Todofully
Effective 29 August 2026 · Todofully ("we") · support@todofully.com
Todofully is a planner that is private by default and social only by your choice. This page says what we actually collect, in plain language, and matches what the app does — not what a template says.
What we store in your account
- Account: your email address, an optional display name, a username you choose, an optional bio and "current focus", and your settings.
- Your planner and notes: events, tasks, reminders, goals, imported work shifts, and notes (typed text, handwriting and drawings) — stored so they follow you to a new phone. Every row is protected by database-level rules: only you can read your data, except the specific items you set to "Friends".
- Profile images: a profile photo or banner you upload is stored with your account (we keep your original plus the framing you chose) and shown wherever your profile appears. Built-in character avatars are bundled in the app and upload nothing. Photos are re-encoded on your device before upload, which removes hidden metadata such as GPS location.
- Friends: who you are connected to, requests, blocks, and per-friend availability permissions. Every account starts connected to Frank Todofully, our clearly-labeled fictional demo character. Frank has no login and can read nothing of yours.
- Purchases: subscription state, processed by Apple/Google and RevenueCat. We never see your card number.
What leaves your phone, and when
- AI reading (only when you tap scan): a photo of a schedule, a handwriting photo, a rendered image of a note's ink, or the typed text of a note is sent to Anthropic (our AI provider) to be read, then discarded — images are not retained after extraction, and nothing is ever sent in the background.
- Sync: your account data syncs to our database (hosted on Supabase) so your devices agree.
- Analytics: counts and kinds only — "a task was created", never what it said. Titles, notes, names and locations are blocked from analytics by an allowlist in the code.
What friends can see
Nothing, unless you choose it per item. Items you set to "Friends" (and, separately, items you place on your profile) are visible to accepted friends only — enforced by the database on every read. There are no public profiles, no follower counts, and no search beyond exact @username. Imported work schedules are never shareable. Notes are private; a note appears to friends only if you deliberately feature it.
What we never do
- No ads, no data sale, no cross-app tracking.
- No location collection.
- No reading of your content by people — automated systems process it only to provide the features above.
Deleting your account
In the app: Settings → Delete my account. This removes your rows, your uploaded files (including profile photos), and your login — irreversibly. Events already written into your phone's calendar are yours and stay. If you can't access the app, email support@todofully.com from your account email with the subject "Delete my account" and we'll do it within 30 days.
Reporting content
Use Report on any profile, or Settings → "Report content or a user", or email support@todofully.com.
Children
Todofully is for ages 16 and up per our Terms.
Changes
If this policy changes materially we'll say so in the app before the change applies.