Todo Buttons

Privacy Policy

Last updated: 27 October 2026

This Privacy Policy explains what personal data the Todo Buttons app collects, why we collect it, how it is handled, and the rights you have over it. Todo Buttons is an independent app: we show no ads, use no analytics, and never sell or share your data with advertisers or data brokers.

1. Who is responsible

The data controller responsible for your personal data is Bright Brain Games Studio d.o.o. For any privacy question, or to exercise any of the rights below, email us at privacy@brightbraingames.com.

2. What we collect and why

We collect only what the app needs to work:

• Account — your email address and, optionally, your name: to create your account and sign you in. Legal basis: performance of our contract with you.
• Your content — your lists, todos, and their timestamps: to provide the service and sync it across your devices. Legal basis: performance of our contract with you.
• Sharing — when you invite someone, the email address and role you give them: so they can join your list. Legal basis: our legitimate interest in offering shared lists.
• Preferences — your language and invitation settings: to remember how you like the app to behave. Legal basis: your consent.
• Google profile photo URL (Google sign-in only) — to show your avatar in the app. Legal basis: performance of our contract with you.

We do not track your device location, collect advertising identifiers, or access your address book. Calendar event locations and free-text descriptions may contain personal information. We do not request sensitive information unrelated to the service, and we run no third-party analytics or advertising SDKs.

3. Where your data is stored

Your data is stored with Google Firebase (Firebase Authentication and Realtime Database), which acts as our data processor, and is encrypted in transit. Google may process data on servers outside your country under its own safeguards. The app is hosted on Namecheap. Aside from the optional Google Calendar connection described in section 8, we use no other third-party services.

Saved copy on your device. So the app can open instantly and work offline, it keeps a copy of your most recently synced lists, todos, schedules and task lists, your own calendar events and tasks for the last month you viewed, your calendar display settings, and your account name, email address and profile photo link in this browser’s local storage. The copy is shown grayed out until fresh data arrives and is replaced whenever your data syncs. It does not include guests’ email addresses, invitations, notifications or Google Calendar events. It is on by default; turning off “Show saved data while loading” in Profile → Todo settings deletes it from that device. Signing out or deleting your account removes it from the device you are using; on other devices it is removed the next time the app opens there and finds you signed out. You can also remove it at any time by clearing this site’s data in your browser.

4. How long we keep it

We keep your data only while your account exists. Deleting a todo, a list, or your account removes that data immediately and permanently — there is no separate archive we retain or can restore from.

5. Your rights

Under the GDPR and similar laws, you have the right to:

• Access and portability — download a full copy of your data from the “Privacy & your data” screen in the app.
• Rectification — edit your name at any time in your profile.
• Erasure — permanently delete your account and all associated data from the app.
• Objection and restriction — contact us to limit how we use your data.
• Complaint — lodge a complaint with your local data protection authority.

6. Children

Todo Buttons is not directed at children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

7. Data security

Access to your data is protected by Firebase Authentication and by server-side security rules that restrict each record to the users entitled to it. Data is encrypted in transit.

8. Optional Google Calendar connection

Google Calendar is optional, read-only, and separate from sign-in. You can connect up to five Google accounts using calendar.readonly. Events load directly from Google into browser memory; the “Keep events on this device” setting, on by default, saves a local snapshot so events appear immediately when you reopen the app; you can turn it off in settings, which deletes the snapshot. Events are never stored on our servers or included in your data download. Legacy browser-only connections save short-lived access tokens on this device and attempt browser authorization when access expires. Where persistent connections are enabled, settings identify the saved connection: Firebase stores your connected-account address and encrypted Google credentials, using Google Cloud Functions and Cloud KMS for on-demand renewal. Short-lived access tokens stay in browser memory; refresh tokens stay on the server. Saved connections belong to your Todo Buttons account and work across devices. Signing out clears local access and snapshots but retains saved server connections. Disconnect or account deletion removes saved credentials and attempts Google revocation; a temporary deletion fence is removed after server cleanup. You can also revoke permission in Google Account settings. Data downloads include saved connection details, never credentials or Google event content. Original Google events are not deleted. Our use of Google API information follows the Google API Services User Data Policy, including its Limited Use requirements.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with an updated “Last updated” date.

10. Contact

Bright Brain Games Studio d.o.o. — privacy@brightbraingames.com