Privacy Policy for KanToDo

We're glad you're using our app KanToDo. Protecting your personal data is important to us. Below we inform you about the collection, processing and use of your data when using our app in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR).

1. Controller

2. Which data is processed

• Your content: tasks, categories, habits, rewards, progress (XP, coins, level, streaks) and settings. This data is stored locally on your device.

• iCloud sync (optional, part of KanToDo Premium): if you enable iCloud sync in the settings, your content is synced between your devices via your private iCloud (Apple). We have no access to it; processing is carried out by Apple under their privacy terms.

• Device information: technical device information may be processed to provide and optimize the app's functions.

3. Advertising (Google AdMob)

In its free version, KanToDo may show ads via Google AdMob. Advertising IDs and device information may be processed to deliver ads and prevent abuse. The provider is Google Ireland Ltd. See details in the Google Privacy Policy. Ads can be removed permanently with "KanToDo Premium" — a one-time in-app purchase, not a subscription — which additionally unlocks iCloud sync.

4. In-app purchases (Apple & RevenueCat)

Purchases are processed via Apple's App Store. Payment processing is handled by Apple; we do not receive any payment data. Apple's privacy terms apply.

To manage and validate your purchases we use RevenueCat, a service provided by RevenueCat, Inc., 1032 Irving St #322, San Francisco, CA 94122, USA. On our behalf, RevenueCat processes a pseudonymous app user ID, your purchase and entitlement status (which purchases are active), the purchase receipt issued by Apple, and technical details such as platform, app version, country and device identifiers. This allows us to unlock and restore purchased features — such as "KanToDo Premium" — across your devices. Your tasks and other content are not transmitted to RevenueCat.

The legal basis is Art. 6(1)(b) GDPR (performance of the contract of use). We have a data processing agreement in place with RevenueCat. Processing in the USA takes place on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR). For details see the RevenueCat Privacy Policy.

5. Purpose and legal basis

• Provision of the app's functions (Art. 6(1)(b) GDPR)
• Processing, management and restoration of in-app purchases (Art. 6(1)(b) GDPR)
• Improving the app and fixing errors (Art. 6(1)(f) GDPR)
• Delivering ads in the free version, where you have consented (Art. 6(1)(a) GDPR)

6. Sharing of data

Your content is not shared with third parties. Processing by Apple (iCloud, App Store), Google (AdMob) and RevenueCat (management of in-app purchases) takes place solely within the scope described above.

7. Data security

We use technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

8. Storage period

Your content remains stored until you delete it in the app or remove the app. With iCloud sync enabled, Apple's storage rules apply additionally. Purchase-related data is stored by RevenueCat for as long as it is required to provide the purchased features and to comply with statutory retention obligations under tax and commercial law.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

10. Right to withdraw consent

You have the right to withdraw any consent given to the processing of your personal data at any time with effect for the future.

Contact

If you have questions about the processing of your personal data or about this privacy policy, please contact us:

This privacy policy was last updated on 4 August 2026.