🔒 Your NexTodo content belongs to you. We use it only to run NexTodo. We do not sell it, we do not show ads, and we do not use analytics or tracking tools.
This Privacy Policy explains what information NexTodo ("we", "us", "our") processes when you use the NexTodo website and web app at nextodoapp.com and the NexTodo iPhone and Android apps, why, and what choices you have. This page is the only official version of our Privacy Policy; the apps link here.
Account. Your email address and login. If you sign up with a password, it is handled by our authentication provider and stored only in hashed form. If you choose Sign in with Google (web and apps) or Sign in with Apple (iPhone app), we receive the email address and the basic profile details that the provider shares with us (such as your name and, for Google, your profile picture).
Content you create. Everything you add to NexTodo is stored in your account so that it is available on all your devices, including:
Link previews. When you save a link, NexTodo may add a title and cover image to it. To do this, our server (a function hosted on Vercel) fetches that page on your behalf — without your cookies or login, and identifying itself as the NexTodo preview service. For YouTube, X and TikTok links it asks the platform's public preview (oEmbed) service instead. Only the result — page title, site name and the address of an image — is saved with your capture. Because many sites (Instagram and TikTok, for example) make cover-image addresses expire after a few days, our server also downloads a copy of that image from the page's own site (at most 2 MB; only JPEG, PNG, WebP, GIF or AVIF) and hands it to your app, which saves it in your private storage, in a folder only your account can read. It is shown through short-lived signed links, never public ones, and our servers do not keep it or log the links you save. The copy is deleted when you delete the capture or wish it belongs to (if no other item of yours uses the same image), or when you delete your NexTodo data or your account. If a copy is not available, your browser loads the image directly from the site that hosts it, without telling that site which NexTodo page you are on; like any website, that site can see your IP address and may set its own cookies.
Notification settings and reminders. If you turn on browser notifications, we store, for each browser you enable: the push address your browser gives us and its encryption keys, a short device label (for example "Chrome on Mac"), your browser's user-agent string, your time zone, and when the browser was last seen and last reached. We also store your notification preferences (which reminders you want, times, quiet hours, and whether to hide item titles in notifications) and your language. When we send a reminder, we keep a delivery record (reminder type, the related item's ID, status and timestamps — not the notification text) to avoid duplicates and respect your limits.
Push notifications in the iPhone and Android apps. If you turn on push notifications in the app (Notifications › Push notifications), we store, for each phone you enable: the push token that Expo's notification service issues for NexTodo on that phone, the platform (iOS or Android), a short device label (the phone model and system version, for example "iPhone 15 · iOS 18.1"), your time zone, and when the phone was last seen and last reached. We use this only to deliver the reminders you turned on to that phone, even when the app is closed. The same notification preferences and delivery records described above apply; one reminder is recorded once, even if it is delivered to several of your devices.
Settings synced between your devices. Small pieces of app state, such as your weekly picks, reminders you have muted or snoozed, and topic suggestions you have dismissed.
Technical data. Like any website, our hosting and database providers receive standard technical information when your device connects to them (such as IP address, browser type and the time of the request) and keep it in their standard logs. We do not use this for advertising or profiling.
We do not use analytics, advertising or crash-reporting tools, and your content is not sent to any AI service. Topic suggestions are calculated inside the app.
We process this information to provide the service you asked for, and, where the law requires a legal basis, on the basis of performing our agreement with you and our legitimate interest in keeping the service secure. You can turn notifications off at any time.
We do not sell, rent or trade your personal information. We use the following providers to run NexTodo:
Some of these providers may process data outside your country, including in the United States.
NexPlan. Your NexTodo account uses the same sign-in as NexPlan, our sister product. If you use NexPlan and choose "Send to NexPlan" on a task, a copy of that task is created in your NexPlan workspace, where members of that workspace can see it.
NexTodo does not use advertising or tracking cookies. The web app keeps your sign-in session, your theme and language, and an offline copy of some of your data (for example tasks and captures) in your browser's local storage, so that the app opens quickly and works offline. It also installs a small service worker that is used only to show notifications and, if you installed the web app, to receive items you share to it: a shared item is held briefly on your device until the app saves it to your account. Signing out ends your session; deleting your data or account also clears NexTodo's copy on that device. The iPhone and Android apps store a local copy of your data on the device, and on iPhone, items you share while the app is closed are kept in the app's own storage on the device until the app saves them to your account. Unless you turn on push notifications, reminders in the mobile apps are scheduled on your device; with push notifications on, task, habit and wish reminders are sent by our server, while due-date alerts and the daily summary stay scheduled on the device.
In the app, under Settings, you can choose:
Your files are removed first, then the rest of your data is deleted from our live database immediately, in one step. If something fails, the app tells you and your data is not partly deleted. Because your login is shared with NexPlan, full account deletion is paused while you own a NexPlan workspace or have content in someone else's workspace, so that other people's data is never removed by mistake; the app explains what to do. If you use Sign in with Apple on iPhone, deleting your account also asks you to confirm with Apple once, so that we can ask Apple to revoke NexTodo's Sign in with Apple authorization for your Apple Account. You can also ask us to delete your data by email — see our Support page.
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, and to object to or restrict certain processing. You can:
You also have the right to complain to your local data protection authority.
Connections to NexTodo are encrypted (HTTPS). Access to your data in our database is limited to your own account by access rules enforced by the database, and files are kept in private storage. No system is completely secure, but we work to protect your information and review our security regularly.
NexTodo is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.
We may update this policy when NexTodo changes. We will change the date at the top of this page and, if the changes are significant, we will make reasonable efforts to let you know (for example in the app).
For privacy questions or requests, contact us at privacy@nextodoapp.com.