The short version
MacTodo doesn’t collect your data. The app never goes online, there’s no account to create, and this website doesn’t use cookies, analytics, or trackers.
The MacTodo app
Everything you add to MacTodo, including to-dos, notes, links, documents, prompts, and your vault, is stored on your Mac in the app’s own sandboxed folders. Nothing is sent to us or to anyone else.
MacTodo is sandboxed without network access, so it cannot connect to the internet. It has no analytics, advertising, or crash reporting of its own. Saved links show letter tiles instead of website icons, because fetching icons would mean going online.
Reminders are local macOS notifications. If you leave Spotlight indexing on, open to-dos and prompts are added to your Mac’s local Spotlight index so you can search for them. You can turn this off in Settings, and vault contents are never indexed.
The private vault
Passwords, secure notes, photos, videos, and private documents in the vault are encrypted on your Mac with AES-256-GCM, using a key protected by your vault password (stretched with PBKDF2, 600,000 rounds). Touch ID can unlock the vault if you turn it on.
We never see your vault password and can’t recover it. If you lose it, the vault can’t be opened, so please keep it somewhere safe.
Backups
Backups are files you create and keep. To-dos, notes, links, and prompts back up to a JSON file. Vault backups are a single encrypted file protected by a password you choose. Where you store them is up to you.
This website
mactodoapp.com is a static website. It sets no cookies and runs no analytics or third-party scripts, and its fonts and images are served from the site itself.
Like any website, our hosting provider may keep standard server logs, such as IP addresses and the pages requested, to keep the site secure and running. We don’t use these logs to identify or track you.
Changes to this policy
If this policy changes, we’ll update it here and change the date at the top of the page.