Todit Privacy Policy

Published 27 September 2026 · Effective 4 October 2026

This document is a translation of the Korean original. If the translation differs from the original, the Korean original prevails.

TerryWi (the “Provider”) establishes and discloses this Privacy Policy as follows, in order to protect users’ personal information and to handle related grievances promptly and smoothly. Todit is a personal to-do app for capturing tasks and managing them by date, repetition and reminders. As a rule, all records are stored only on the user’s device.

Article 1 (Purposes of Collection and Use)

The Provider processes the minimum personal information for the following purposes. The personal information processed is not used for any purpose other than the following, and if the purpose of use changes, the Provider will take necessary measures such as obtaining separate consent.

• Providing core features: All to-do features of Todit (the “Service”) — tasks and subtasks, dates and repetition, calendar view, completion history and statistics, search — are stored only on the user’s device, and the Provider does not separately collect or retain personal information for this purpose.
• Sending notifications: Task reminders and the morning summary set by the user are scheduled and delivered on the device. Both scheduling and delivery happen entirely on the device, and no information is transmitted externally.
• User identification and backup/restore: Identifying the user via Google sign-in, and providing backup and restore of records via the user’s own Google Drive.
• Voice input (optional): Turning what the user says while holding the microphone button into text in the task input field.
• Advertising: Securing operating funds through banner advertising via Google AdMob.

Article 2 (Items Collected and Method of Collection)

Items collected

• [When signing in, optional] Google account information: Email address and Google account identifier, collected via Google Sign-In (OAuth). All features can be used without limitation without signing in; sign-in is required only to use the Google Drive backup/restore feature.
• [Created by the user while using the app, stored locally on the device] To-do records: Task titles, subtasks, notes, planned dates and times, repetition settings, reminder settings, personal/work scope, completion history, sort order, and app settings such as skin and language. This information is kept only in the device’s storage (SQLite) and is not transmitted to the Provider’s servers (the Provider does not operate its own separate server).
• [When using the backup feature] Google Drive backup data: Each time the user taps “Back up now”, the entire local record above is stored in JSON form in the app-specific storage area (appDataFolder) within the user’s own Google Drive. The app never backs up automatically. This area is a private area that even the user cannot open directly from the Google Drive app screen, and no third party, including the Provider, can access this data.
• [Android device backup] App data: The local records above and the app settings may be included in the Android device backup (Google account). This is a feature of the Android operating system: the operating system decides when backups and restores happen, and the Provider cannot access this data. The user can turn it off in the device’s backup settings.
• [Collected automatically via the advertising SDK] Advertising identifier and device information: The Service displays banner ads via Google AdMob, and in this process the advertising identifier (Ad ID), device information, and diagnostic data related to ad impressions/clicks may be collected by Google. This is not information the Provider collects or retains directly, and it is processed in accordance with Google’s privacy policy.
• [When using voice input, optional] Voice: The app listens only while the user holds the microphone button. The device’s speech recognition service (e.g. Google) turns speech into text and may send audio to its own servers to do so. Todit does not store or send audio; it only puts the resulting text into the input field.

Method of collection: Direct entry by the user during use of the Service (including voice input), Google account linking (OAuth), and automatic collection via the advertising SDK. The Service does not access other personal information on the device such as contacts, messages, call logs, location or photos.

Article 3 (Processing and Retention Period)

• Google sign-in information: Destroyed and disconnected immediately when the user uses “Sign out” or “Disconnect account & delete backups”.
• Records stored locally on the device: Deleted together with the app as soon as the user uninstalls it. Because nothing is retained separately on the Provider’s servers, users can delete their data completely on their own.
• Deleted tasks: Kept in “Recently deleted” for 30 days so that items removed by mistake can be restored, then permanently deleted from the device. Users can remove them sooner with “Reset data” or by uninstalling the app.
• Google Drive backup data: Up to the 3 most recent backups are kept in the user’s own Drive; when a new backup makes more than 3, the oldest one is deleted. The user can delete backups one at a time from the “Restore from Drive” list, and “Disconnect account & delete backups” deletes all backups immediately. “Sign out” alone leaves the backups in place, so they can be restored after signing in again.
• Android device backup: Copies included in the Android device backup (Google account) are kept and deleted according to the backup policy of the operating system (Google).
• Voice: Not retained by Todit. Audio processed by the device’s speech recognition service is subject to that service provider’s policies.
• Advertising identifier and other diagnostic information: Subject to Google’s relevant policies and retention periods.

Article 4 (Procedure and Method of Destruction)

• Procedure: When the user uses “Sign out”, “Disconnect account & delete backups” or “Reset data”, or uninstalls the app, the action is processed immediately without any separate approval step. Deletion of an individual task completes automatically once the 30-day restore window has passed.
• Method: Local data is deleted from device storage, and Google Drive backup files are deleted via the Google Drive API so that they cannot be recovered.

Article 5 (Users’ Rights and How to Exercise Them)

Users can exercise the following rights directly in the app’s settings at any time.

• Export records (Settings > My info > Export to file): Download all records stored on the device as a JSON file to keep or move elsewhere
• Recently deleted (Review > Archive > Recently deleted): Restore within 30 days; permanently deleted afterwards
• Delete one Drive backup (Settings > My info > Restore from Drive > delete icon to the right of a backup): Delete only the chosen backup file
• Delete Drive backups (Settings > My info > Connected account > “Disconnect account & delete backups”): Delete all backups stored in Google Drive, revoke the Drive permission granted to the app, and disconnect the Google sign-in
• Sign out (Settings > My info > Sign out): Disconnect the Google sign-in (the Drive backup and local records on the device are kept as they are)
• Reset data (Settings > My info > Reset data): Delete all tasks, subtasks and history stored on this device (the Drive backup is kept)
• Revoke notification permission: Can be revoked at any time in system settings (only notification delivery stops; recording and management features continue to work)
• Revoke microphone permission: Can be revoked at any time in system settings (only voice input stops; typing works as before)
• Uninstall the app: All local records stored on the device are deleted along with it

Any other inquiries regarding personal information can be submitted to the support email (wwwtaekyu@gmail.com), and the Provider will act without delay. The Service is not directed to children under the age of 14, and the Provider does not knowingly collect personal information from children.

Article 6 (Measures to Ensure Security)

• Technical measures: To-do records are stored in the device’s local storage (SQLite) and are not transmitted externally, except when the user runs a Drive backup or they are included in the Android device backup. Google account authentication uses Google’s standard OAuth flow, and communication with Google Drive is encrypted with TLS. Backup data is stored in the app-specific private area (appDataFolder) even within the user’s own Drive, blocking third-party access.
• Administrative measures: The number of personnel involved in processing personal information is kept to a minimum.

Article 7 (Entrustment and Provision to Third Parties)

The Provider does not operate its own separate server that stores users’ to-do data. The Provider uses the services below for each of the following purposes, and information processed in each service is subject to that provider’s privacy policy.

Purpose	Service used	Information processed
Sign-in	Google Sign-In (Google LLC)	Email, account identifier
Backup and restore	Google Drive API — appDataFolder (Google LLC)	All local records created by the user
Advertising	Google AdMob (Google LLC)	Advertising identifier, device information, diagnostic data
Voice input (only when used)	The device’s speech recognition service — the one chosen in device settings (usually Google LLC)	Audio spoken during voice input

Google Privacy Policy: https://policies.google.com/privacy

Article 8 (App Permissions)

The Service uses the following permissions, each solely for the purpose stated below.

• Notifications (POST_NOTIFICATIONS): Used only to show task reminders and the morning summary set by the user. It is requested when the user sets their first reminder, and all features other than notifications are available without granting it.
• Exact alarm scheduling (SCHEDULE_EXACT_ALARM): An optional feature for delivering reminders at exactly the time set. It works only if the user turns it on in the app and allows it in the system screen; otherwise reminders are delivered at an approximate time chosen by the system.
• Receive boot completed (RECEIVE_BOOT_COMPLETED): Used only to re-register scheduled reminders after the device is restarted.
• Internet access (INTERNET): Used only for Google sign-in, Google Drive backup/restore, and serving ads.
• Microphone (RECORD_AUDIO, optional): Used only for voice input of tasks. It is requested the first time the user presses the microphone button, and the app listens only while the button is held. All features other than voice input are available without granting it.

The Service does not request permissions for SMS, contacts, call logs, location, photos or files.

Article 9 (Advertising)

The Service displays banner ads via Google AdMob. Information such as the advertising identifier may be collected for ad personalization, and users can turn off ad personalization or reset their advertising identifier in device settings (Settings > Privacy > Ads). In regions where separate consent is required, such as the European Economic Area (EEA) and the United Kingdom, consent is requested through Google’s User Messaging Platform (UMP), and the choice made can be changed at any time in the app under Settings > About > “Ad privacy settings”.

Article 10 (Privacy Officer)

• Business name (service provider): TerryWi
• Privacy officer: TerryWi (representative)
• Support / inquiry email: wwwtaekyu@gmail.com

Users may contact the privacy officer regarding any inquiries, complaints or remedies related to privacy arising from use of the Todit service.

Article 11 (Changes to This Privacy Policy)

This Privacy Policy applies from 4 October 2026. Where content is added, deleted or modified, the Provider will give notice from 7 days before the change takes effect, through in-service notices or this document.

The Korean text of this Policy is the original. Translations into English and 10 other languages are provided for convenience; if a translation differs from the original, the Korean original prevails.

Published: 27 September 2026
Effective: 4 October 2026

Revision history: first published 25 September 2026 · revision published 27 September 2026, effective 4 October 2026 (up to 3 Drive backups kept and deletable one at a time, manual backup only; Android device backup; voice input and microphone permission; app menu paths)

Contact: wwwtaekyu@gmail.com