Consumer health data privacy policy
Health data we collect and why
We don’t ask you to share health conditions or medical details. This policy covers information you may choose to add, and what using the app could reveal.
Energy levels you report. Used to size task steps and plan focus sessions and breaks.
Health details in what you add. Tasks, Brain Dump text, photos, and voice notes may include health information if you choose to add it. Used to create your steps and run the features you choose.
How you use support features. Your focus sessions, breaks, reminder times, check-in hour, and energy reminder choice may suggest attention, energy, or executive function needs. Used to run those features and send the reminders you set.
Feedback you send, if it includes health details. Used to respond to you and fix problems.
General example summaries, only if you turn on “Share general examples.” Short summaries of what you add, with specific health details removed but the general health topic possibly kept. Used to improve To Do-ish, which may include training AI models in the future.
We collect and use health data only as necessary to provide the features you request, or with your consent. We do not use health data for advertising.
Where it comes from
You, when you use the app or contact us.
Your device, such as app settings and activity.
Service providers that process it for us, such as AI providers that create steps from what you add.
Who receives it
We do not sell consumer health data. We do not share it with third parties or affiliates. We disclose it only to processors: service providers that handle it on our behalf, under terms that limit their use of it to providing services to us. These are:
AI providers, to create steps, screen content for safety, turn voice notes into text, read text aloud, and, if you turn on general examples, write summaries.
Our hosting and database provider, to store your data and run our servers.
Our messaging provider, to send reminders and notifications. It receives your check-in hour and energy reminder choice, not your energy levels or task content.
Our analytics provider, for usage analytics only if you turn it on (screen recordings hide what you enter), and for feedback you submit.
We may also disclose health data if the law requires it, or to a successor company as part of a merger, acquisition, or transfer of the app. A successor would remain bound by this policy.
Consent
Both optional sharing settings are off unless you turn them on. We will ask for your consent before using health data for any purpose not described here, or before sharing it with a third party.
Your rights
Confirm and access. Ask whether we collect, share, or sell your health data, and get a copy of it.
List of recipients. Get a list of all third parties and affiliates with whom we have shared your health data, with contact information. We currently share it with none.
Withdraw consent. Turn off optional sharing in Settings, or email us.
Delete. Delete your account in the app or email us. We delete your health data from our systems, including backups, and tell our processors to delete it too. Backup copies are overwritten within 7 days.
Appeal. Appeal if we deny your request.
How to make a request
Email hello@todoish.app with “Health data request” in the subject line. We verify requests through your account email and respond within 45 days.
If we deny your request, reply with “Appeal” in the subject line. We will respond in writing within 45 days and explain our decision. If we deny your appeal, you may contact your state attorney general. Washington residents can file a complaint with the Washington State Attorney General at www.atg.wa.gov.
We will not treat you differently for using these rights.
Changes and contact
We will tell you about important changes to this policy before they take effect, and we will ask for your consent before using health data in a materially different way.
Questions or requests: hello@todoish.app.
To Do-ish is a daily support tool and not a replacement for therapy or medical care.