Your tasks are yours

The short version

Todebaran is local-first. Your tasks and notes are stored on your own device, and the app works without an account at all. If you turn on sync, your devices exchange changes through a storage location you choose and control — there is no Todebaran sync server, and the contents of your tasks and notes never reach us. We never sell your data, and diagnostic reports never include what is in your tasks or notes.

What we collect

Account information

If you create an account, we process your email address and authentication details to sign you in and (for Pro) manage your subscription.

Your content

Tasks, projects, notes and related content live on your device. We do not collect them and we have no copy of them. With sync enabled, your devices exchange changes through the storage location you set up — a shared folder, your own WebDAV server, or an S3-compatible bucket — and the same is true of a shared space, which is its own location that you and the people in it point at. That storage is yours, under your provider's terms; we have no access to it. Sync writes those files in plain, unencrypted form, so pick a location you trust.

AI features

Todebaran's AI features run on a provider and API key that you add yourself. Keys are stored on your device and are never sent to us or put into your synced settings, and prompts go straight from your device to the provider you chose — or to a model running locally, in which case nothing leaves your device at all.

Shared slips

If you submit a slip to Community Slips, we store the slip file, the example image you upload, and the details you provide. Your display name is shown publicly next to the published slip; the contact email you give is kept private and used only to reach you about your submission (for example, questions during review). If you delete your account, slips you already published may remain available, but they are no longer linked to your account.

Diagnostics & analytics

We collect crash reports and product usage analytics to fix bugs and improve Todebaran. These never include the content of your tasks or notes. In the app, you can turn each of them on or off at any time in Settings.

On this website we additionally use product analytics with session replay and heatmaps to understand how pages are used. Session recordings mask all text and form inputs — we do not record what you type (e.g. your email or sign-in codes). Website analytics runs by default; you can opt out at any time from the banner or by contacting us, and we honour your browser's Do Not Track preference. If you are signed in, website events are linked to your account so we can connect your experience across the app and the web.

Service providers

We rely on a small number of processors to run Todebaran:

• Supabase — accounts, authentication and Pro entitlements. Not your task content: that never leaves the storage you chose.
• Sentry — anonymous crash and error reporting (optional).
• PostHog — product usage analytics, and on the website session replay and heatmaps (with inputs masked). Served through our own domain via Cloudflare.
• Resend — sending newsletter and account emails.
• Cloudflare Turnstile — bot protection on our forms.
• Cloudflare — website hosting, our backend services, and storage (R2) for shared slip files and images.
• RevenueCat — payment processing for Pro.

Each processor handles only the data needed for its function, under its own privacy terms.

Data retention

We keep your account data for as long as your account is active. When you delete your account, we delete or anonymize associated data within 30 days, except where we must keep it for legal reasons. Your tasks and notes are not part of this: they are on your device and in the storage you chose, so deleting them is yours to do — and nothing of theirs is waiting on our side to be deleted.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. To exercise these rights, contact us at info@todebaran.com. Our data controller is Jakub Holub, with registered address at Vítkovice 378, 512 38, Czech Republic (Business ID / IČO: 04313135).

Children

Todebaran is not directed to children under 16, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy over time. We will post the new version here and, for material changes, notify you in the app or by email.

Contact

Questions about your privacy? Email info@todebaran.com.