Privacy Policy

The short version

Todebaran stores your tasks and notes locally on your device. If you turn on sync or use an account, your data is stored and synced through our infrastructure so it can reach your other devices. We never sell your data, and diagnostic reports never include the content of your tasks or notes.

What we collect

Account information

If you create an account, we process your email address and authentication details to sign you in and (for Pro) manage your subscription.

Your content

Tasks, projects, notes and related content live on your device. With sync enabled, an encrypted copy is stored on our infrastructure so it can be delivered to your other devices and to people you share a scope with.

Diagnostics & analytics

We collect crash reports and product usage analytics to fix bugs and improve Todebaran. These never include the content of your tasks or notes. In the app, you can turn each of them on or off at any time in Settings.

On this website we additionally use product analytics with session replay and heatmaps to understand how pages are used. Session recordings mask all text and form inputs — we do not record what you type (e.g. your email or sign-in codes). Website analytics runs by default; you can opt out at any time from the banner or by contacting us, and we honour your browser's Do Not Track preference. If you are signed in, website events are linked to your account so we can connect your experience across the app and the web.

Service providers

We rely on a small number of processors to run Todebaran:

• Supabase — accounts, authentication and synced data storage.
• Sentry — anonymous crash and error reporting (optional).
• PostHog — product usage analytics, and on the website session replay and heatmaps (with inputs masked). Served through our own domain via Cloudflare.
• Resend — sending newsletter and account emails.
• Cloudflare Turnstile — bot protection on our forms.
• RevenueCat — payment processing for Pro.

Each processor handles only the data needed for its function, under its own privacy terms.

Data retention

We keep your account and synced data for as long as your account is active. When you delete your account, we delete or anonymize associated data within 30 days, except where we must keep it for legal reasons.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. To exercise these rights, contact us at info@todebaran.com. Our data controller is Jakub Holub, with registered address at Vítkovice 378, 512 38, Czech Republic (Business ID / IČO: 04313135).

Children

Todebaran is not directed to children under 16, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy over time. We will post the new version here and, for material changes, notify you in the app or by email.

Contact

Questions about your privacy? Email info@todebaran.com.