Privacy Policy

Last updated: October 5, 2026

1What stays on your device

Your task history, steps, and progress are stored locally on your iPhone. Your settings and preferences stay on your device too. Reminder notifications are scheduled locally by iOS — nothing about your tasks leaves the device for reminders.

2What happens when you tap “Break it down”

To turn your task into small steps, the text you typed is sent over an encrypted connection to our server (api.untodo.app), which forwards it to our AI provider, OpenRouter, and returns the generated steps the same way. OpenRouter routes the request to the underlying AI model that powers the breakdown. Before your first breakdown, the app asks for your permission. You can withdraw it in Settings.

Untodo requires every AI request to use endpoints that OpenRouter classifies as zero data retention (ZDR), with data collection for training disabled. If no compatible endpoint is available, the breakdown fails rather than falling back to an endpoint that retains your words. OpenRouter input/output logging and external observability broadcasts are disabled for our workspace.

OpenRouter's ZDR classification allows temporary in-memory prompt caching; it does not mean text is never processed or temporarily held in memory. See OpenRouter’s ZDR explanation, OpenRouter’s privacy policy and provider data policies for details. We do not claim that all providers outside this restricted routing policy retain no data.

• Our server does not keep your task text. It only keeps device-based quota bookkeeping — how many breakdowns a device has used today (to enforce the free limit of 3 per day) and short-lived reservation records. These contain no task content.
• Our application logs record technical metadata — request IDs, request categories, provider and model names, generation settings, status codes, and timing. They do not record your task text or device identifier.

Our server is hosted on Cloudflare, which processes network information such as IP addresses to deliver and protect requests under Cloudflare’s privacy policy. Automatic full-request invocation logging is disabled for our Worker; previously recorded operational logs expire under Cloudflare's retention policy.

3Device identifier

To count free daily breakdowns without accounts, the app uses a device identifier (Apple's identifier for vendor, or a generated identifier when unavailable), stored in your device's Keychain. We do not associate it with your name, email, or Apple ID. Keychain data may remain after uninstalling the app, so reinstalling does not necessarily reset this identifier.

4Website waitlist

Our website's optional waitlist form (hosted by Tally) collects your email address if you choose to sign up, so we can notify you about launch and your waitlist benefit. That's the only place we collect an email address.

5What we don't do

• No accounts and no sign-in.
• No advertising, no ad trackers, and no cross-app tracking.
• We never sell your personal information. Service providers process information only for the services described in this policy.

6Children

Untodo is not directed at children under 13, and we do not knowingly collect information from children under 13.

7Changes to this policy

If this policy changes in a meaningful way, we'll update this page and the “Last updated” date above.

8Contact

Questions about privacy? Write to hello@untodo.app. If you email us, we'll see your address and message and use them only to reply.