TodoLot is a voice-to-alarm to-do app for iOS made by an independent developer. Your tasks live on your device. There is no account to create, no advertising, and your personal data is never sold. This page describes exactly what leaves your device, where it goes, and why — in plain language.
When you dictate tasks, your speech is transcribed by Apple’s built-in iOS speech recognition, with your permission. Depending on your device and language, Apple may process the audio on the device or on Apple’s servers — see Apple’s Privacy Policy. Your audio never reaches our servers or any other third party.
The text of your dictation (never the audio) is sent over an encrypted connection to an AI service — Anthropic or OpenAI — which splits it into individual tasks, times, and any advance reminders. Along with the text, the request includes your dictation language, timezone, the current time, and the names of your task groups (so the AI can sort tasks into them). Requests may be routed through our lightweight relay server (hosted on Cloudflare), which keeps API credentials off your device and enforces a daily rate limit using a random device identifier — a UUID generated on your device that is not linked to your name, email, or any account; its daily counters expire and are deleted automatically within 48 hours. We do not store or log your dictation text, and we instruct these providers not to use it to train their models.
If the natural alarm voice is enabled, the text of an alarm phrase (and of the morning briefing) is sent over an encrypted connection to ElevenLabs, which generates the audio. The generated audio is cached on your device so the same phrase is not sent twice. If the natural voice is turned off, or the network is unavailable, the voice is generated entirely on your device using Apple’s built-in text-to-speech.
On first launch the app creates an anonymous user ID via Google Firebase Authentication. It is a random identifier — no name, email, or password is ever asked for or collected. Using this anonymous ID, the app collects:
This data is linked to the anonymous ID, not to your identity, and is used only to operate and improve the app.
Billing is handled entirely by Apple through the App Store — we never see your payment details. To reliably unlock your subscription across reinstalls, the app records subscription status (which plan is active and its renewal state, nothing more) with RevenueCat, keyed to the same anonymous ID.
Your tasks, alarm times, checklists, groups, reminders, and settings are stored locally on your device. If you use iCloud or device backups, this local data may be included in your backups, which are managed by Apple.
We do not sell your data and do not share it for advertising. We share the minimum necessary with the service providers below, each acting on our behalf under its own privacy terms:
| Provider | What it receives | Why |
|---|---|---|
| Apple | Speech audio/text (on-device or Apple servers); purchase & billing data | Speech recognition; App Store payments |
| Anthropic / OpenAI | Dictation text + language, timezone, time, group names | Turn dictation into tasks |
| Cloudflare | Same request, plus a random device UUID | Relay that hides API keys and rate-limits |
| ElevenLabs | Alarm/briefing phrase text | Generate the natural voice |
| Google Firebase | Anonymous ID, analytics events, crash data, technical context | Analytics & crash reporting |
| RevenueCat | Anonymous ID, subscription status | Unlock Pro across reinstalls |
Depending on where you live (for example under the EU/UK GDPR or the California CCPA/CPRA), you may have the right to access, correct, or delete your data, to object to certain processing, and not to be discriminated against for exercising these rights. Because we do not hold your name or email, we identify your records by the anonymous ID or device UUID associated with your app. You can:
We do not “sell” or “share” personal information as those terms are defined under California law.
Deleting the app deletes your tasks, settings, and generated audio from your device. We keep no copy of your dictations. Server-side, the anonymous daily rate counter deletes itself within 48 hours; analytics events, crash reports, and subscription status are retained by Firebase and RevenueCat under their policies, keyed only to the anonymous ID. To have that data deleted, email us the request — we will remove it.
TodoLot is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
If the app’s data practices change, this page will be updated and the effective date above will be revised.
Questions about privacy or the app, or a data request: vibeprogerai@gmail.com