Privacy policy
Todomino keeps what it needs to run your task lists, and nothing else. No ads, no tracking, no selling of data.
Last updated 8 October 2026. Applies to the website at todomino.com and the Todomino app for iPhone and iPad.
What is stored
- Your account. A username, and a password if you set one (stored only as a salted hash, never as the password itself). If you sign in with Apple or Google, the identifier they give us for you and, if you chose to share it, your email address and name. Apple and Google learn only that you signed in to Todomino; they do not see your lists.
- Your content. The lists, tasks, notes and photos you add, and a history of changes so that Undo works. Deleted tasks are kept for 30 days so they can be restored, then removed.
- Technical records. The hosting service keeps ordinary server logs (such as the IP address and time of each request) for a short period to keep the service running and secure. Todomino sets one cookie, which keeps you signed in. There are no analytics or advertising cookies.
What it is used for
To show you your lists, to keep them in sync between your devices, and to let the people you share a list with see and edit that list. Nothing is used for advertising or sold or rented to anyone.
Who can see it
- You, and the people you choose to share a list with, for that list only.
- The administrator of your Todomino can see account names and manage accounts, and can reset a password, but never sees the password itself.
- The hosting providers that store the data on our behalf: the application and database run on Railway, and photos are stored in a cloud storage bucket. They process the data only to provide the service.
Data is not shared with anyone else, except where the law requires it.
Deleting your data
Open the account menu in the app or on the website and choose Delete account. Your account, lists, tasks, notes and photos are removed at once. A list you shared with someone passes to them rather than being deleted, so their work is not lost; remove them from the list first if you would rather it went too. Photos removed from a task are deleted from storage shortly afterwards.
Children
Todomino is not directed at children under 13 and does not knowingly collect information from them.
Changes
If this policy changes, the new version is published here with a new date.
Contact
Questions about privacy: email jsb at jetcom dot org.