Privacy: your tasks stay yours

NanoDo is made by Digital Sandbox B.V., Waalstraat 2, 8052 AE Hattem, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 42124304. For anything in this statement, we are the data controller. You can reach us at support@nanodo.app.

Most to-do apps ask you to create an account before you can write a single task. NanoDo does not. There is nothing to sign up for, no email to hand over, and no password that could leak in someone else's data breach. You open the app and start.

Your tasks and settings are stored on your device, in NanoDo's own local storage. This version does not sync to any cloud, and we operate no server that receives your data. That has a practical upside beyond privacy: the app keeps working with no signal, on a plane or below ground, because it never needed the network to begin with. NanoDo makes no automatic network connections at all.

So the picture is complete, this is what the app stores locally:

NanoDo only asks for a permission at the moment you use the feature behind it, and each one is handled entirely on your device.

Some things on your list are nobody else's business. NanoDo's private mode keeps chosen tasks behind Face ID, so a task you would not want read over your shoulder, or glimpsed on your lock screen, shows only a cover name or a neutral label until you unlock it.

The widgets, the Apple Watch app, the Shortcuts and Siri actions, and the Live Activity all read the same on-device tasks. When your three go to your Apple Watch, they travel over Apple's direct device-to-device link between your own iPhone and watch, not through any server of ours.

This version of NanoDo stores your tasks only on your device and does not sync them anywhere. If a future version offers iCloud sync, it will keep your tasks in your own private iCloud (Apple's CloudKit) under your Apple ID, still never on a server of ours. We will update this statement before that ships.

You can export your tasks as a file, save a monthly PDF, or share a day-won card. Each of these happens only when you ask for it, and you choose where the file goes through the standard iOS share sheet. Nothing is uploaded to us.

NanoDo offers an optional one-time Pro purchase, never a subscription. If you buy it, the payment is handled entirely by Apple through the App Store. We never see or receive your card or payment details; Apple only tells us, in an anonymous form, that a purchase was made so the app can turn on Pro.

NanoDo carries no third-party advertising or analytics SDKs and nothing that identifies you. There is no crash reporting or telemetry. Its App Store privacy label is Data Not Collected, the strictest of Apple's categories, and it means exactly what it says.

nanodo.app uses Vercel Web Analytics, which is privacy-friendly and fully cookieless, to count visits. It sets no advertising cookies and builds no profile of you. The site is hosted by Vercel, which, like any web host, briefly processes technical request data such as your IP address to deliver pages and keep the service secure.

Because the app processes your tasks only on your own device, we are not a recipient of that data and do not process it ourselves. For the cookieless visit counting on this website, and for handling any message you send us, our legal basis under the GDPR is our legitimate interest in running and improving a small website and in answering you.

Your tasks stay on your device until you delete them or delete the app, and we keep nothing to retain. If you email us, we keep that message as long as we need it to answer you and for a reasonable time after.

Under the GDPR you have the right to access, correct, delete, restrict, object to and export your personal data. Because your tasks are on your own device, you exercise most of these directly: edit or delete any task, or remove the app to erase everything it holds. For anything we hold, such as an email you sent us, contact support@nanodo.app and we will help. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

NanoDo is a general-audience app and is not directed at children under 16. Because we collect no data at all, we do not knowingly collect anything from children.

If the app changes in a way that affects this statement, for example if iCloud sync is added, we will update the text and the date below before the change reaches you.

Questions about privacy? Email support@nanodo.app.