Privacy Policy

Last updated: October 17, 2026

1. Introduction

Welcome to TodoCat (“we,” “our,” or “us”). We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website at https://to-do-cat.vercel.app and use the TodoCat mobile application.

2. Information We Collect

We collect information directly from you and automatically through your use of TodoCat:

  • Account Information: When you register via email and password, we collect your email address, password hash, and optional display name.
  • Google Authentication Data: If you choose to continue with Google, we receive your name, email address, Google profile ID, and avatar URL as authorized via OAuth consent.
  • Task Data: We store the tasks, titles, descriptions, due dates, priority levels, categories, and completion states you create.
  • Technical Information: Standard server logs, device identifiers, and session tokens necessary to authenticate requests and secure your account.

3. How We Use Your Information

We use your information exclusively to provide and improve TodoCat:

  • To authenticate your identity and maintain active sessions.
  • To store, update, and synchronize your tasks in real time across the web and mobile app.
  • To secure our services against unauthorized access, abuse, and fraudulent activity.
  • To communicate important updates regarding your account or service changes.

We do not sell, rent, or trade your personal data to advertisers or third parties.

4. Google API Services User Data Policy

TodoCat's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Storage and Security

Your data is stored in secured cloud databases with industry-standard encryption in transit (HTTPS/TLS) and at rest. Passwords are cryptographically hashed using salted bcrypt before storage. Access tokens are short-lived JWTs.

6. Your Rights and Data Deletion

You have full control over your data. You may edit or delete individual tasks at any time directly through the app or dashboard. If you wish to delete your entire account and all associated data, you can request full deletion by contacting us at nandakishorep212@gmail.com. All data will be permanently wiped upon verification.

7. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by updating the “Last updated” date at the top of this page.

8. Contact Us

If you have questions or concerns about this Privacy Policy, please contact the developer: