Todocky

Todocky is a personal task and project manager for Mac and iPhone. It has no account system, no backend server, no advertising, and no analytics or tracking SDK. Your projects and tasks are stored on your device and synced only through your own iCloud account, using Apple's CloudKit private database. Nobody at Todocky — and no third party — can read your data; it's encrypted and scoped to your Apple ID like any other iCloud-synced app data.

The one thing this policy needs to be specific about is Todocky's optional MCP server feature, described below, because it's the one place your task data can leave your device outside of Apple's own iCloud sync.

What Todocky collects

Todocky collects only the content you create in the app: project names and descriptions, task and subtask names and descriptions, your chosen icons, and your app preferences (theme, accent color, Today visibility, sync on/off). None of this is collected by us — it never leaves your device except through iCloud, which you control.

Todocky does not collect your name, email address, contacts, location, photos, microphone or camera data, health data, or any advertising or analytics identifier. Todocky has no user accounts, no sign-in, and no password of its own.

Where your data is stored

• On your device: in a local, app-sandboxed database. This is the only copy Todocky needs to function, and the app works fully offline.
• In iCloud: if you leave sync on (the default), your data also syncs through CloudKit's private database, tied to your own Apple ID. Todocky has no server of its own that your data passes through for this sync. You can turn sync off per device in Settings without losing local data.
• In a .todocky backup file, if you export one: the file is encrypted with a passphrase only you know (AES-256-GCM, PBKDF2 key derivation). Todocky never stores that passphrase anywhere — if you lose it, the file cannot be recovered by us or by anyone else.

The MCP server (macOS only, off for network access by default)

Todocky includes an optional feature, available only on Mac, that lets you connect an MCP-capable AI tool directly to your tasks and projects, so it can read and, if you allow it, create or edit them on your behalf.

Every client that connects must be explicitly approved by you the first time it asks to read or write your data. Approved connections in network mode authenticate with a per-client token stored in your Mac's Keychain, not in plain text. You can revoke a token or remove an approved client at any time in Settings. If you never enable this feature, none of this applies to you.

What Todocky does not do

• No advertising, no ad networks, no ad identifiers.
• No analytics or usage tracking SDK of any kind.
• No sharing or selling of your data to any third party.
• No account creation, so there is no account to delete — uninstalling the app, or turning off iCloud sync and deleting your local data, removes what Todocky itself stored. Data already synced to your iCloud private database is governed by Apple's own iCloud retention, manageable from your device's iCloud storage settings.

Third-party components

Todocky's MCP server feature is built using open-source libraries (a Swift MCP SDK, SwiftNIO, swift-log, and related packages) that run entirely on-device — none of them transmit data anywhere on their own. Full acknowledgments are listed in the app, under Settings → General → Acknowledgments.

Children's privacy

Todocky is not directed at children and does not knowingly collect personal information from children. It has no age-gated content and is not listed in the Kids category.

Changes to this policy

If this policy changes, the "Last updated" date above will change.

Contact

Questions about this policy or your data: hi@9866.mx.