Last updated September 29, 2026

Privacy

Petodo is a to-do list that lives on your desktop. This page says exactly what happens to your information, in plain words. It is short because Petodo collects very little.

If you never sign in

Petodo works fully without an account, and that is how it starts. Your tasks, your settings and your chosen character are stored as ordinary files on your own computer. The app itself sends nothing about you or your list: no analytics, no telemetry, no crash reporting. We do not know you installed it.

The one thing the app does reach out for is to ask whether a newer version exists. That request tells our server only what any web request tells any server: that some computer asked for a file. It carries no identifier of you or your list, and you can switch it off in Settings.

If you sign in

You sign in only if you want your list on more than one device (another computer, your phone) or for Petodo Pro. Then we store:

• Your email address, and your name if the provider you used supplies one. That is your identity: it is how we know two devices belong to the same person.
• Your to-do list: the text of your tasks, their times, which list they are on, and whether they are done. This is stored so it can be handed to your other devices.
• A record of each device and key you have signed in: a name like "DESKTOP-XYZ", the platform, and when it was last used, so you can recognise and remove anything you do not want.
• If you connect Telegram or a Pavlok: the bot token or the Pavlok key you paste, sealed so it can only be used by the service, and the id of the Telegram chat you linked. They are never shown back to any app; only the last few characters are.
• If you use the phone app: a push-notification address for that phone, so Pro reminders can reach it. Signing out removes it.
• If you buy Pro: whether your account has it and until when. Payment itself is handled by RevenueCat, Stripe, Apple or Google; we never see your card.
• If you connect other things: for email in, the secret address we give you and the subject of each message you forward (the message itself is not kept); for Notion, access to the one database you choose and the items Petodo copies from it; for a calendar, the feed address you paste and the events it adds to your list; for agent bots, the bots you pick and the notes they send back about each errand.
• Your time zone, so that "2pm" means 2pm where you are when something reaches your list from somewhere else.

That is the whole list. We do not store your reminder history, we do not read your files, and the desktop app never sends us anything about what else is on your computer.

On this website

When you visit the Petodo website we measure how it is used, so we can tell what helps people and improve it. For each visit we record the pages you view, which parts of a page came into view and for how long, the buttons and links you click (including downloads), which character the page showed you, the site that sent you there (its name only, not the full address), your approximate country, whether you are on a phone or a computer, and your browser's language.

We do not set cookies to do this, we do not store your IP address, and none of it is linked to a Petodo account or to anything in the app. The website remembers only which character it last showed you, in your own browser, so the next visit shows a different one. Records are combined into daily totals.

The website's fonts are loaded from Google Fonts, so Google receives the request (and with it your IP address) when a page loads. If you leave your email to hear when the phone app is out, we keep that address to write to you once, when it is.

Signing in with Google, GitHub or Apple

When you use one of these, we ask that provider for one thing: your email address, and your name if they offer it. We do not ask for, and cannot see, anything else in your account there: not your files, not your repositories, not your contacts. We never receive your password. You can disconnect Petodo from your provider's own security settings at any time.

If you use Sign in with Apple and choose to hide your email, we only ever see Apple's relay address, and that is what we store.

Assistant keys

You can create a key that lets an AI assistant read and change your list. A key gives access to your to-do list and nothing else: not your email address, not your other devices, not your account settings. Each key is separate, so removing one does not affect the others. We store only a hash of each key, not the key itself, which is why a lost key can be replaced but never recovered.

What your assistant then does with your tasks is governed by whoever makes that assistant, not by us.

Email

If you sign in by email we send you a link. If you switch on the weekly summary in Settings, we send that once a week until you switch it off. If you join the phone app waitlist, we write once, when the app is out. That is all: no newsletter and no marketing. Your address is never sold, rented or shared, and we do not use it to build a profile of you.

Who else can see it

By using Petodo, its apps, its website or its services, you agree that the information described on this page may be accessed, processed and stored by third parties. These include the companies that host our service and run its infrastructure, the provider that delivers sign-in email, payment processors, and our affiliated companies, partners and service providers who help us operate, analyse, improve and promote Petodo. They may be located in other countries. If Petodo, or the business behind it, is ever reorganised, merged, sold or transferred, your information may pass to the new owner, who will remain bound by this policy for information collected under it.

We may also disclose information when the law requires it, or to protect the rights, safety and property of our users, the public or Petodo. We do not sell your personal information.

How long we keep it

Your list stays until you delete it or delete your account. Sign-in links expire after fifteen minutes and work once. Browser sessions expire after thirty days. Devices and assistant keys last until you remove them.

Deleting everything

Sign out on a device and its copy of your list stops syncing immediately. Remove a device or key from your account page and it loses access at once. To delete your account and everything in it, email us and we will remove it. There is no waiting period and no exit interview.

Uninstalling the app leaves your local task file on your computer on purpose, in case you come back; delete the Petodo folder in your app data directory to remove that too. Settings → Help → Data folder opens it for you.

Children

Petodo is not directed at children under 13, and we do not knowingly collect their information.

Changes

If this policy changes in a way that affects what we collect or who sees it, we will say so in the app's release notes rather than quietly updating this page.

Contact

Questions, or a deletion request: [email protected].