Privacy Policy

Effective 27 October 2026 · Last updated 27 October 2026

This policy explains what the To Do List & Daily Planner Android app (Google Play package com.dayline.planner) collects, why, who receives it, and what you can do about it. It applies to the app and to this website.

1. Who we are

To Do List & Daily Planner (“the App”, “we”, “us”, “our”) is the developer of the App and the data controller for the processing described in this policy.

• App: To Do List & Daily Planner, package com.dayline.planner, distributed on Google Play
• Website: todo.toolsutil.com
• Contact and grievance officer: dev.software40@gmail.com

2. Data stored only on your device

The following is written to a database in the App’s private storage on your phone and is never transmitted to us or to anyone else:

• Tasks, subtasks, due dates and times, priorities, notes and completion history
• Lists, tags, and their names and colours
• Habits, their schedules and your logged streaks
• Files you attach to a task, which you choose yourself through the Android file picker
• Your settings — theme, accent colour, language, start screen, reminder defaults and launcher preferences
• If you use the App as your Home screen: which apps you hid, your dock and gesture choices, and your icon appearance settings

If you uninstall the App this data is deleted with it. Unless you have made a backup it cannot be recovered — by you or by us.

3. Data that is sent, and to whom

The App uses the third-party services below. Each is listed with exactly what it receives and why. There are no others.

These providers act as independent controllers or as our processors depending on the service. Their own policies apply to what they do with the data: Google Privacy Policy, Firebase Privacy and Security, How AdMob uses data, RevenueCat Privacy Policy.

What we never collect

The App does not collect your name, email address, phone number, postal address, precise location, contacts, call logs, SMS messages, photos, microphone or camera input, health data, financial account details, or the contents of any other app.

4. Google user data and the Drive API

What we access

Google Drive backup is optional and switched off by default. If you turn it on, the App asks your permission for exactly one scope:

This is the narrowest Drive scope Google offers. It grants access only to files this App itself creates. The App cannot see, read, list, modify or delete any other file in your Google Drive, and it never requests a broader or restricted scope. We request no other Google OAuth scope of any kind.

What we do with it

Within that scope the App only ever:

• Creates a folder for its own backups
• Uploads a backup file containing your tasks, lists, tags and habits, when you tap Back up or when a backup you scheduled runs
• Lists the backups it previously created, so that you can choose one to restore
• Downloads a backup you selected, in order to restore it onto your device
• Deletes an old backup it previously created

The backup file is written directly from your device to your Google Drive account. It does not pass through, and is not stored on, any server of ours. We have no access to your Drive and hold no copy of your backups. The access token is held only in memory for the duration of the operation.

Limited Use

Specifically, data obtained through Google APIs is:

• Used solely to provide the backup and restore feature you asked for
• Not transferred to others, except as necessary to provide that feature, to comply with applicable law, or as part of a merger or acquisition with your notice
• Not used for serving advertising of any kind, including personalised, retargeted or interest-based advertising
• Not used to build profiles, to train any model, or for any purpose other than the feature itself
• Not read by any human, except where you give explicit consent for specific files, where required for security purposes such as investigating abuse, where required by applicable law, or where the data has been aggregated and anonymised for internal operations

Revoking access

You can withdraw the App’s access to your Google Drive at any time at myaccount.google.com/permissions. Backups already in your Drive remain there, under your control, and you can delete them yourself from Drive or from within the App.

5. Permissions the App requests

The App does not request access to your location, contacts, camera, microphone, call logs, SMS, or your photo and media library. Attachments are read through the Android system file picker, which grants access to the single file you chose and nothing else.

Installed apps, if you use the Home launcher

If you choose to set the App as your Home screen, Android lets it list the apps installed on your device so they can be shown in the app drawer. The App obtains this through a narrow, filtered query for launchable activities — it does not hold the broad QUERY_ALL_PACKAGES permission. The list of your installed apps is used only to draw the launcher on your device and is never transmitted anywhere.

6. Advertising and your choices

The free version of the App shows ads supplied by Google AdMob. Ads may be personalised using your Android advertising ID.

• In the European Economic Area, the United Kingdom and Switzerland, a consent form appears before any personalised advertising, as required by law. You may refuse, and you can change your answer at any time from Settings → Ad privacy choices inside the App.
• Anywhere in the world, you can reset or delete your advertising ID in Android Settings → Privacy → Ads, which stops it being used to build an advertising profile.
• Subscribing to Premium removes all advertising from the App.

We do not share personal information with advertisers ourselves. Google acts as the advertising provider; see how Google uses data from apps that use its services.

7. Children

The App is not directed to children. It is intended for users aged 13 and over (or the equivalent minimum age in your country, such as 16 in parts of the EEA), and it is not listed in Google Play’s Designed for Families programme. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, email dev.software40@gmail.com and we will delete it promptly.

8. How long data is kept

• On-device data — until you delete it in the App or uninstall the App.
• Drive backups — in your own Google Drive until you delete them, from within the App or directly in Drive.
• Analytics data — retained by Google under Firebase’s retention settings, currently up to 14 months for event data.
• Crash reports — retained by Crashlytics for up to 90 days.
• Purchase records — retained by RevenueCat and Google Play for as long as needed to honour your subscription and to meet tax and accounting obligations.

9. Deleting your data

There is no account with us to delete, because the App never creates one.

1. Everything on your device — delete individual items in the App, or uninstall the App, which removes its database, attachments and settings entirely.
2. Your Drive backups — delete them from inside the App, or from Google Drive directly, then revoke access at myaccount.google.com/permissions.
3. Analytics and crash data — email dev.software40@gmail.com with the subject “Data deletion request”. Include your device model and approximate first-use date so the install can be identified, since we hold no name or email for you. We will action the request and confirm within 30 days.
4. Advertising identifier — reset or delete it in Android Settings → Privacy → Ads.

Purchase records required for tax, accounting or fraud-prevention purposes may be retained by Google Play and RevenueCat after a deletion request, as the law permits.

10. Security

Data on your device is held in the App’s private storage, which Android isolates from other applications. All network connections use HTTPS/TLS. You can enable an App lock requiring your fingerprint, face or screen lock before the App will open. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

11. International transfers

The third-party services listed in section 3 are operated by companies that may process data on servers outside your country, including in the United States. Where data originating in the EEA or the UK is transferred, those providers rely on safeguards such as the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

12. Your rights

Depending on where you live you may have some or all of the rights below. To exercise any of them, email dev.software40@gmail.com. We will respond within 30 days and we will not discriminate against you for making a request.

EEA, UK and Switzerland (GDPR / UK GDPR)

You have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing. Our lawful bases are:

• Consent — personalised advertising, and access to your Google Drive. You may withdraw consent at any time.
• Legitimate interests — crash reporting and anonymous usage measurement, to keep the App working and to improve it.
• Performance of a contract — providing and restoring Premium subscriptions.

You may also lodge a complaint with your national supervisory authority.

California (CCPA / CPRA)

You have the right to know what is collected, to delete it, to correct it, to opt out of sale or sharing, and to limit the use of sensitive personal information. We do not sell personal information and have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 16. Sharing for cross-context behavioural advertising can be stopped by refusing personalised ads, by resetting your advertising ID, or by subscribing to Premium.

India (DPDP Act 2023)

You have the right to a summary of the personal data being processed, to correction, completion, updating and erasure, to nominate another person to exercise your rights in the event of death or incapacity, and to grievance redressal. Grievances may be sent to the contact address above and will be answered within the statutory period.

Other regions

If your local law grants you rights not listed here — for example under Brazil’s LGPD, Canada’s PIPEDA, or Australia’s Privacy Act — contact us and we will honour them.

13. This website

This site is a set of static pages. It sets no cookies, runs no analytics, embeds no trackers, and does not profile visitors. Standard server access logs, which may include your IP address, may be kept by the hosting provider for security and diagnostics.

14. Changes to this policy

If this policy changes we will update the effective date at the top of this page. Where a change materially affects how your data is handled, we will also give notice inside the App before it takes effect, and where the law requires it we will ask for your consent again. Continuing to use the App after a change takes effect means you accept the updated policy.

15. Contact

To Do List & Daily Planner
Email: dev.software40@gmail.com
Web: todo.toolsutil.com