Privacy Policy
The short version: we collect only what's needed to build your daily plan. We never sell your data, we never use health data for advertising, and you can export or delete everything at any time.
1. Who we are
Healthytodo is operated by Healthytodo Inc, 5150 Yonge St, North York, ON M2N 6L8, Canada ("Healthytodo", "we", "us"). This policy explains how we handle personal information when you use the Healthytodo app and website (the "Service").
2. What we collect
Information you give us
- Early access list: your email address and whether you're interested in Pro, when you join the waitlist on our website.
- Account details: your email address and, if you choose, your name.
- Check-ins: the energy level you select each morning and your evening wrap-up answers.
- Tasks and plans: task names, notes, deadlines, sizes and the plans you approve.
- Messages: anything you send us by email or through support.
Information you choose to connect
- Sleep summary (optional): if you connect Apple Health or Health Connect, we read a daily sleep summary such as total sleep time. We do not read other health categories.
- Calendar (optional, Pro): event times and titles so locked events are kept out of your plan.
Information collected automatically
- Usage and device data: app version, device type, crash reports and basic usage events, used to keep the Service working.
We don't knowingly collect information from children under 16. If you believe a child has given us information, contact us and we'll delete it.
3. How we use it
- To send your early access invite and occasional launch news, which you can unsubscribe from at any time.
- To build your daily plan, size tasks and learn your typical capacity.
- To run, secure and improve the Service, and fix bugs.
- To respond to you and send service messages, such as account or billing notices.
- To process payments for Pro subscriptions.
We use automated processing (including AI models) to estimate task time and suggest plan changes. These are suggestions only: nothing in your plan changes until you approve it. We do not use your data to make decisions that have legal or similarly significant effects on you.
We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Where the GDPR applies, we rely on performance of our contract with you, your consent (for optional health and calendar connections), and our legitimate interest in keeping the Service secure and working.
4. Health data
Health context is sensitive, and we treat it that way:
- Connecting Apple Health or Health Connect is optional, and you can disconnect it at any time in settings or in your device's health settings.
- Data from Apple HealthKit and Health Connect is used only to provide planning features to you. It is never used for advertising, never sold, and never shared with data brokers.
- Healthytodo does not diagnose, treat or predict any health condition.
5. When we share information
We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We share it only:
- With service providers who process it on our behalf under contract, such as cloud hosting, AI processing for task estimates, payment processing, email delivery and crash reporting. They may not use it for their own purposes, including training their models.
- If required by law, or to protect the rights, safety and security of our users and the Service.
- As part of a merger, acquisition or sale of assets, in which case we'll notify you before your information becomes subject to a different policy.
Our providers may store or process data outside Canada, including in the United States, where it may be accessible to authorities under local law. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
6. Retention and security
We keep early access emails until you've received an invite and decided whether to join, or until you ask us to remove you. We keep account information while your account is active. When you delete your account, we delete your personal information within 30 days, except where we must keep limited records (for example, billing records) to meet legal obligations.
We protect data with encryption in transit and at rest, access controls and regular reviews. No system is perfectly secure, but we work to keep your information safe.
7. Your rights and choices
Wherever you live, you can:
- Access and export your data.
- Correct inaccurate data.
- Delete your account and data.
- Disconnect health or calendar access at any time.
- Opt out of non-essential emails.
Depending on where you live, such as Canada, the EU, the UK or California, you may also have the right to withdraw consent, restrict or object to processing, and to complain to your data protection authority. In Canada, that is the Office of the Privacy Commissioner of Canada. California residents: we don't sell or share personal information as those terms are defined under the CCPA, and we won't discriminate against you for exercising your rights.
To make a request, email hello@healthytodo.com. We'll respond within 30 days and may need to verify your identity first.
8. Changes to this policy
If we make material changes, we'll notify you in the app or by email before they take effect. The date at the top shows when this policy was last updated.
9. Contact
Questions about privacy? Email hello@healthytodo.com or write to Healthytodo Inc, 5150 Yonge St, North York, ON M2N 6L8, Canada.