OneTwo TodoThis is a courtesy translation. The German version at onetwotodoPrivacy.html is legally binding.
This privacy policy applies specifically to the OneTwo Todo app (iPhone, iPad and Mac) and supplements the general privacy policy of this website, which covers visiting the website itself.
1. Controller
Christian Drapatz
Kämpenstraße 42
45147 Essen
Germany
Email: support@onetwoapps.com
2. Basic principle: local data processing
OneTwo Todo has no server of the developer, no advertising, no analytics or tracking libraries and no user account with the developer. No third-party SDKs are included; the app uses Apple frameworks only. The developer receives no content from the app.
3. What data the app stores
What you enter is entirely up to you. The app stores groups, lists, tasks, notes, subtasks, tags, attachments, reminder times and settings, as well as edit and conflict versions. In addition there is technical sync data without content.
4. Storage location and protection on the device
- Local: Your data is kept in the protected app area of your device (file protection from the first unlock). For widgets, the app stores a reduced snapshot in the same protected group area.
- Unlocking: The app opens using Apple’s LocalAuthentication service (Face ID, Touch ID, device passcode, or on the Mac Touch ID or login password). Biometric data is not accessible to the app; the system only reports whether the check succeeded. If you like, you can add your own master password on top. The app does not store the password itself; the keychain holds only a check value derived from it, which reaches your devices through iCloud Keychain. The master password protects access to the app; it does not encrypt your tasks.
- Siri and Shortcuts: The app makes tasks and lists available to the system for Siri and Shortcuts. Processing takes place on the device. Where a shortcut you build passes data on is determined by that shortcut.
- Hiding titles: In Settings you can choose that notifications and widgets show no task titles.
5. iCloud sync (optional)
If you turn on sync and are signed in to iCloud, your data is stored in the private CloudKit database of your own iCloud account at Apple and synchronized between your devices. The developer has no access to it. Content fields are stored in encrypted CloudKit fields. File attachments are transferred as CloudKit assets; the protection documented by Apple applies to them. No blanket end-to-end encryption is promised: the actual protection depends on your iCloud settings at Apple. Apple’s privacy terms apply: apple.com/legal/privacy. If your key is lost or an account recovery at Apple is needed, encrypted content can become inaccessible. Therefore, create your own backups. You can turn sync off in Settings at any time.
6. Mac: Local File
On the Mac you can use an encrypted file in a place of your choice instead of iCloud, for example on a USB drive or network drive. Changes are written to this file shortly afterwards. Where you put the file is up to you. The file password is mandatory; without it the file cannot be opened. The app rejects folders in iCloud Drive. In addition, a working copy is kept on the Mac.
7. Notifications
Reminders are created locally on your device. Silent iCloud signals for syncing contain no task content. The app asks for permission for notifications when you use reminders.
8. Camera, photos and files
On iPhone and iPad the app asks for the camera only when you take a photo, scan a document or have text recognized. Recognized text is attached to the task as a text file. “Add Photos” is used only if you turn on saving the originals in Settings. The app never reads your photo library; the system picker hands over only the images you select. Attachments from photos and scans are reduced in size and stored without the location they were taken. The app accesses files only when you explicitly select them. The Mac uses neither camera nor scan. No access to microphone, calendar, contacts or location.
9. Exports, backups, sharing and printing
Exports (PDF, text, Markdown, JSON), backups and shared or printed lists are unencrypted files under your control. Where you store or send them is up to you. The app only deletes its own temporary copies.
10. Contact and feedback by email
“Write a message” in the app is voluntary. You see the text and optional diagnostic data in a preview beforehand and can leave the diagnostic data out (default: off). Diagnostic data are the app version, operating system, device model class (iPhone, iPad or Mac), language, a sync status code, the notification status, the version numbers of the data formats, the number of groups, lists, tasks and attachments, the number of pending sync jobs and the most recent error codes. Titles, notes and file names are not included. The app never sends anything itself, does not attach tasks, attachments, exports or logs and sends nothing in the background. If you write to support, I process your email address and the content of your message to answer your request. Please do not send passwords or other secrets by email.
11. Deletion
Deleted tasks go to the Trash and can be restored. When you delete them permanently, they are also removed on your other devices. For syncing, low-content deletion markers remain.
12. Legal basis
Where personal data is processed, this is done to provide the app functions you request (Art. 6(1)(b) GDPR). For the optional iCloud sync, notifications and camera features it is your consent by turning on or using the feature (Art. 6(1)(a) GDPR). Answering support requests is based on Art. 6(1)(b) or (f) GDPR.
13. Disclosure to third parties
Your app data is not disclosed to third parties, except for the technically necessary processing by Apple described above as part of iCloud/CloudKit and the Apple services used, if you use them.
14. Your rights
Your app data is on your device or in your own iCloud account; you can view, edit, export and delete it in the app at any time. In addition, you have the rights of access, rectification, erasure, restriction of processing, objection, data portability and the right to lodge a complaint with a data protection supervisory authority, subject to the legal requirements.
15. Last updated
Last updated: October 2026