What data ClearDo processes

Controller

The full provider details are available in the legal notice. You can send privacy requests by email.

stoltex.solutions@gmail.com

Local app use

Tasks, lists, subtasks, reminders, focus time, settings, and related technical state are initially stored in ClearDo's local app area on your device. Depending on the content, this includes the SQLite database, settings files, list images, and local diagnostic or temporary files.

An account is not required for local use. If you export a backup file, you choose where that file is stored or shared.

On iPhone and iPad, the operating system may include data from the local app area in an iCloud device backup or a device backup on a Mac or PC, depending on your system settings. This is not ClearDo sync and not an export controlled by ClearDo. Apple encrypts iCloud device backups; computer backups are encrypted only if you enable that option in Apple Finder, Apple Devices, or iTunes.

If you select or take a picture for a list, ClearDo accesses only that selected image or the camera after your action. List images remain local, are included in ClearDo backups, and are not synced through Appwrite in version 2.0.

Optional sign-in and automatic Pro sync

When ClearDo starts, it contacts the self-hosted Appwrite instance at api.cleardo.app to check whether a valid session is stored on the device. Without a valid session, no tasks, lists, or subtasks are sent to Appwrite.

If you sign in and ClearDo Pro is active, sync starts automatically. An initial merge runs after sign-in or session restoration. Further sync runs after local changes, when you return to the app, when network access becomes available again, and through the realtime connection. Sync pauses if Pro expires or you sign out.

For session checks, sign-in, account security, and sync, Appwrite processes account data such as name, email address, user and session identifiers, and technical request data. This includes the IP address, the country derived from it as a coarse location, app version, operating system and operating system version, and device model. ClearDo does not request GPS location for this and does not transmit precise location.

When sync is active, the list, task, and subtask data required for sync is linked to the Appwrite user account. This can include names, notes, due dates, times, a location entered by you, priority, recurrence, completion and archive status, shopping details, ordering, and timestamps. List images, local diagnostic logs, reminder schedules, and focus logs are not synced through Appwrite in version 2.0.

Appwrite may keep session, audit, security, and abuse-prevention logs containing a user identifier, timestamp, IP address, coarse country, app and system version, and device model. They are used for session management, access control, rate limiting, troubleshooting, and security incident investigation, not advertising or tracking.

Purchases and ClearDo Pro

Purchases are processed by Apple and RevenueCat. ClearDo uses a separate random customer identifier with RevenueCat, stores it in Keychain, and does not map it to the ClearDo/Appwrite account or email address. Purchase history and entitlement status are processed for purchasing, restoration, fraud prevention, Pro access, and RevenueCat's subscription analytics. ClearDo does not receive complete payment details.

Voice input

ClearDo uses speech recognition services provided by the operating system. Whether speech is processed only on the device or through an online service depends on the device, language, system version, and settings.

Review recognized text before saving. Voice input is not a guaranteed offline feature.

Reminders and notifications

Reminders are scheduled through the notification services of the operating system. You can change permission in system settings.

Images and local diagnostics

ClearDo keeps a rolling diagnostic log of no more than 500 KB on your device. It contains timestamps, error types, and sanitized stack traces, while deliberately omitting exception messages, widget diagnostics, and app content. The log is not transmitted automatically.

Only when you choose Report a Bug does ClearDo create an additional file containing the app version, build, device model, operating system, and this log. You then see an email draft or the system share sheet and decide whether and to whom to send it.

Visiting cleardo.app

The website is provided as an Appwrite Site on a self-hosted instance. Requests can create technically necessary server logs such as IP address, time, requested URL, status code, and browser identifier.

Cloudflare manages the domain's DNS records. With the current DNS-only configuration, website traffic is not routed through Cloudflare's proxy. This website does not include advertising trackers. With your permission, our self-hosted analytics counts page views, referrer domains, device type and country where reliable data is available. Analytics records do not store IP addresses, full user-agent strings or URL query parameters. A random browser identifier and your preference are stored in cookies for 30 days. You can withdraw consent through “Website analytics: change preference”; this deletes the browser identifier.

The contact form does not submit anything to this website. It only opens a prepared draft in your email app; information you enter is transferred to support and the involved email providers only if you send that draft there.

Purposes and legal bases

The optional account and sign-in features, the automatic Pro sync that follows sign-in, voice input, purchases, restoration, and Pro access are processed to provide the features you request (Article 6(1)(b) GDPR). Where pseudonymous purchase and entitlement data is used for service checks and subscription analytics, processing also relies on the legitimate interest in operating ClearDo securely and sustainably (Article 6(1)(f) GDPR).

Technically necessary website and security logs rely on the legitimate interest in service security, troubleshooting, and abuse prevention (Article 6(1)(f) GDPR). Support data is processed to handle your request (Article 6(1)(b) or (f) GDPR); you choose whether to send optional attachments.

Where tax or commercial law requires records to be kept, Article 6(1)(c) GDPR applies. ClearDo does not use advertising, cross-app or cross-site tracking, or solely automated decisions that produce legal or similarly significant effects.

Recipients and international transfers

Recipients are limited to processors and platform services required for each feature: the German hosting infrastructure for the self-operated Appwrite services, Apple for App Store purchases and, where applicable, speech recognition, RevenueCat for subscription and entitlement management, and the email or sharing services involved, but only when you send a request.

Apple, RevenueCat, or their subprocessors may process information outside the European Economic Area. Such processing uses the safeguards described by the provider, in particular adequacy decisions or the EU Standard Contractual Clauses. RevenueCat describes its processing and safeguards at revenuecat.com/privacy and revenuecat.com/dpa; Apple's information is available at apple.com/legal/privacy.

Retention

In-app local data, list images, and diagnostic logs remain in ClearDo's app area until you delete them, reset ClearDo, or remove the app. Backup files you export instead remain at the storage location you choose until you delete them there. The diagnostic log is continuously trimmed at 500 KB; generated report files remain only in the temporary app area until the operating system clears them or the app is removed.

Copies of local app data in iCloud or computer device backups are governed by your settings and the retention rules of Apple or the computer you use. They can outlast deletion within ClearDo or removal of the app until the relevant device backup is replaced or deleted by you.

Data for the optional account and the automatic Pro sync is generally kept until you delete it or delete the account. Active session data remains until the session expires or is deleted. The data is then removed from active systems unless legal duties require retention. If technical backup copies exist, the relevant data remains blocked from normal operation until those copies are routinely overwritten or deleted.

Account deletion creates a private server-side technical deletion job containing the internal user ID, request time, and earliest finalization time. It allows processing to resume automatically after an interruption. The original account identity is disabled and reserved with that job for at least 20 minutes while synced data is removed and delayed writes are contained. The identity and job are normally removed by the final five-minute run, approximately 20 to 25 minutes after processing begins.

Appwrite audit, security, and abuse-prevention logs, as well as technically necessary website logs, are kept only for as long as needed for session management, service security, troubleshooting, abuse prevention, or investigation of a specific security incident. Personal log data is then deleted. Purely aggregated operational statistics that are no longer personal data may remain.

Apple and RevenueCat determine retention of purchase, receipt, and entitlement data within their services and legal obligations. Support messages are deleted after the request has been fully handled and no statutory retention or evidence requirement remains.

Deletion and your rights

You can delete individual local tasks and lists in the app. If you start deletion of a signed-in account through account settings, sessions, account data, and associated synced data are then removed automatically unless legal obligations require retention.

Local app data intentionally remains on the device when an account is deleted. Local data must therefore be removed separately in the app or by removing the app. Existing iCloud or computer device backups can be deleted in the relevant system or backup settings. Back up anything you want to keep first.

You can request access, correction, deletion, restriction, or portability and object to processing where the legal conditions apply. You can withdraw consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular where you live or work or where you believe an infringement occurred.