Anatodo
Privacy
Last updated October 30, 2026
The app
Your tasks and the time on them are kept in a file on your iPhone or iPad. There's no account and no ads, and what you write never reaches us unless you send it yourself (see icons, below): not your task titles, notes, subtasks, journal, category names, or calendar events.
iCloud
If you're signed in to iCloud, the app keeps a copy of your ledger in your own iCloud, in the app's private database, so your other iPhones and iPads signed in to the same Apple ID have it too. Its contents are stored encrypted. It's held by Apple under Apple's privacy policy and counts toward your iCloud storage; we can't see it, and it never passes through our servers. You can turn it off in Settings, under more, then iCloud: the device keeps everything it has and stops sending and receiving.
Usage data
To learn what to make better, the app sends us usage data: which screens and buttons are used and
how often, which way a task was added (typed, spoken, pasted, photographed, Siri, the share sheet), when timers
start and stop and for how long, which settings are chosen and changed (for example, from one theme
to another). With it comes the app version, the iOS version, the device model (for example
iPhone18,1), your language and region, your time zone's offset from UTC, and the country
of the connection. About tasks it only says their shape: how long a title is, whether a task has a
due date, a repeat, a note or a category, and how many minutes it took. Never the words.
It goes with a random key the app makes on your device and replaces with a new one at least once a week, so we can see how the app is used over a few days but can't join one week to the next. Once a day the app also sends, with no key at all, the settings as they stand, the week you first opened it, and on a folding iPhone how long since its inner screen was last used, which is how we count how many people keep using it without knowing who. None of it is tied to you, your Apple ID, an email or the device, and we never try to connect it to you or combine it with anything else.
Crash and performance reports from Apple's MetricKit, with the app and iOS version and the device model, carry no key and are sent even if usage data is off: they're how we find and fix crashes.
We don't keep your IP address, don't use any of this for ads, don't sell or share it, and don't track you across other apps or websites. It's stored with Cloudflare and deleted after two years. You can turn usage data off any time in Settings, under more, then usage data: what was waiting to be sent is dropped, and the app tells us only that it was turned off.
If you turn on the calendar setting, today's events are read on the device to show them next to your tasks. They aren't stored or sent anywhere, unless you copy one into your tasks yourself. If you turn on writing to the calendar, tasks with a start and an end are written to a calendar of the app's own on your device (Anatodo schedule). If you bring in your reminders, they're read on the device once and written as tasks; nothing in Reminders is changed. Tasks written in other languages are read by Apple's on-device model, so they don't reach us either. Apple Watch, widgets, and Siri talk to the app on your device, not to a server.
If you tap the mic to say a task, Apple's speech recognition turns it into text. Where your device can do that itself, it stays on the device. Where it can't, the audio goes to Apple to be recognized, under Apple's privacy policy. It never reaches us, and nothing is kept until you add the task.
If a task's icon you want isn't there, you can tell us what you were looking for. What you write is sent when you tap send, with the app's language and version and nothing else, and we use it to decide which drawings to make next. It's deleted after a year. New drawings reach the app as a small file it downloads from this site now and then; that request carries nothing about you.
This website
The beta is open on TestFlight, so joining it asks nothing of this site. If you tell us you'd
use Anatodo on another device, we keep your email, which device, your browser's language and
time zone, and when you asked. We use it to confirm, and to write to you if Anatodo comes to that
device. If you asked for a beta invite before the beta opened, we keep what you gave us then
(your email, your optional answer about what you use today, and whether you asked for a launch
email) and use it the same way: for the invite, and for one launch email if you checked the box.
If you came from a link with a ref tag on it, we keep that tag too, to know which
link brought you.
It's stored with Cloudflare, which also hosts this site, and email is sent through Resend. We don't sell or share it. Beta invite requests are deleted three months after launch, and requests for another device two years after you made them, sooner if Anatodo comes to that device and we've written. To have yours deleted sooner, use the unsubscribe link in any email from us, or write to hello@anatodo.com.
We count visits with our own analytics, run on Vercel. It sees the page, a press on the TestFlight link, the site you came from, your browser and device, and your rough location from your IP address. It doesn't store your IP, set cookies, or know who you are.
This site doesn't use cookies, ads, or anyone else's trackers.