Privacy Policy

Effective October 17, 2026

The short version

• Your tasks, lists, places and settings are saved on your iPhone. If you sign in with Apple, they're also kept in your own iCloud, encrypted so that neither we nor Apple can read them.
• When you use Fuzzy or Organize with AI, and only after you agree, the text needed for that request goes through TDL's server to Google's Gemini AI. Google doesn't use it to train its AI products.
• No ads, no tracking, and we never sell your data.
• You can turn AI off anytime, and one button in Settings deletes everything TDL has stored.

1. Who we are

TDL ("TDL," "we," "us") is a to-do list and day planner made and run by Toni D'Loni LLC, based in Texas, USA. Questions or requests: tdl.app.support@gmail.com. By mail: 5200 S Colony Blvd #560506, The Colony, TX 75056-2416.

This policy covers the TDL app for iPhone, its widgets, and the server TDL uses for AI features. TDL is only for people 18 and older (see section 11).

2. What TDL does

TDL lets you build your own to-do lists (groceries, gym, school, work or anything you make up), nest lists inside each other, and plan your tasks on a daily schedule with reminders.

With TDL Plus, TDL also plans your day around getting places: for tasks you mark "Go there," it works out travel time by car, public transit or walking, including expected traffic, and tells you when to leave. TDL Plus also includes Fuzzy, an AI assistant that plans your day from a sentence, and Organize with AI, which sorts tasks into your lists.

This policy explains what information those features use.

3. Information on your devices and in your iCloud

Everything you create in TDL is saved on your device, in storage shared only with TDL's own widgets. This includes:

• Your lists, tasks (and their checklists), repeats, reminders and schedule settings.
• Places you attach to lists (a name, an address and map coordinates).
• The name you choose for TDL to call you, and your birth year. We use your full birth date only once, to check your age, and don't keep it.
• Tasks you delete, which wait in Recently Deleted for 48 hours so you can restore them, then are erased automatically. They're kept only on the device where you deleted them, never in iCloud.
• Your conversation with Fuzzy, which is deleted automatically 24 hours after it was last used, or sooner if you start a new chat.
• A count of today's AI requests, and a random ID created for this installation of the app (see section 4).

Apple Watch. If you use TDL on an Apple Watch, your iPhone sends it your open tasks from earlier days and today's and tomorrow's tasks (names, times, lists, priorities, and whether they're done), so you can see and check them off on your wrist. They go directly between your iPhone and watch using Apple's connection between them, never through our server, and the watch keeps only the latest copy.

If you sign in with Apple, your lists, tasks, repeats, places and settings are also saved in your own private iCloud storage (Apple's CloudKit), so they're on your other devices signed in to the same iCloud account and come back if you reinstall TDL. Their contents are end-to-end encrypted with keys only your devices have, so neither TDL nor Apple can read them (Apple still sees basic record details, like when something was changed), and they count toward your iCloud storage. If you ever reset your iCloud end-to-end encryption keys, Apple can't recover them, and neither can we. Things that belong to one device stay on it: your choices about AI, calendar and location, the Fuzzy conversation, and your birth year. As a guest, your plans are stored only on this iPhone. If you delete TDL, reset your phone, or lose it, a guest's plans are gone and we can't recover them.

4. AI features: what's sent, where, and why

Fuzzy and Organize with AI use Google's Gemini AI. Nothing is sent to an AI until you agree on the screen that explains this, and you can turn AI features off anytime in Settings → AI features. The rest of TDL works without them.

When you use an AI feature, TDL sends:

• What you type to Fuzzy, and the recent messages in that conversation.
• The names, times, lengths, priorities, lists and checklist items of up to 40 of your unfinished tasks (those planned for the coming week, and up to 10 still left from earlier days), so the AI can plan around them and change them when you ask. For Organize with AI, the names of the tasks being sorted.
• The names of your lists, and whether each one has a place attached. We never send the place itself or its location.
• If you've turned on "Use my calendar": the titles and times of your calendar events for the coming week.
• A random ID made for this installation of TDL. It isn't linked to your name, Apple Account or device, and we use it only to count daily requests.
• A proof from Apple that the request comes from the genuine TDL app on a real Apple device (Apple's App Attest). It's made by a security key created on your phone for TDL, and says nothing about who you are.

Where it goes. The request travels over an encrypted connection to TDL's server, which runs on Cloudflare. The server adds TDL's instructions, forwards the request to Google's Gemini API, and passes the reply back to your phone. Like any internet service, Cloudflare sees the network (IP) address the request comes from.

What we keep. TDL's server doesn't store what you type or the AI's reply. It keeps a count of requests for each installation ID and a daily total, which expire after 48 hours, and the public half of your installation's App Attest key with a counter (no personal information), which is deleted after 90 days without AI use. If something goes wrong, the server may keep a short technical error log.

What Google keeps. TDL uses Google's paid Gemini service. Under Google's terms for that service, Google doesn't use your requests or replies to train or improve its products. The one exception: Google may use them for the systems that detect abuse of its service. Google keeps them for up to 55 days only to detect abuse and to meet legal obligations, and authorized Google staff may review content its safety systems flag. See the Gemini API Additional Terms and Google's Privacy Policy.

Please don't put sensitive information you wouldn't want an AI service to process, like health details, passwords or financial account numbers, into task names or messages to Fuzzy.

5. Location and travel times

Location is optional and off until you allow it. TDL uses it on your iPhone to:

• notice when you arrive at a place attached to a list ("arrival modes"), and
• work out travel times and leave-by alerts for tasks you mark "Go there" (TDL Plus).

Your location never goes to TDL's server or to the AI. To search for places and work out travel times, TDL uses Apple Maps, which receives your search text and the start and end points of a trip under Apple's Privacy Policy. You can change location access anytime in the iPhone's Settings app.

6. Calendar

If you turn on "Use my calendar," TDL reads (never changes) your iPhone calendar's events for the next two weeks to plan around them and show them on your schedule. Event titles and times are included in AI requests only when both "Use my calendar" and AI features are on. You can turn this off in TDL's Settings or the iPhone's Settings app.

If you choose "Make it a task" on a calendar event, TDL saves it as a task (its title and time), like any task you add. Events you don't make into tasks aren't saved by TDL, and your calendar itself is never changed.

7. Notifications

Reminders, leave-by alerts and arrival notices are scheduled on your iPhone. TDL doesn't use a push notification server, and your reminders aren't sent to us.

8. Sign in with Apple and purchases

Sign in with Apple is optional. TDL doesn't ask Apple for your name or email. We receive only an anonymous identifier from Apple, which the app uses to keep your plans separate from anyone else's and to sync them through your iCloud.

TDL Plus is sold through Apple. Apple processes the payment, and we never see your card or billing details. The app receives only whether your subscription is active, as described in Apple's Privacy Policy.

9. What we don't do

• We don't show ads inside TDL, and the app contains no advertising, analytics or tracking tools (like ad networks, tracking pixels or analytics SDKs).
• We may advertise TDL on social media and elsewhere, but that never involves giving advertisers any information about you or what you do in the app.
• We don't track you across other apps or websites.
• We don't sell, rent or share your personal information for targeted advertising.
• We don't use your information to train AI models. Our AI provider, Google, doesn't use it to train its AI products either, apart from its abuse-detection systems (see section 4).
• We don't publish what you write or share it with other TDL users. Your lists are private to you.
• We don't send marketing emails. If you email us, we'll use your address only to reply.

Do Not Track. Because TDL doesn't track you across apps or websites, there's nothing for a browser or device "Do Not Track" signal to turn off, and TDL works the same either way.

If you've chosen to share analytics with app developers in your iPhone's settings, Apple may send us anonymous crash reports. That's controlled by Apple and you, not by TDL.

10. Who helps us run TDL

We share information only with these providers, only to run TDL's features, and only as described above:

• Google (Gemini API, paid): writes Fuzzy's replies and Organize suggestions. Receives the AI request described in section 4.
• Cloudflare: runs TDL's AI server. Receives the AI request passing through, the network address, and request counts.
• Apple: App Store, purchases, Sign in with Apple, Maps, notifications, App Attest (confirming requests come from the genuine app), and iCloud (which stores your plans, encrypted, if you're signed in). Receives what you share with Apple under its own policy.

We only work with providers whose terms protect your information at least as well as this policy does, and who may use it only to provide their service to TDL. We may also disclose information if the law requires it, for example in response to a valid court order.

11. Age requirement

TDL is only for people 18 and older, and we ask for your birth date before you can use it. We don't knowingly collect information from anyone under 18. If you believe someone under 18 is using TDL, contact us at tdl.app.support@gmail.com. Their data is stored on their own device, so the fastest fix is to delete the app there. Nothing on our server identifies a person; request counts expire within 48 hours, and App Attest keys within 90 days of last use.

12. How long information is kept

• Lists, tasks, places, settings, name, birth year: on your iPhone until you delete them, use "Delete all data," or delete the app.
• Deleted tasks: in Recently Deleted on the device where you deleted them for 48 hours (erased the next time TDL opens after that), or until you erase them sooner. A deleted task is removed from your iCloud copy right away.
• Your iCloud copy (signed in with Apple): until you delete your account in TDL, which deletes it too. You can also remove it yourself in the iPhone's Settings app → your name → iCloud.
• Fuzzy conversation: on your iPhone for 24 hours after last use, or until you start a new chat.
• AI request counts: on TDL's server for 48 hours.
• App Attest key (public half and a counter): on TDL's server until 90 days after your last AI request.
• AI requests and replies: at Google for up to 55 days, for abuse monitoring only.
• Technical error logs: on TDL's server for a short time.

13. Your choices and rights

• Turn off AI: Settings → AI features. Nothing more is sent to the AI.
• Turn off calendar or location: in TDL's Settings or the iPhone's Settings app.
• Delete your conversation: start a new chat with Fuzzy, or wait 24 hours.
• Erase deleted tasks now: Lists → Recently Deleted, then swipe a task or choose "Erase all now."
• Delete everything: Settings → Account settings → "Delete all data" ("Delete account" if you signed in with Apple). This erases your lists, tasks (including Recently Deleted), places, Fuzzy conversation, AI counters, installation ID and pending notifications from your iPhone, and, if you're signed in, your iCloud copy too. Deleting the app alone doesn't delete your iCloud copy.
• Stop using Sign in with Apple: in the iPhone's Settings app → your name → Sign in with Apple.

Depending on where you live, including Texas and California, you may have the right to ask what personal information we have about you, to correct or delete it, and to opt out of its sale or use for targeted advertising (we don't do either). To make a request, email tdl.app.support@gmail.com. We'll answer within 45 days. Because almost everything is on your device and we don't know who you are, we usually won't have information to give back. If we turn down your request, you can appeal by replying to our answer, and we'll respond within 60 days. If you're not satisfied, you can contact your state's attorney general.

14. Security

Your data is protected by your iPhone's own security, including its passcode and encryption. AI requests travel over encrypted connections. TDL's server refuses requests that Apple's App Attest can't confirm come from the genuine TDL app, limits how many each installation can make, and keeps the AI service's key off your phone. No system is perfectly secure, and we can't guarantee that information will never be accessed without permission. If we learn that your information was, we'll tell you as the law requires.

15. Where TDL operates

TDL is run from the United States and is currently offered in the United States. Our providers may process information in the United States and other countries where they operate.

16. Changes to this policy

If we change what TDL collects or shares, we'll update this policy before the change takes effect and change the date at the top. For significant changes, like sending your information to a new kind of provider, we'll tell you in the app and ask you to agree again. The current version is always in the app (Settings, Privacy Policy) and at tdlapp.pages.dev/privacy.

17. Contact

Toni D'Loni LLC
5200 S Colony Blvd #560506, The Colony, TX 75056-2416
tdl.app.support@gmail.com