Privacy Policy

Last updated: January 15, 2025

The short version:

Your data is yours. We don't sell it, we don't show ads, and we never will. We only collect what we need to make Tudu work.

Hey there! This is our privacy policy. We've tried to keep it human-readable because legal jargon is the worst.


What we collect

Information you provide

  • Account info: Email address, password (encrypted), display name
  • Tasks and content: The tasks, folders, notes, and attachments you create
  • Preferences: Your settings, theme choices, notification preferences
  • Payment info: If you upgrade to Pro, our payment processor (Stripe) handles your payment details. We never see your full card number.

Information collected automatically

  • Usage data: How you use Tudu (features used, tasks created, etc.) — this helps us improve the product
  • Device info: Browser type, operating system — for compatibility and debugging
  • Cookies: We use essential cookies to keep you logged in. No tracking cookies, no third-party ad cookies.

How we use your data

We use your data to:

Provide and maintain Tudu
Send you reminders and notifications (that you've opted into)
Send you product updates and tips (you can unsubscribe anytime)
Improve Tudu based on how it's used
Respond to your support requests

We never:

Sell your data to anyone
Show you ads
Share your tasks or personal content with third parties
Use your data to train AI models (your tasks stay private)

How we protect your data

  • All data is encrypted in transit (HTTPS) and at rest
  • Passwords are hashed and never stored in plain text
  • We use secure, reputable cloud infrastructure
  • Regular security audits and updates
  • Access to user data is strictly limited to essential personnel

Your rights

You have the right to:

  • Access: See all the data we have about you
  • Export: Download all your data anytime (Settings → Data & Privacy → Export)
  • Delete: Permanently delete your account and all data (Settings → Profile → Delete Account)
  • Correct: Update any incorrect information about you
  • Object: Opt out of non-essential data processing

To exercise these rights, email us at privacy@tudu.gg or use the in-app tools.


Data retention

  • Active accounts: We keep your data as long as your account is active
  • Deleted accounts: Data is permanently deleted within 30 days of account deletion
  • Backups: May be retained for up to 90 days for disaster recovery, then deleted

Cookies

We use minimal cookies:

  • Essential cookies: Keep you logged in, remember your preferences
  • No tracking cookies: We don't track you across websites
  • No third-party cookies: No ads, no analytics trackers from other companies

Third-party services

We use a few trusted services:

  • Hosting: Vercel for reliable, secure data storage
  • Payments: Stripe for secure payment processing
  • Email: Resend for transactional emails
  • Analytics: Privacy-focused analytics only

These services have their own privacy policies and are bound by contracts to protect your data.


Children's privacy

Tudu is not intended for children under 13. We don't knowingly collect data from children. If you believe a child has created an account, please contact us.


Changes to this policy

We may update this policy occasionally. We'll notify you of significant changes via email or in-app notification. The "last updated" date at the top tells you when this was last modified.


Contact us

Questions about privacy? We're happy to help:


Thanks for trusting Tudu with your tasks!