Privacy Policy

We (the operator) establish this Privacy Policy (the “Policy”) to properly handle information, including personal information, in providing the ToDo service (the “Service”).

1. Information we collect

To provide and improve the Service, we may collect the following information from users (the types of information may vary depending on features and usage).

  • Account information (e.g., display name, email address, identifiers required for authentication)
  • Profile / group-related information (e.g., group name, participation status)
  • User content (e.g., tasks, notes, comments, attachments)
  • Device and log information (e.g., device details, OS/browser, IP address, access time, crash information)
  • Usage information (e.g., page views, operation history, event logs, statistics)

2. Purposes of use

We use the collected information for the following purposes:

  • To provide and operate the Service, verify identity, and authenticate users
  • To provide user support and respond to inquiries
  • To prevent misuse and ensure security
  • To improve the Service, develop new features, and enhance quality
  • To analyze usage and create statistical data
  • To notify users of important information such as changes to terms or policies

3. Providing information to third parties

We do not provide users’ personal information to third parties except in the following cases:

  • With the user’s consent
  • When required by laws and regulations
  • When necessary to protect a person’s life, body, or property and consent is difficult to obtain
  • When particularly necessary to improve public health or promote the sound growth of children and consent is difficult to obtain
  • When cooperation with national or local authorities is required and obtaining consent may impede the execution of their duties

4. Use of external services (analytics / infrastructure)

We may use external services for providing, operating, and analyzing the Service. Depending on the external service provider, device information, log information, and event information may be collected.

  • Firebase / Firebase Analytics (usage analysis, etc.)
  • Supabase (data storage, authentication, APIs, etc.)
  • Cloudflare (hosting, delivery, security, etc.)

5. Security measures

We strive to take reasonable and appropriate security measures to prevent leakage, loss, or damage of the collected information.

6. Retention period

We retain information only for as long as necessary to fulfill the purposes of use, or as required by applicable laws and regulations.

7. Disclosure, correction, deletion, etc.

Users may request disclosure, correction, addition, deletion, or suspension of use of information we hold about them, by contacting us in the manner separately specified by the operator.

8. Changes to this Policy

We may change this Policy as necessary. The revised Policy becomes effective when displayed on the Service.

9. Contact

For inquiries regarding this Policy, please contact us using the method separately specified by the operator.