Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Task Data: Tasks, notes, due dates, priorities, and categories you create
• AI Prompts: Meal preferences, workout goals, and natural language inputs
• Account Information: Apple ID (for iCloud sync) and subscription status
• Optional API Key: Your personal OpenAI API key if you choose to use your own

1.2 Information Collected Automatically

• Usage Analytics: Anonymous app usage statistics (features used, session duration)
• Device Information: iOS version, device type, app version
• Crash Reports: Technical information when the app encounters errors
• Subscription Data: Purchase history and subscription status via StoreKit

1.3 Information We Do NOT Collect

• Location data
• Contact lists
• Photos or media (unless explicitly added to tasks)
• Health data
• Browsing history

2. How We Use Your Information

3. AI and Third-Party Services

3.1 OpenAI Integration

When you use AI features (meal planning, workout generation, natural language processing):

• Your prompts are sent to OpenAI's API for processing
• OpenAI processes requests according to their privacy policy
• We do not store your prompts after receiving the AI response
• Personal information is minimized before sending to OpenAI
• You can use your own OpenAI API key for complete control

3.2 iCloud Sync

If you enable iCloud sync:

• Data is encrypted in transit and at rest by Apple
• Syncs across your devices signed into the same Apple ID
• Family shared folders sync to invited members only
• You can disable sync at any time in Settings

3.3 StoreKit (Subscriptions)

• Subscription purchases are processed by Apple
• We receive only transaction receipts and subscription status
• Payment information is never accessible to us

4. Data Sharing and Disclosure

4.1 We DO NOT:

• Sell your personal information
• Share your data with advertisers
• Use your data for marketing without consent
• Access your task content unless you explicitly share it for support

4.2 We MAY Share Data:

• With your consent: When you explicitly request or approve
• Family Sharing: Shared folders with invited family members
• Legal requirements: If required by law or valid legal process
• Service providers: OpenAI for AI processing (anonymized)
• Business transfers: In case of merger or acquisition (with notice)

5. Data Security

We implement industry-standard security measures:

• Encryption: All network communications use TLS/SSL
• Local Storage: iOS Keychain for sensitive data
• API Keys: Encrypted storage and transmission
• Access Control: Authentication required for data access
• Regular Updates: Security patches and vulnerability fixes

6. Your Privacy Rights

You have the right to:

• Access: Export your data at any time
• Correction: Update or correct your information
• Deletion: Delete your account and associated data
• Portability: Export data in standard formats
• Opt-out: Disable analytics and AI features
• Restrict Processing: Limit how we use your data

How to Exercise Your Rights:

• In-App: Settings > Privacy > Manage Data
• Export: Settings > Backup > Export All Data
• Delete: Settings > Account > Delete All Data
• Contact: support@aitodoplus.app

7. Subscription and Payment Privacy

Our subscription tiers and data handling:

30-Day Free Trial: No payment information collected until trial ends. Cancel anytime without charges.

8. Children's Privacy

AI Todo Plus is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

9. International Data Transfers

Your data may be processed in:

• Your Region: Local device storage
• Apple's Servers: Based on your iCloud region
• OpenAI Servers: United States (for AI features)

We ensure appropriate safeguards for international transfers.

10. California Privacy Rights (CCPA)

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale (we don't sell data)
• Right to non-discrimination for exercising rights

11. European Privacy Rights (GDPR)

For EU/EEA residents:

• Legal Basis: Consent and legitimate interests
• Data Controller: AI Todo Plus
• Data Retention: Until account deletion or as required by law
• Right to Lodge Complaint: With your local supervisory authority

12. Data Retention

13. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or for legal reasons. We will notify you of significant changes through:

• In-app notifications
• Email (if provided)
• Update notice on next app launch

Continued use after changes constitutes acceptance.

14. Contact Us

For privacy-related questions or concerns:

• Email: support@aitodoplus.app
• Website: https://harveybl.github.io/aitodo-legal/

Data Protection Officer:
AI Todo Plus Privacy Team
support@aitodoplus.app

This privacy policy is effective as of August 13, 2025 and supersedes all previous versions.