← Back to home

Privacy Policy

This Privacy Policy explains how TrueDo collects, uses, shares, stores and protects your personal information when you use the TrueDo app for iPhone and iPad and the related services we provide (together, the "Service"), and the choices and rights you have. In this policy, "TrueDo", "we", "us" and "our" mean Ashish Jha, the individual developer who provides the Service. Please read it together with our Terms of Service. If you do not agree with this policy, please do not use the Service.

Effective October 6, 2026

1. Key points

We collect the information you give us, such as your account details and the content you create, and the limited technical and usage information we need to run the Service.
Your data is stored with Google Firebase. It is encrypted in transit and at rest, and some profile fields get an extra layer of encryption, but your tasks, money, health logs, notes and other content are not end-to-end encrypted (section 9).
TrueDo AI is optional and stays off until you turn it on. When it is on and you use an AI feature, the data that feature needs, including your first name, is sent to Google Gemini, which does not use it to train its models. Your email address, password, location and locked Vault items are never sent (section 6). You can turn TrueDo AI off at any time in Profile → AI & your data.
Apple Health access is optional and read-only: steps, active energy and sleep. TrueDo never writes to Apple Health.
We do not sell your personal information, show ads, use third-party advertising, analytics or tracking SDKs, or track you across other companies' apps and websites.
You can edit, export and delete your data, and delete your account, in the app at any time (section 15).

2. Who we are

TrueDo is a personal organiser for your tasks and habits, money, health journal and private notes and documents. It is developed and operated by Ashish Jha, an individual developer based in India, who is responsible for your personal information under this policy (the "controller" under the EU and UK GDPR, and the "data fiduciary" under India's Digital Personal Data Protection Act, 2023).

You can contact us at ashishjhadeveloper@gmail.com. Our grievance officer is named in section 18.

3. Information we collect

3.1 Information you give us

Account details — your email address and how you sign in. If you sign up with an email address and password, your password is handled by Google Firebase Authentication and is never visible to us. If you use Sign in with Apple or Sign in with Google, we receive the name and email address that Apple or Google shares with us (Apple lets you hide your real email address). We never receive your Apple or Google password.
Profile — your name, an optional profile photo, an optional @username, and your settings (for example currency, appearance, notifications, and TrueDo's personality and writing style).
Tasks and habits — tasks and subtasks, categories, dates and reminders, habits and their history, counters and timers.
Money — the accounts and balances you enter, transactions, categories, budgets, savings goals, assets and investments you add, recurring payments and subscriptions, and your Dues (the names of people and the amounts you record as owed). We do not connect to your bank, card or payment accounts and do not import transactions automatically: TrueDo holds only what you enter.
Health journal — if you use Health: your health profile (such as age, sex, height, weight, goal weight, activity level, sleep and lifestyle habits and food preferences), the meals, weight, steps and other entries you log, your groceries and favourite foods, and your health score.
Shared food list — when TrueDo works out the nutrition of a food it hasn't seen before (for example, what one idli weighs and its calories per 100 g), that food's name and nutrition are added to a food list shared by all TrueDo users, so the next person can log it without AI. It is anonymous: it never includes who added it, when or how much you ate, or anything else about you. Your own entries and any numbers you change stay in your account only.
Vault — notes (including images you add to them), documents, photos and albums, voice notes and their transcripts, saved links and folders, including anything you choose to write in them, such as passwords or other secrets.
TrueDo AI — if you turn TrueDo AI on: your conversations with TrueDo (your chat history), files you attach to a chat, and what TrueDo remembers about you ("AI memory").
Sharing — the people in your Circle, what you share and with whom, and invitations you send or receive.
Support — the messages and information you send us when you contact us.

If you enter information about other people (for example, names in your Dues list), please make sure you are allowed to. We use it only to provide the Service to you.

3.2 Information from Apple Health (optional, read-only)

With your permission, TrueDo reads your daily steps, active energy and sleep from Apple Health to show them on your Health page, in your reports and in your health score. These daily totals are saved with your other health data so your history keeps working. TrueDo reads no other Apple Health data and never writes anything to Apple Health. We never use Apple Health data for advertising or marketing, never sell it, and never share it with third parties for their own purposes. It is processed only on our behalf by our service providers: Google Firebase stores it and, only if TrueDo AI is on and you use an AI feature that needs it, Google Gemini processes it to answer you (section 6). You can stop access at any time in iOS Settings → Health → Data Access & Devices.

3.3 Information collected automatically

Usage records — to run the Service, manage its costs and apply plan limits, the app keeps one usage record per day for your account. It counts app opens, AI requests and AI usage and how often features are used, and notes your plan and trial status, app version, platform and the email address on your account. It never contains the content of your tasks, notes, money, health data or conversations. We do not use third-party analytics, advertising or crash-reporting SDKs.
Plan and allowance — your plan, trial dates and how much of your daily AI allowance you have used, so that limits work across your devices.
Technical data — like any internet service, our service providers receive technical information when the app connects to them, such as your IP address, device and operating system type and app version, which they use to deliver and secure their services.
Notification token — if you allow notifications, a device token so that collaboration notifications can reach you (section 7).

We do not request location permission or collect location data from your device, and we do not collect your contacts, browsing history or advertising identifiers.

4. Device permissions

Every permission is optional, is requested only when you first use the feature that needs it, and the rest of the app keeps working if you decline. You can change any of them later in iOS Settings.

Camera — to scan a meal with the AI food scanner, or to take or scan a photo or document for your Vault.
Photo library — to add the photos you pick, for example to your Vault, a note, a meal estimate or a chat.
Microphone — for voice typing and recording voice notes, and only while you are using one of these features.
Speech recognition — to turn your speech into text while you dictate, using Apple's speech recognition (section 6.5).
Apple Health — read-only access to steps, active energy and sleep, as described in section 3.2.
Face ID — to unlock locked Vault folders and albums. Face ID is handled entirely by iOS; your face data never reaches TrueDo or our servers.
Notifications — for the reminders and summaries you choose and for collaboration alerts. You can switch each type off in Profile → App settings → Notifications.

5. How we use your information

To provide the Service: store and sync your content across your devices and run features such as reminders, reports, widgets, search, sharing and backups.
To create and secure your account and sign you in.
To provide TrueDo AI when you have turned it on (section 6).
To process TrueDo Pro subscriptions and apply plan limits, such as the daily AI allowance.
To keep the Service safe: prevent abuse, fraud and misuse, enforce our Terms of Service and handle reports.
To understand, in aggregate, which features are used and what the Service costs to run, so that we can maintain and improve it.
To send you service messages (for example about security, your account or changes to our policies) and to respond to your requests.
To comply with the law and respond to lawful requests from public authorities.

We do not sell your personal information, use it for advertising or marketing profiles, or use it to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

6. TrueDo AI and Google Gemini

6.1 AI is optional. TrueDo includes an optional AI assistant, also called TrueDo, powered by Google's Gemini API. TrueDo AI stays off until you agree to turn it on, and you can turn it off at any time in Profile → AI & your data. When it is off, nothing is sent to Gemini and every other feature keeps working.

6.2 When data is sent. Data is sent to Google Gemini only while TrueDo AI is on, and only when you use an AI feature:

chatting with TrueDo, including any photo, PDF or text file you attach;
voice typing when TrueDo AI is on (section 6.5);
transcribing, translating or summarising a voice note, or listing its action items;
"Write with TrueDo" in a note;
estimating a meal from a photo or a description, and recipe ideas from your groceries;
the AI summaries on the Tasks, Money and Health pages, and the monthly spending report in Reports (Pro). Some of these are created automatically while TrueDo AI is on, for example when you open Tasks or Money after your data has changed, so you do not need to ask for them each time.

6.3 What is sent. Each request contains what you asked, together with the TrueDo data the feature needs to answer. Depending on the feature, this can include:

your first name;
your tasks, habits, counters and categories;
your money figures, such as account names and balances, budgets, savings goals, recurring payments, recent transactions, and the names and amounts in your Dues;
your health profile and health logs, including the daily totals read from Apple Health;
the names of notes, documents, links and albums in the unlocked parts of your Vault (not their contents, unless you ask TrueDo to work on a specific item, for example to transcribe a voice note or to add to a note);
what TrueDo remembers about you, and your chosen AI personality and writing style;
for voice typing with TrueDo AI on, the recording of that dictation.

6.4 What is never sent. Your email address, your password or other sign-in details, your location, your payment details (which we never have), and anything in a locked Vault folder or locked item, not even its name: TrueDo AI is only told how many locked items there are. The only exception is when you unlock an item yourself and ask TrueDo AI to work on it (for example, to transcribe a voice note); that item is then sent for that request.

6.5 Voice typing. Voice typing uses Apple's speech recognition, which may process your audio on your device or on Apple's servers under Apple's privacy policy. When TrueDo AI is on, the recording of that dictation is also sent once to Google Gemini to make the text more accurate (for example, for Hinglish).

6.7 AI memory. To be more helpful, TrueDo can remember lasting facts you share, such as a goal you are saving for, and after a conversation it may use Gemini to update this memory. The memory is stored in your account with an extra layer of encryption (section 9) and is included in your AI requests. You can ask TrueDo to forget something at any time, and deleting your account deletes it.

6.8 How Google handles AI data. Our Gemini API project is a paid service. Under Google's terms for paid services, Google does not use your prompts (including files such as images, documents and audio) or its responses to improve its products, including to train its models. Google processes them to generate responses, logs them for a limited period (currently up to 55 days) solely to detect and prevent abuse and breaches of its Prohibited Use Policy, and may have them reviewed by authorised Google personnel for that purpose. Google may also cache data in memory for up to 24 hours, and may process data in any country where it or its agents have facilities. Google processes this data as our service provider under its data processing terms. See Google's Gemini API terms (https://ai.google.dev/gemini-api/terms).

6.9 Our AI relay. AI requests travel through a relay that we run on Cloudflare Workers. It checks that you are signed in, applies usage limits and passes your request to Google. It does not store the content of your requests; it keeps only short-lived usage counters linked to your account ID, which expire within 24 hours. Cloudflare processes this traffic as our service provider.

6.10 Safety and accuracy. Requests and replies pass through Google's safety filters, and harmful, illegal or abusive requests are blocked. AI output can be wrong; please see our Terms of Service. TrueDo AI is intended only for users aged 18 or over (section 14).

7. Sharing and collaboration

7.1 Your username. If you choose an @username, we create a directory entry so that people can find you. It contains your username, name, profile photo, the email address on your account and a notification token. This entry can be read by other signed-in TrueDo users, who can find you by your exact username or email address. If you do not want to be findable, do not choose a username.

7.2 Sharing items. When you share a task, note, file, folder, album, link or Dues balance, everyone you share it with can view and edit it, and they see your name, username and profile photo. Shared items stay in your account; the people you share with access them through a sharing record that contains the account IDs and names of both of you. You can stop sharing, or remove someone from your Circle, at any time, but we cannot remove copies they have made or what they have already seen.

7.3 Invitations and notifications. When you invite someone or share something with them, their device is notified through Expo's push notification service (operated by 650 Industries, Inc.) and Apple Push Notification service. The notification contains your name and a short description, such as "shared a note with you". Invitations are kept with their status (pending, accepted or declined) and are deleted if either of you deletes your account.

7.4 Invite links. You can also invite someone with a link that you send with any app. The link record contains your name and username, the title of the item and when the link expires (after 14 days at most). Anyone who opens the link while it is active, and is signed in to TrueDo, can join that one item and edit it. You can stop a link at any time by removing people from the item, which also turns its links off.

7.5 Who is editing. While you edit a shared note, the people on that note can see your first name and that you are editing it. This status is removed when you stop, and is treated as gone after about a minute if the app closes.

7.6 Leaving. You can leave anything shared with you at any time. Leaving removes your access; the item stays with its owner.

8. Service providers and other disclosures

We share personal information only as described in this policy: with service providers that process it on our behalf under contracts or terms that limit how they may use it, with the people you choose to share with, and in the limited cases below. We do not sell or rent personal information, and we do not share it for targeted advertising.

Google (Firebase Authentication, Cloud Firestore and Cloud Storage for Firebase) — your account and sign-in, and the storage and sync of your data and files.
Google (Gemini API) — TrueDo AI, only when it is on (section 6).
Google (website icons) — to show icons for links you save, the app requests each site's icon from Google's favicon service, which receives the website's domain name.
Cloudflare — runs our AI relay (section 6.9) and the service that provides the key for the extra profile encryption described in section 9.
Apple — the App Store, In-App Purchase, Sign in with Apple, Apple Health, push notification delivery, speech recognition, and iOS features such as widgets and Spotlight search.
RevenueCat — manages TrueDo Pro subscriptions. It receives your TrueDo account ID, your purchase and subscription information from Apple, and basic device information. We never receive your card details.
Expo (650 Industries, Inc.) — delivers collaboration notifications (section 7.3).
Market-data providers — when you search for or add stocks or Indian mutual funds, the app requests prices from Yahoo Finance or mfapi.in. Only the search term or symbol is sent, not your holdings or identity, although these services can see your IP address.
Websites you save — when you save a link, the app fetches the page directly from that website to show its title and preview image.
Google Sign-In — if you choose Sign in with Google, Google authenticates you under its own privacy policy.

We may also disclose information: if required by law, regulation, legal process or a lawful request by public authorities; to protect the rights, property or safety of our users, the public or us, including to prevent fraud and abuse and to enforce our Terms of Service; with your consent or at your direction; or if ownership of TrueDo is transferred (for example, if the app is sold), in which case we will notify you and the new owner must honour this policy.

9. How we store and protect your data

You need an account to use TrueDo. Your data is kept on your device and synced to our backend on Google Firebase, tied to your account, so that you can use it on more than one device. Google stores this data in its data centres, which may be outside your country (section 11).

In transit — data travelling between the app and our service providers is encrypted with TLS.
At rest — Google encrypts stored data by default.
Extra encryption for some profile fields — your name, profile photo link, AI memory, AI personality and writing style and health profile are additionally encrypted in the app before they are stored, with a key that our server on Cloudflare derives from a secret and your account ID. This protects them in database exports and from casual viewing, but it is not end-to-end encryption: the key is available to your signed-in app and, technically, to us.
Everything else is not end-to-end encrypted — your tasks, habits, money, health logs, notes, documents, photos, links and chats are protected by access controls and by Google's encryption, but they are not end-to-end encrypted and could technically be accessed by us. We do not access your content except where needed to operate, secure or support the Service, to investigate a report of abuse, at your request, or where the law requires it.
Vault lock — your Vault passcode is never stored; only a salted one-way hash is kept so that it can be checked. Locking a folder or album with your passcode or Face ID keeps it behind the lock in the app. This is an access control, not an extra layer of encryption, so the contents of locked folders and albums are stored like the rest of your data. Notes that were locked individually in earlier versions of TrueDo remain encrypted with a key derived from your passcode (scrypt and XSalsa20-Poly1305) until you next open them; that key is kept in your device's keychain and is never stored in our database.
Access controls — our database and file storage are set up so that your data can be accessed only by your signed-in account and by the people you share with (apart from your username directory entry, section 7.1).

No system is completely secure. Please use a strong, unique password and protect your device with a passcode. If a security breach affects your personal information, we will notify you and the relevant authorities where the law requires.

10. Data that stays on your device

Safety backups and caches — besides the copy of your data that syncs to your account, the app keeps up to ten safety backups (which you can restore in Profile → App settings → Restore a backup) and temporary caches on your device. These backups are not uploaded, and they are removed when you delete the app.
Widgets and Live Activities — the app saves a small summary (for example, upcoming tasks and habits) on your device so that widgets and Live Activities can show it.
iPhone search (Spotlight) — the app adds items such as note titles, open tasks, savings goals, fixed expenses, accounts and the names of people in your Dues to search on your device, never items in locked folders or albums, and never your transaction history. You can turn this off in Profile → App settings → Show in iPhone search.
Reminders — your reminders and summary notifications are scheduled and created on your device.

The items in this section stay on your device and are not sent to us.

11. International transfers

We are based in India, and our service providers process data in the United States, India and other countries. When personal information is transferred from the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards, such as the Standard Contractual Clauses included in our providers' data processing terms. When we transfer personal data out of India, we do so in line with Indian law.

12. Legal bases for processing

Where the EU or UK GDPR or similar laws apply, we rely on these legal bases:

Contract — to provide the Service you signed up for, including your account, sync, features and subscriptions.
Consent — for TrueDo AI, Apple Health access, the health information you choose to record (which is special-category data that we process with your explicit consent), notifications and device permissions. You can withdraw consent at any time, without affecting processing that took place before.
Legitimate interests — to keep the Service secure, prevent abuse, understand usage and costs and improve the Service, where these interests are not overridden by your rights.
Legal obligation — to comply with the law.

Where India's Digital Personal Data Protection Act, 2023 applies, we process your personal data with your consent, which you give when you create an account and choose to use the features described in this policy, and for other legitimate uses that the law permits. You can withdraw your consent at any time (section 15).

13. How long we keep data

While your account is active — we keep your data for as long as you have an account, so that the Service can work.
Items you delete — when you delete an item, it is removed from our database straight away, and Vault files and photos you delete are removed from file storage.
Deleting your account — Profile → Delete account deletes your profile, all your synced content (tasks, habits, money, health data, Vault items and files, chats and AI memory), your username, the invitations you sent or received, the sharing records for items you shared and your usage records, and then your sign-in account. If iOS asks you to sign in again to finish, your data has already been deleted; sign in once more to complete the deletion of your sign-in account.
Shared content — when you delete your account, items you owned stop being available to the people you shared them with. Items other people shared with you, and their records of sharing them with you, stay in their accounts.
Health data — you can erase all your health data at any time in Health → Settings → Reset health data.
Chats — you can delete any conversation from your chat history.
AI providers — Google keeps AI request logs for up to 55 days (section 6.8), and our relay's usage counters expire within 24 hours.
Purchases — Apple and RevenueCat keep records of purchases as needed for accounting, tax and legal purposes, under their own policies. Deleting your account does not cancel your subscription.
Support messages — we keep them for as long as needed to handle your request and for our records.
Residual copies — copies may remain for a limited time in our service providers' backup systems until they are overwritten in the ordinary course. We may also keep information for longer where the law requires it, or to establish, exercise or defend legal claims.

14. Children

TrueDo is not directed to children. You must be at least 13 years old, and at least the minimum age at which you can consent to the processing of your personal data in your country, to use it. If you are under the age of majority where you live (18 in India and many other countries), you may use TrueDo only with the consent of a parent or guardian. We do not knowingly collect personal information from anyone who does not meet these requirements. If you believe a child has given us personal information, contact us at ashishjhadeveloper@gmail.com and we will delete it.

TrueDo AI is intended only for users aged 18 or over, as our AI provider's terms require.

15. Your choices and rights

15.1 In the app. You can, at any time:

view, edit and delete your content;
export your transactions or a financial summary as a CSV file (Profile → Export transactions or Export financial summary);
turn TrueDo AI on or off (Profile → AI & your data), ask TrueDo to forget something, and delete conversations from your chat history;
turn off iPhone search (Profile → App settings → Show in iPhone search) and choose which notifications you get (Profile → App settings → Notifications);
erase your health data (Health → Settings → Reset health data) and stop Apple Health access (iOS Settings → Health → Data Access & Devices);
change device permissions in iOS Settings; and
delete your account (Profile → Delete account).

15.2 Your rights. Depending on where you live, you may have the right to access your personal information and receive a copy of it, to have it corrected, completed, updated or deleted, to restrict or object to how we use it, to receive it in a portable format, to withdraw your consent, and not to be treated differently for exercising these rights. Under India's Digital Personal Data Protection Act, 2023, you may also seek grievance redressal from us and nominate another person to exercise your rights if you die or become incapacitated.

15.3 How to exercise them. Email ashishjhadeveloper@gmail.com from the email address on your account (or tell us how we can verify your identity). We will respond within 30 days, or within any shorter period the law requires, and we do not charge for this. If we cannot fully meet your request, we will explain why, and you can ask us to reconsider.

15.4 Complaints. If you are not satisfied with our response, you can complain to a data protection authority: in India, the Data Protection Board of India (after first raising your grievance with us); in the EU or EEA, the supervisory authority where you live or work; and in the UK, the Information Commissioner's Office.

15.5 United States. Depending on your state, you may have rights to know about, access, correct and delete your personal information, and to opt out of its sale, its sharing for targeted advertising, or certain profiling. We do not sell or share personal information for targeted advertising, and we use sensitive information, such as health information, only to provide the Service you ask for. If we deny your request, you may appeal by replying to our decision.

16. Your health information

Because health information is sensitive, here is a summary in one place. The health information we process includes your health profile, the meals, weight, steps, sleep and other entries you log, the daily totals read from Apple Health with your permission, the meal photos and descriptions you send for an estimate, and your health score. It comes from you, from Apple Health if you allow it, and from the AI estimates you ask for. We use it to show your health journal, score, reports and reminders and, if TrueDo AI is on, to answer your health-related requests and to write your monthly health read. It is stored with Google Firebase and, only when TrueDo AI is on and a feature needs it, processed by Google Gemini. We never sell it, use it for advertising or share it with data brokers. You can erase it at any time in Health → Settings → Reset health data, stop Apple Health access in iOS Settings, or contact us to exercise your rights.

17. Changes to this policy

We may update this policy from time to time. If a change is material, we will tell you in the app or by email before it takes effect and, where the law requires, ask for your consent. The effective date at the top shows when this policy was last updated.

18. Contact and grievance officer

For any question or request about this policy or your personal information, contact Ashish Jha, the developer of TrueDo, at ashishjhadeveloper@gmail.com.

Grievance officer (India): Ashish Jha, ashishjhadeveloper@gmail.com. We aim to acknowledge grievances within 24 hours and to resolve them within 15 days of receipt.