passwords are handled by our authentication provider and are not stored by us in readable form.

5. Cloud Sync data

If you enable Todofy Pro Cloud Sync, we store the content you choose to synchronize, including:

• Tasks: title, notes, due date, reminder time, completion status, priority, subtasks, estimate, recurrence, and ordering.
• Labels: name and colour.
• Journal entries: title, body, mood, and date.
• Focus sessions: start time, end time, and duration.
• Deletion markers: the type and identifier of a deleted item, allowing another signed-in device to apply the same deletion.

Deletion markers do not contain task or journal text.

We do not use your content for advertising, profiling, or training machine-learning models. We process it only to provide, maintain, secure, and troubleshoot the features you choose to use.

Sensitive journal content: Journal entries are stored exactly as you write them. If you do not want sensitive information, such as health information, hosted through Cloud Sync, do not include it in a synced journal entry or use Todofy without an account.

6. Technical and security data

Our infrastructure providers may create limited server logs containing information such as:

• IP address;
• request timestamp;
• request path;
• response status; and
• diagnostic and security information.

We use these records to operate, secure, and debug the service. Billing endpoints may also use short-lived rate-limiting records to prevent abuse.

Todofy does not include behavioural analytics, advertising identifiers, or cross-app tracking.

7. Billing data

Payments are processed by Lemon Squeezy, which acts as Merchant of Record.

Lemon Squeezy may collect your:

• name;
• billing address;
• country;
• tax information; and
• payment details.

We do not receive or store your full card details.

We store the subscription information required to provide Todofy Pro:

• the connection between your Todofy account and the relevant Lemon Squeezy customer, order, subscription, and license records;
• your selected plan and entitlement status;
• the dates through which your subscription remains valid;
• a one-way fingerprint of your license key, used to prevent the same key from being claimed by multiple accounts; and
• status and timestamp records needed to verify access, process cancellation, prevent abuse, and resolve billing problems.

8. Google sign-in and Google Calendar

Google sign-in is optional. When you choose it, Google provides the account identifier and email address required to authenticate you.

Google Calendar integration is also optional and works directly between Todofy on your device and Google:

• Todofy requests the narrow calendar.app.created permission.
• This allows Todofy to manage only the dedicated calendar created by Todofy.
• Todofy cannot read, edit, or view your other calendars or their events.
• Google authorization tokens remain in your operating system’s secure credential store and are not sent to our servers.
• Synchronization is one-way: Todofy writes the title and date or time of eligible dated tasks to the dedicated Todofy calendar.
• Google Calendar content is not imported into Todofy.

Todofy’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect Google Calendar from Todofy settings and revoke access through your Google account permissions.

9. Why we process data

Where UK or EU data-protection law applies, we rely on the following legal bases:

Where another law applies, we rely on the corresponding lawful basis available under that law.

10. Service providers

We do not sell personal data and do not share it for advertising.

We use a limited number of service providers:

These providers may process data in countries other than your own. Where required, international transfers are governed by applicable contractual and legal safeguards.

We may also disclose information when required by law or when reasonably necessary to protect users, defend legal claims, or protect the service.

11. Data retention

• Local app data: Until you remove it from Todofy or delete the application’s data directory.
• Synced content: Until you delete the content or your account.
• Deletion markers: Normally retained for up to 30 days so your signed-in devices can receive deletions.
• Account data: Until you delete your account, except for limited records we must retain by law or for security and dispute resolution.
• Billing records: For the period required by applicable tax, accounting, fraud-prevention, and consumer-protection laws.
• Infrastructure logs: For the limited period configured by the relevant provider and only as needed for security, reliability, and debugging.

12. Your choices and rights

Depending on where you live, you may have the right to:

• access your personal data;
• correct inaccurate data;
• request deletion;
• restrict or object to processing;
• receive a portable copy of your data; and
• withdraw consent where processing is based on consent.

You can delete your account from Settings → Account → Delete account.

Todofy first attempts to cancel any linked recurring subscription and then permanently deletes the account and its cloud data. You may also choose to remove the local copy from that device.

If subscription cancellation cannot be confirmed, account deletion pauses so an active subscription is not left without an account from which it can be managed.

For another privacy request, use the UnifyBrowse contact form. We may need to verify your identity before completing a request.

You may also complain to the data-protection authority responsible for your location.

13. Security

Synced content is protected by database row-level security so authenticated users can access only their own records.

Data is encrypted in transit using TLS and is encrypted at rest by our infrastructure providers. Administrative credentials remain on trusted server infrastructure and are not included in the desktop application.

Todofy stores session and Google authorization tokens in your operating system’s secure credential store.

No system can be guaranteed perfectly secure. If a personal-data breach requires notification under applicable law, we will notify affected users and the relevant authorities as required.

14. Children

Todofy is not directed to children under 16, and we do not knowingly collect their personal data through Todofy accounts.

If you believe a child has created an account, contact us so we can investigate and delete it where appropriate.

15. Changes to this policy

We may update this policy when Todofy’s features, providers, or legal obligations change.

We will update the revision date and, when a change is material, provide notice in the application, on the website, or by email where required.

16. Contact

UnifyBrowse Studio
Operated by Salar Zeidanlou
Contact UnifyBrowse