The short version
What you need to know
- On Lite, your plans stay on your phone. Your tasks, lists, habits and days live on your device and never sync to us.
- On Pro, we sync them so they're on all your devices and backed up.
- We keep your email if you give it to us, to send tips (only if you say yes) and to let you sign in.
- When you use the AI features, the words they need go to our AI provider to get an answer. We don't keep them, and they aren't used to train AI models.
- We count how the app is used (which screens and buttons, never what you write), so we can make it better.
- We never sell your data, and there are no ads or ad trackers in the app.
- You can export or delete everything, from Settings, any time.
Who we are
Who's responsible for your data
Yoodoo is made by Yoodooapp Ltd ("Yoodoo", "we", "us"). We're the controller of the personal data described here. This policy covers the Yoodoo apps on iPhone, Android, web and desktop, and this website.
Questions about privacy? Email us at [email protected].
What we collect
What we collect, and why
Your email, if you give it to us
During setup we ask where to send your Yoodoo tips. You can type an email, use Continue with Apple or Continue with Google (which just fills in your email), or skip it. We store your email, where it came from, whether you said yes to tips, and a record of each time you said yes or no (with the date, the app install it came from, and a scrambled, one-way version of your IP address, so we can show consent was given). If you said yes, we send you tips by email. Every email has a one-click unsubscribe.
Why we're allowed to: tips are sent only with your consent. Keeping the consent record is our legal obligation.
Your account, if you have Pro
When you get Pro, you can sign in with the same email, using a link or a 6-digit code we send you. That creates your account and turns on sync.
Why: to provide the service you've asked for (our contract with you).
Your plans, if you have Pro
With Pro, what you put in Yoodoo syncs between your devices and is backed up: your tasks and their steps, lists, habits, routines, day templates, your days and wrap ups, focus time, tags, and your settings (including your name and the answers you gave during setup). If you send tasks to your calendar, we also keep the link between each task and its calendar event (the event's id, title and times), so a change on one side reaches the other.
On Lite, none of this leaves your phone.
Why: to provide the service (our contract with you).
Purchases
Subscriptions are bought through the App Store, Google Play or, on the web, Stripe. We never see your card details. Our subscription provider, RevenueCat, tells the app what you've bought, linked to an anonymous id for your install and, once you sign in, your account.
Why: to give you what you paid for (our contract with you).
How the app is used
We record what happens in the app, such as finishing setup, building your first day, opening a screen, seeing the Pro screen or buying, linked to an anonymous id for your install. These events never include what you write: no task names, lists or notes. We use PostHog for this, on its servers in the US, under a data processing agreement that covers sending data outside the UK and EU.
Why: our legitimate interest in understanding what helps and fixing what doesn't.
Crashes and speed
When the app crashes or runs slowly, we get a technical report through Sentry: what went wrong, the app version, your device type and system version. We've set it up to send nothing about you: no name, no email, no words from the app.
Why: our legitimate interest in keeping the app working.
Ask Yoodoo and AI
What happens when you use the AI
Some features use AI: Ask Yoodoo, Plan it for me and Create with AI for a task's steps. When you use one, the app sends our server only what that feature needs, and our server passes it to our AI provider, Anthropic, for an answer:
- Ask Yoodoo: what you typed or said, today's tasks and calendar events (names, times, lengths, done or not), the names of your lists, templates and habits, and your last question and its answer.
- Plan it for me: the tasks you picked (names and lengths, under short codes instead of ids), your free times, your energy and the day's priority.
- Steps: the task's name, its length and any steps you've already written.
Our server doesn't log these words. It keeps only a count of how often each install uses the AI each day, to stop misuse, and even that count is stored under a scrambled, one-way code, never your IP address or install id. Anthropic doesn't use what we send to train its models. The AI only suggests: nothing in your day changes until you see it and say yes.
Google user data
Google Calendar on the web
On app.yoodoo.app you can connect Google Calendar, so your events show on your timeline. Google asks you first. Yoodoo asks to read your calendars (calendar.readonly), so your events show on your timeline, and to add and update events (calendar.events), only for the tasks you choose to send to your calendar and only for those events. Your browser talks to Google directly. Your events stay in that browser and never go to our servers, and we never store them, sell them or use them for ads. On Pro, we keep only the link between a task you sent and its event (the event's id, title and times), as we do on the phones, so a change on one side reaches the other. The access Google gives us lasts about an hour, stays in that browser tab, and is never saved. You can disconnect in Yoodoo's Settings, or remove Yoodoo's access at any time from your Google Account's security settings.
If you use Ask Yoodoo or Plan it for me, the names and times of that day's events (or just your free times, for Plan it for me) go with your request to the AI, as described in What happens when you use the AI, only so it can plan around them. Our AI provider, Anthropic, doesn't use this data to train its models, and neither do we.
Yoodoo's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We never use Google user data, raw, aggregated or derived, to create, train or improve any AI or machine learning model, ours or anyone else's.
What stays on your phone
What never reaches us
- Your name, on Lite. It's used to greet you. On Lite it stays on your device; on Pro it syncs with your settings.
- Your calendar. Yoodoo reads your calendars through your phone's own calendar, with your permission, to show events on your timeline. Events stay on your phone. (On Pro, only the links for tasks you send to your calendar sync, as above.) On the web, you can connect Google Calendar instead: see Google Calendar on the web.
- The app blocker. On iPhone it works through Apple's Screen Time. Apple keeps your choice of apps, and Yoodoo can't see which apps you picked. On Android it uses Usage access, to know which app is open, and Display over other apps, to show the block screen. A stricter mode uses Accessibility, only if you turn it on. It never reads what's on your screen. On both, your list of apps and your reasons for unblocking stay on your phone.
- Photos on a task. They stay on your phone and don't sync.
- Notifications and alarms are scheduled on your phone. We don't use push notifications.
- Widgets, Live Activities and Siri read from the app on your phone.
- Everything on Lite. Your tasks, lists, habits and days stay on your device.
Because Lite stays on your device, deleting the app deletes it. Export it first if you'd like a copy.
How long we keep it
How long we keep it
- Your email and consent record: until you delete them. If you unsubscribe, we keep your email only to remember not to email you tips, plus the record of your choice.
- Your Pro account and synced plans: until you delete your account. If your Pro ends, your data stays on your phone.
- AI requests: our server doesn't keep the words. Anthropic keeps API data only briefly, under its own terms, to run and secure its service.
- App events and crash reports: as long as they're useful for improving Yoodoo, and never with anything you've written.
- Usage limits: daily counts under a scrambled code, cleared as they expire.
Your rights
Export it, fix it, delete it
Your data is yours. In the app, go to Settings, Data and privacy:
- Export everything as one file, any time, on Lite or Pro.
- Delete my account and data. This wipes Yoodoo on your phone. On Pro, it also deletes your account, everything synced and your email record. Without an account, we email you a one-time link (valid for 24 hours) that deletes your email and consent record.
- Unsubscribe from tips with the link in any email.
Depending on where you live (including under the UK and EU GDPR, and laws such as California's), you can also ask us to show you, correct, delete or move your data, or to stop or limit how we use it. Where we rely on your consent, you can withdraw it at any time. Email [email protected] and we'll reply within a month.
If you're not happy with how we've handled your data, you can complain to your data protection authority, such as the Information Commissioner's Office in the UK or the authority where you live in the EU. We'd love the chance to fix it first.
This website
This website
yoodoo.app doesn't use cookies. We count visits with PostHog, on its servers in the US, in its cookieless mode: we see which pages are read, which link or email brought someone here, and when someone taps through to a store, but nothing that identifies you is stored on your device, and we can't recognise you from one day to the next. Some pages load a font from Google Fonts, which means your browser asks Google's servers for it.
Children
Children
Yoodoo isn't for children under 13, and we don't knowingly collect data from them. If you think a child has given us their email, email us and we'll delete it.
Changes
If this policy changes
We'll update the date at the top. If a change matters, like a new kind of data or a new company handling it, we'll tell you in the app before it applies.
Contact
Questions?
Every message gets read, and answered.
Email [email protected]