Privacy policy

This policy explains what information Todoie collects, how we use it, and the choices you have. Todoie is operated by PHYCON SIA, Gramzdas iela 21 – 7, Rīga, LV-1029, Latvia. If you have any questions, contact us at info@phycon.com.

What we collect

When you create an account, we store:

• Your name and email address.
• A securely hashed copy of your password (we never store it in readable form).
• Your preferred language.

As you use Todoie, we also store:

• The tasks you create, including their title, optional description, priority, date and completion status.
• Your coin balance and the items you have placed in your house.
• Your profile setting (public or private) and your list of friends.

How we use it

We use your information only to operate the app: to let you sign in, to keep track of your tasks and rewards, to render your house, and to let your friends see your profile if you have chosen to be public. We do not sell your data, we do not run advertising, and we do not use third-party analytics or tracking inside the app.

What other people can see

Your tasks are private. Only you can see them. Your profile and your house are private by default. If you mark your profile as public, the people you have added as friends can view your profile and your house. You can change this back to private at any time from your account settings.

How we store and protect your data

Your data is stored on servers we operate in the European Union. Passwords are stored as one-way hashes. The login token used by the mobile app is stored on your device in the platform's encrypted keychain (iOS Keychain or Android Keystore). Connections between the app and our servers are encrypted in transit.

Third parties

Todoie does not include third-party advertising or analytics SDKs. We use a transactional email provider to send account-related emails (for example, password resets). That provider processes your email address only for the purpose of delivering the message.

Your rights

You can review and change your name, email, language and profile visibility from inside the app. You can delete your account at any time from the app's settings. When you delete your account, your tasks, your friend connections and your house items are removed. We may keep a minimal record of the account for a short period for security and abuse-prevention purposes before it is permanently erased. Under the GDPR you also have the right to ask us for a copy of your data and to lodge a complaint with the Data State Inspectorate of Latvia.

Children

Todoie is not directed at children under 13. If you believe a child has created an account, please contact us at info@phycon.com and we will remove it.

Changes to this policy

If we change this policy, we will update the date at the top of the page and, where appropriate, notify you in the app. Continued use of Todoie after a change means you accept the new policy.