Todo Lock Privacy Policy

Your tasks, plans, routines, tags, lock profiles and finished sessions are held in a database inside the app's own storage on your device. Your settings sit alongside them. A small summary of today — block titles and times — is shared with the app's own widgets and Lock Screen extensions, which is how they draw your day; that summary never leaves the phone either.

The app records when a screen is opened — the steps of the introduction, the paywall being shown or closed, a subscription starting, and the app being opened and closed. Each record is the name of the screen and the time, nothing more.

It is tied to a random identifier generated on your device the first time the app runs. That identifier is not your Apple Account, not your device's id, and not an advertising id; it cannot be connected to you, and deleting the app discards it for good.

No task title, no note, no plan and no locked-app token is ever included, and the data is never sold, shared or used for advertising. It goes to a private dashboard nobody else can read.

There is no switch for it because there is nothing personal in it to switch off. If you would rather it did not happen at all, the app works exactly the same with no network connection.

When you pick apps to shield, iOS hands Todo Lock a sealed token instead of a name. We can't read which app it is, what its icon looks like, or how long you spend in it. That's how Apple's Screen Time framework is designed, and it applies to this app like every other.

The Screen Time reading shown during the introduction is rendered by iOS itself, in a separate process, from your own usage figures. Todo Lock never sees the underlying numbers.

If you switch the calendar on, Todo Lock reads events from the calendars you tick, for the day you're looking at, and draws them on your timeline. It is read-only: no event is ever created, changed or deleted. Nothing read from your calendar is stored by the app, and nothing is transmitted. Turning the switch off, or removing calendar access in the Settings app, stops it immediately.

Reminders are scheduled on the device by iOS. There are no push notifications, which means there is no server holding a token for your phone.

Todo Lock Pro is sold through the App Store. Apple handles the payment and tells the app only whether a subscription is active. Your name, your card and your Apple Account details are never seen by this app. Apple's own privacy policy covers that part of the transaction.

The subscription itself is managed for us by RevenueCat, a company that does this for many apps. What reaches them is which plan was bought, when it renews or lapses, and the country your App Store account is in. It is tied to a random identifier their software makes on your device — not your Apple Account, not your email, and not an advertising id. It is what lets the app know your subscription is live, including on a second device or after you reinstall.

None of your tasks, plans, notes or locked apps are sent to them, and none of it is used for advertising. RevenueCat acts only on our instructions and does not sell it. If you never subscribe, nothing about purchases is sent anywhere.

Settings → Data → Delete everything removes every task, profile and session from the device. Deleting the app removes all of it, including your settings. There is no copy anywhere else to ask us about.

Todo Lock is a self-managed focus tool for the person holding the phone. It is not a parental-control app: it does not monitor anyone, report to anyone, or lock anybody's phone but its owner's.

No personal information is collected from anyone, of any age. The anonymous screen counts and the subscription record described above are the only things the app sends, neither contains anything that identifies a person, and neither is used to build a profile or to advertise to anybody.

If this policy changes, the new text ships in an app update and the date above changes with it. There is no way for it to change under you between updates.

Questions about any of this: