TillDone App Privacy

Reminders, iCloud and sharing

TillDone handles the information you enter or select: reminders and schedules, lists, shopping items, notes, categories, photos and files, saved places and collaboration information. Apps keep local content and pending changes to display your information, support reminders and recover unfinished work.

Supported Apple devices and the connected Windows companion use Apple iCloud/CloudKit for private and shared TillDone records. You use your existing iCloud identity; no separate TillDone login account is required.

Shared-list content, attachments and participant information can be available to that list's participants. Ending a subscription does not automatically remove participants or erase shared content. Copies held by other participants or exported elsewhere are not removed just by uninstalling your app.

Permissions and device features

• Notifications use system permissions; reminder text may appear according to your device's notification settings.
• Location reminders use location permission and saved place coordinates. Place search and address lookup use Apple's map/location services. Windows can display synced saved places but does not provide continuous arrival/departure monitoring.
• Camera, photo and file pickers are used when you choose to add content. Optional contact selection uses the contact you select for the reminder.
• Siri/Shortcuts use Apple's services and pass the selected action and content to TillDone. A paired Apple Watch receives relevant reminder/list snapshots and exchanges actions with the iPhone.

You can manage permissions in your device settings. Disabling a permission may prevent the corresponding feature from working.

Subscriptions and the 30-day trial

Apple handles App Store checkout and billing. TillDone uses Apple transaction information, not your payment-card details. When subscription verification is enabled, a Cloudflare-hosted service checks the current CloudKit identity and signed purchase information with Apple. It processes a temporary CloudKit authentication token and derives a pseudonymous account-binding identifier so access belongs to the intended iCloud account.

The purchase database stores that binding, original/current transaction references, the signed revision time and a receipt hash. It does not store reminder content, photos, your Apple password, the CloudKit authentication token or the full signed receipt. Unacknowledged signed transactions can remain in an app-local retry queue until verification is acknowledged.

The separate trial record stores the pseudonymous binding and start, end and any revocation times. It is created only when you explicitly start the trial, not simply by signing in. The trial does not automatically start a paid subscription. The record prevents another device or reinstallation from restarting a consumed trial. Short-lived companion access is checked against your signed-in identity.

These identifiers are pseudonymous, not anonymous: the service can associate them with an authenticated account. Purchase and consumed-trial records are separate from your reminder content and are not automatically erased by expiry, cancellation or uninstalling. There is no automatic in-app erasure control for these verification records; contact us about access or deletion requests.

Local storage, exports and deletion

Apps retain settings, local caches and pending work. Apple builds can keep local backups/recovery data; the Watch can retain snapshots and pending drafts. Windows stores Apple SDK session information in its app profile. Account-bound companion draft recovery uses operating-system encryption when available and does not automatically submit recovered drafts.

You can use the app's supported editing, deletion, sharing and export controls. Deleting a record from the current view is not a guarantee that every recovery copy, exported file or participant's copy is immediately erased. Exports remain in the destination you choose. Signing out, uninstalling or cancelling a subscription does not itself erase iCloud content, verification history or all retained files.

Diagnostics and support

TillDone keeps a bounded local technical journal of app/version, sync and notification events, times, counts and numeric error codes. The diagnostic export excludes reminder titles and notes, names, attachment contents, account identifiers and credentials. Supported Apple crash/hang signals are summarized as counts rather than full crash dumps. The report includes up to 80 recent events from seven days; this is a report limit, not a promise that backups, exports or email are erased after seven days.

Including diagnostics is off by default. You can preview and save a report or choose to include it in a support request. Opening an email draft does not send it. Your email provider and the support mailbox provider process messages, reply addresses and attachments you choose to send. Personal information you type into a message remains personal information.

A direct in-app support option, where available, passes the selected message and optional report through Cloudflare to the support mailbox. Technical delivery status and request references may be logged. A failed delivery is not confirmed receipt. Support messages and attachments remain subject to mailbox storage; contact us about their deletion. Do not send passwords, verification codes or unnecessary sensitive content.

Providers and privacy requests

Apple provides iCloud/CloudKit, App Store billing and relevant device services. Cloudflare hosts the website and applicable support/verification services and may process technical connection and security information. Email providers process support email. These providers have their own privacy terms as well as the processing described here.

For questions or requests about your information, email support@tilldone.net. We may need information to identify and verify the relevant account or request, but do not ask you to email an Apple password or reusable authentication token. Privacy requests are handled through support, not an automatic reset of purchases or trial eligibility. Manage or cancel App Store subscriptions through Apple separately.

The TillDone website has a separate website-privacy notice. This app notice does not add an advertising tracker or connect this page to your reminders.