Privacy Policy

Last updated 4 October 2026

Thoughts To Do is a journal. What you write in it is the most personal thing this app holds, and this page says plainly what happens to it, who else ever sees it, and how to get rid of it.

What the app stores

• Account: Your email address, and your name and profile photo if you sign in with Google or Apple. Used to sign you in and to keep your journal attached to you.
• Your journal: The pages you write, the to-dos taken from them, and the lists those to-dos are filed under. Kept until you delete them or delete your account.
• Voice notes: Audio you record is sent to be transcribed and is not kept afterwards, by us or by the transcription service. The transcript becomes part of your page; the recording does not survive the request.
• Photographed notes: A photo you take of a handwritten note is sent to be read and is not kept afterwards, by us or by the reading service. The words it finds are shown to you for checking before they go anywhere, and only what you accept becomes part of your page. The photo itself stays on your device until then, and is deleted once its text has landed.
• Imported documents: If you import a Google Doc, its text is copied onto your page. The app reads the document you point it at, once, at the moment you ask.
• Subscription: Whether your subscription is active, when it renews, and a store transaction identifier. Payment details never reach this app. Apple or Google handles the money and does not share your card with us.

• How the app is used: Counts and outcomes, never content: that a page was processed and how many to-dos came out of it, whether a note was spoken, typed or photographed, how long a spoken note took, that Undo was tapped, that the subscription screen was seen. Nothing you write, say or photograph is ever part of this, and the app enforces that rather than relying on care. Recorded with Google Analytics for Firebase against a random identifier for this installation. That is not your name, not your email, and not the advertising identifier, which the app does not read.
• Crash reports: When the app crashes, a report of where in the code it happened, the device model and operating system version, sent with Firebase Crashlytics so the fault can be fixed. It contains no journal content.

Who else sees it

Your journal is not sold, rented, or used for advertising. It is not read by us for any purpose other than fixing a fault you have asked us to fix. Two services process it on our behalf, both under contract and neither permitted to use it for their own purposes:

• Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics, Crashlytics): stores your account and your journal, runs the app's server code, and receives the usage counts and crash reports above.
• Google Cloud Vertex AI (Gemini): transcribes voice notes, reads photographed notes, and reads a page to pull out the to-dos in it. Content sent to Vertex AI is not used to train Google's models.

We will also disclose data if the law actually requires it, meaning a court order rather than a request, and will tell you unless we are forbidden to.

Where it is kept, and for how long

Data is held on Google Cloud servers in the United States. Your journal stays until you delete it. Delete your account and everything above goes with it, immediately and without a copy kept. See deleting your account.

Your choices

• See it: everything the app holds about you is visible inside the app.
• Delete it: a page, a to-do, or the whole account, from inside the app.
• Get a copy, or ask a question about any of this: write to the address below and we will answer.

If you are in the UK, EU, or California, the rights your law gives you (access, correction, deletion, portability, objection, and the right to complain to your regulator) apply here, and the same address is where to exercise them.

Children

Thoughts To Do is not intended for children under 13, and we do not knowingly hold an account belonging to one. If you believe a child has made an account, write to us and it will be removed.

Security

Data is encrypted in transit and at rest. No other user can read your journal: access from the app is limited to the account that owns it. It is not end-to-end encrypted: our server and the services above read it in order to transcribe, read and organise it, and the people who run the app could technically see it. We do not look at it except to fix a fault you have asked us to fix, and every access to stored journal data is recorded in an audit log. No system is perfect; if a breach ever affects your data we will tell you and the relevant regulator promptly.

Changes

If this policy changes in a way that matters, the app will say so before the change takes effect rather than quietly editing this page.

Contact

Playpen Studios is the data controller for Thoughts To Do. Write to hello@playpenstudios.in.