Privacy notice
Last updated 12 October 2026
This notice covers the Atlas Todo apps (web, Android and Linux desktop) and the server at app.atlastodo.dev, which the Atlas Todo project runs. If you use the apps with a server someone else runs, that server's operator decides what happens to your data there, and this notice applies only to the apps themselves.
The short version
- Your tasks and everything in them are end-to-end encrypted on your device. We store them but cannot read them.
- We need your email address to run your account. We never sell or share it.
- No ads, no analytics, no tracking, no third-party SDKs that collect data.
- You can delete your account and all its data from the app at any time.
What we store
Account data
- Your email address and optional display name.
- A hash of a login value derived from your password. Your password itself never leaves your device.
- When the account was created, its active sessions (sign-in tokens) and the dates they were used.
- Your public keys and your encrypted (wrapped) private keys.
Your content, encrypted
Task titles, notes, dates, priorities, recurrence, reminders, projects, sections, labels, comments, saved filters, settings, focus sessions, habits and attachments (including their file names) are encrypted on your device with AES-256-GCM before they are sent. The server stores the encrypted data and passes it between your devices and the people you share projects with. We do not have the keys and cannot decrypt it.
Metadata the server can see
To sync and to enforce sharing, the server can see, for every change you make:
- the kind of item (task, project, …), its random id and which field changed;
- when the change was made and the approximate size of the encrypted value;
- which project a task belongs to, who it is assigned to, and who is a member of which shared project;
- the size of each encrypted attachment.
The full technical list is in SECURITY.md.
Bug reports
If you choose to send a bug or crash report from the app, it contains technical diagnostics (app version, platform, error message and stack trace) and never your task content. Only the newest reports are kept.
IP addresses
Your IP address is used in memory for rate limiting (to stop password guessing and abuse) and is not written to the database. The server is reached through Cloudflare, which processes connection data as our network provider; see Cloudflare's privacy policy.
On your device
The apps keep a local copy of your synced data so they work offline. That copy is stored in the app's private storage on your device and is not encrypted by the app beyond what your operating system provides.
Update checks
The apps contain no analytics or tracking, and talk only to the server you sign in to, with
two exceptions that send no account data or content. When it starts, the Android app asks
Expo's update service (u.expo.dev, run by Expo) whether a newer version of the
app's code is available. The Linux desktop app, unless installed through Nix, asks the
GitHub Releases API once a day whether a new release exists; start it with
--no-update or set ATLAS_DISABLE_UPDATE=1 to turn that off. Both
services see your IP address when the app asks.
Why we process it
We process this data only to provide the service you signed up for: to run your account, sync your data between your devices and the people you share with, and keep the service secure (legal basis: performance of a contract and our legitimate interest in security, GDPR Art. 6(1)(b) and (f)).
Sharing
We do not sell, rent or share your data with anyone, and we do not use it for advertising. The only other party involved is Cloudflare, which carries the network traffic. The server itself runs on hardware we operate in Denmark (EU). Members of a project you share can see that project's content, as you would expect.
How long we keep it
- Your data is kept while your account exists.
- When you delete your account, it is scheduled for deletion and permanently removed after 30 days, together with your encrypted content, keys, sessions and attachments. Signing in during those 30 days lets you cancel the deletion.
- Old sync history is pruned automatically.
Your rights
You can export your data from the app's settings and delete your account (how). Under the GDPR you also have the right to access, correct, restrict or object to processing, and to complain to a supervisory authority (in Denmark: Datatilsynet).
Children
Atlas Todo is not directed at children under 13.
Changes
We will update this page when the way we handle data changes. The history of this page is public in the project's repository.
Contact
Questions or requests about your data: [email protected].