← Back to Arbito
TaDo Privacy Policy
Effective Date: October 3, 2026 · Last Updated: October 8, 2026
Arbito LLC ("we," "us," or "our") makes TaDo, a task and habit app, and runs the server it talks to (together, the "Service"). TaDo is free. It has no in-app purchases, no subscriptions, no ads, no third-party analytics, and no crash-reporting service.
This policy explains what TaDo collects, why, who can see it, and how to delete it. You can use basic guest tasks locally without an account. To sync and use other features, sign in with your Arbito account; the account itself is covered by the Arbito Account Privacy Policy.
1. Information We Collect
1.1 From your Arbito account
When you sign in, TaDo copies these details from your Arbito account so it knows who you are:
- Your Arbito user ID, email address, and username
- Your avatar image link (you edit your avatar in Arbito Market, not in TaDo)
- Whether your email is verified, your account role, and whether the account is active
1.2 What you create in TaDo
- Tasks and lists: list and group names, colors, and icons; task names, descriptions, subtasks, priorities, due dates and times, timers, count targets, completion times, and archived tasks.
- Habits and repeats: repeat rules, the history of done, missed, and skipped days, and streaks.
- Profile: an optional bio and whether your profile is public or private. Your visible name is your Arbito username.
- Settings: your time zone, first day of the week, daily goal, reminder timing, and whether quick sign-in with Face ID or fingerprint is turned on.
1.3 Points and the shop
- Mojo: TaDo awards Mojo, its points, for completing tasks, including habit tasks. Streaks themselves do not award points. Your Mojo balance is held by your Arbito account; TaDo keeps a record of the Mojo you earned and spent in TaDo.
- Shop: the themes, colors, icons, animations, and items you unlocked with Mojo, including icons from blind bags, plus challenge, achievement, and streak progress.
Mojo is earned only. It cannot be bought, sold, cashed out, or sent to another user, and nothing in TaDo costs money.
1.4 Social features
- Feed: if your profile is public and you finish a task in a public list, TaDo posts the task name and the points it earned to your followers' feed.
- Follows, high-fives, and groups: who you follow, the high-fives you give and receive, and the groups you create or join.
- Blocks and reports: the people you block, and any report you file (the reason and optional details you write, up to 500 characters).
1.5 App-open analytics
For signed-in users, our server records the time and platform when TaDo opens, at most once per 30 minutes. These account-linked events are used only for first-party product analytics.
1.6 What TaDo does not collect
TaDo does not collect your location, contacts, photos, health data, or advertising identifiers, and it does not track you across other companies' apps or websites. It does not use third-party analytics or crash-reporting services. Our server does not store your IP address; it uses it only briefly, in memory, to rate-limit requests made before you sign in.
2. How We Use Your Information
- To run TaDo: store and sync your tasks and habits, work out what is due in your own time zone, keep streaks, and award Mojo.
- To run the social features you choose to use: the feed, follows, high-fives, groups, and leaderboards.
- To keep the community safe: enforce blocks and review reports.
- To measure app use with first-party analytics: when a signed-in user opens TaDo, our server records the time and platform (iOS, Android or web). We use this for product and reliability metrics, with at most one open event per 30 minutes.
- To prevent abuse, fix problems, and meet legal obligations.
We do not use your data for advertising, and we do not sell it.
3. Who Can See Your Information
| Who | What they can see |
|---|
| Everyone signed in to TaDo | Your username and avatar where you appear in search, follows, or a leaderboard. The individual leaderboard shows your completed-task count, Mojo earned, and streak, and currently includes every user who has completed tasks, including people with private profiles. |
| People viewing a public profile | Username, avatar, bio, join date, completed-task and achievement counts, follower and following counts, high-fives, and streak. A private profile is not shown to others. |
| Your followers | Feed posts for tasks you finish in public lists while your profile is public. |
| Members of a group you are in | Your username, avatar, join date, group activity, and your place on the group leaderboard. |
| People you block | Nothing new: blocking hides your activity from them and theirs from you, and removes follows between you. |
| Our team | Reports you file or that are filed about you, to review them. |
Making your profile private also makes your lists private. It does not remove feed posts you already made, and it does not currently take you off the individual leaderboard.
4. Service Providers
We may also disclose information if the law requires it, or to a successor if the business is transferred, under this policy.
5. On Your Device
- Reminders are local notifications scheduled on your phone. The notification shows the task name. TaDo does not send push notifications from a server. You can turn reminders off in TaDo or in your device settings.
- Face ID, Touch ID, or fingerprint is optional. Your device checks it and only tells TaDo whether it passed; your biometric data never leaves the device. A successful check unlocks a sign-in token kept in your device's secure storage (Keychain on iOS, encrypted storage on Android).
- Guest tasks and local data are stored on your device. Guest one-off lists and tasks stay there until you explicitly import them into an Arbito account; signed-in task cache is kept separately. Deleting the app removes local data.
6. Retention and Deletion
- We keep your TaDo data while your account exists. Archived tasks are deleted automatically after 90 days.
- Deleting your account: in TaDo, go to Settings → Delete Account and confirm with a code we email you (or your password). You can also follow the steps at arbito.co/account or email support@arbito.co.
- Deleting your Arbito account deletes your TaDo data too: tasks, lists, habits, streaks, your Mojo record, shop items, feed posts and high-fives, follows, blocks, group memberships, and reports you filed or that were filed about you. If you own a group with other members, ownership passes to the member who joined first; otherwise the group is deleted. TaDo usually completes this within minutes of the request.
- Other people's high-five counters keep the total they had. Our server logs, which may contain your user ID, are kept for a limited time by our hosting provider and are not used for anything else.
7. Security
Data is encrypted in transit (HTTPS). Sign-in uses short-lived, signed tokens issued by your Arbito account, and sign-in tokens on your device are kept in secure storage. No method is perfectly secure, but we work to protect your information.
8. Your Rights
You can see and change your tasks, profile, and privacy setting in the app, and delete your account at any time (Section 6). Depending on where you live, you may also have the right to request a copy of your data, correct it, restrict or object to how we use it, or receive it in a portable format.
- EEA and UK (GDPR): we process your data to provide the Service you asked for (contract), to keep it safe (legitimate interests), and to meet legal obligations. You may complain to your local data protection authority.
- California (CCPA): you can ask what we collect and ask us to delete it. We do not sell or share personal information for advertising, and we will not treat you differently for using your rights.
Send requests to support@arbito.co. We respond within 30 days.
9. Children
TaDo is for people 13 and older; an Arbito account requires you to confirm you are at least 13. We do not knowingly collect information from children under 13. If you believe a child under 13 is using TaDo, email support@arbito.co and we will delete the account.
10. International Transfers
We are based in the United States, and our service providers may process your information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for those transfers.
11. Changes to This Policy
If we change this policy in a meaningful way, we will update the date at the top of this page and, where appropriate, tell you in the app.
12. Contact Us