Tudots
Privacy Policy
Last updated 12 October 2026
- Your tasks stay on your phone and in your private iCloud.
- Only what you ask the Dots is sent to us and OpenAI, with your permission, to answer you.
- We don't store your requests. OpenAI doesn't train on them.
- No ads, no tracking, no analytics, no account.
Read the full privacy policy
Tudots is a to-do app with two AI assistants called the Dots. This policy explains what leaves your phone, why, what we do with it, and your rights.
Who is responsible
The controller under the GDPR is the company that publishes Tudots (as shown on the App Store), a company registered in Bulgaria. Contact: through the App Store page.
Your tasks
Your tasks, reminders and progress are stored on your device. If iCloud is on, they sync through your own private iCloud database, which Apple runs and we cannot see.
The Dots, the AI assistants
The Dots only work after you allow them in the app (you can turn them off any time under ⋯ → “The Dots may use AI”). When you ask the Dots something, we send:
- what you typed or said (as text), and the language you use;
- the titles, dates and times of your upcoming tasks and plans, so the Dots know what's already planned;
- today's date, your time zone and the last few messages of the conversation;
- an anonymous code made from the random install ID (it can't be traced back to you), so OpenAI can stop a single person who misuses the Dots without affecting everyone else.
To keep the Dots safe, every message is first checked by OpenAI's moderation for harmful content such as violence or hate. Messages it flags are not answered.
This goes to our server (hosted by Hetzner in the EU) and from there to OpenAI, which writes the Dots' answer. We don't store your requests: they are processed and forgotten. Our server logs keep only technical details (time, cost, errors), never what you asked. OpenAI does not use data sent through its API to train its models, and may keep it for up to 30 days to detect abuse before deleting it (OpenAI's API data policy). OpenAI is based in the United States; the transfer is covered by OpenAI's data processing terms.
Simple requests like “Gym tomorrow at 9” are handled on your phone and never leave it.
Voice
For English, German, Spanish, French and Dutch, speech is turned into text by Apple's speech recognition (see Apple's privacy policy). If you choose “Other language”, the recording is sent to our server and to OpenAI to be written down, then discarded. Recordings are never stored.
Limits and Premium
The app creates a random ID when installed, unrelated to you or your device. It is sent with each request so we can count requests per day. For Premium, the app sends Apple's signed proof of your subscription so our server can check it is valid. Payments are handled entirely by Apple; we never see your payment details. These counts are kept in memory only and reset daily.
Counting steps
The app tells our server when someone reaches a step, for example “saw the paywall” or “started the free trial”, so we can see where people get stuck and improve Tudots. Only the step's name is sent: no ID, no text, nothing about you. We store just the daily totals, so these counts can't be linked to anyone. Legal basis: our legitimate interest in improving the app (Art. 6(1)(f) GDPR).
Friends
Only if you turn on Friends: your nickname, your friend code, and how many tasks you finished each day this week (and your streak) are stored in the app's public iCloud database, so friends who have your code can see them. Never the tasks themselves. Turning Friends off deletes this.
Why we may use your data (legal bases)
- Answering your requests to the Dots, including voice in “Other language”: your consent (Art. 6(1)(a) GDPR), given in the app. The Dots are optional; the rest of Tudots works without them.
- Checking your Premium subscription: to provide what you bought (Art. 6(1)(b) GDPR).
- Daily limits, the safety check of messages, abuse prevention and technical logs: our legitimate interest in keeping the service safe, fair and affordable (Art. 6(1)(f) GDPR).
- Friends: your consent, given when you turn Friends on.
Who processes data for us
- Apple Inc.: iCloud, App Store payments, speech recognition and notifications.
- Hetzner Online GmbH, Germany: hosts our server in the EU.
- OpenAI, L.L.C., USA: writes the Dots' answers and turns speech in “Other language” into text, as our processor. Data sent to the United States is protected by the European Commission's Standard Contractual Clauses in OpenAI's data processing agreement.
When we might share data
Only with the processors above, or if the law requires it (for example a valid request from an authority or court). If Tudots were ever sold or transferred, this policy would continue to apply to your data, and we'd tell you first.
How long data is kept
- Your requests to the Dots and voice recordings: only while they are being answered; we never save them, and they never appear in our OpenAI account. OpenAI may keep them for up to 30 days to detect abuse, then deletes them.
- Request counters and the subscription check: in memory, cleared every day.
- Technical server logs (time, cost, errors, never your words): at most 30 days.
- Step counts (anonymous daily totals): 90 days.
- Friends data: until you turn Friends off.
- Your tasks: on your phone and in your iCloud, for as long as you keep them.
Security
Everything sent to our server is encrypted in transit (HTTPS). We keep as little as possible: no account, no profile, no request history.
Notifications
Reminders, the evening check-in and today's tasks on the Lock Screen are all handled on your phone. To send the check-in at a good moment, the app remembers on your phone when you usually use it in the evening (the last three weeks only). Nothing about this is sent to us.
This website
This website uses no cookies, no analytics and no third-party fonts or scripts.
Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format. You can withdraw your consent at any time (turn off ⋯ → “The Dots may use AI”, or turn Friends off); this doesn't affect what happened before. Because we don't store your requests, there is usually nothing to hand over; Friends data can be removed in the app. To use your rights, contact us through the App Store page. You also have the right to complain to a data protection authority: in Bulgaria the Commission for Personal Data Protection (cpdp.bg), or the authority where you live.
If you live in the United States
We don't sell or share your personal information, and we don't use it for targeted advertising. You can ask us what we hold about you and ask us to delete it, and we won't treat you differently for asking.
No automated decisions
The Dots suggest tasks and plans; they make no decisions about you with legal or similar effects.
Children
Tudots is not directed at children under 13.
Changes
If this policy changes, the date above changes too, and anything important is mentioned in the app.