Privacy Policy

Last updated: October 22, 2026

This policy explains how z8todo.com ("Z8Todo", "we", "us", or "our") handles personal data when you use the website and app (the "Service").

1. Data we collect

  • Account data. Clerk handles sign-up and sign-in. We can access account details such as your name, email address, profile image, user ID, and session state.
  • Google sign-in data. If you sign in with Google, we receive your name, email address, and profile image from Google.
  • Service data. We store the lists you create or edit, including list titles, section headings, tasks, and whether tasks are done. We also store who owns each list and who it is shared with.
  • Technical data. We process request details needed to run and protect the Service, such as IP addresses and error details.
  • Messages. If you contact us, we receive the details in your message and the contact data that you provide.

2. How we use data

We use this data to provide and secure the Service, authenticate users, store and show your lists, let you share lists with other users, diagnose faults, prevent abuse, answer requests, and meet legal duties.

3. Legal bases

Where data protection law requires a legal basis, we process data to perform our agreement with you, for our legitimate interests in running and securing the Service, to meet legal duties, or with your consent where needed.

4. Cookies and authentication

The Service and Clerk use cookies or similar storage that is needed for authentication, session security, and core site functions. The Service does not use advertising or tracking cookies.

5. Google user data

We use the name, email address, and profile image that Google shares only to sign you in, show your profile, and let list owners find you by email. We do not use Google user data for advertising, we do not sell it, and we do not share it except as described in this policy. Z8Todo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. When we share data

When a list is shared, its owner and collaborators can see the list content and each other's names and email addresses. We use Clerk as our authentication and user-management provider. Clerk processes account and session data for us under its own terms. You can read the Clerk Privacy Policy. We may also disclose data when required by law, to protect rights or safety, or as part of a business transfer. We do not sell your personal data.

7. Your content and your duties

You decide what you write in your lists. Do not add personal data about other people that you do not have the right to share. Avoid adding passwords, payment card data, private keys, health data, or other sensitive data.

8. Storage and retention

Lists, sections, tasks, and sharing records are stored in a SQLite database on Z8Data. The Z8Todo server has no local database. We keep data only as long as needed to provide the Service, meet legal duties, resolve disputes, and protect the Service. When an owner deletes a list, its sections, tasks, and sharing records are deleted. Copies may remain for a limited time in backups where backups are used.

9. Security

We use reasonable technical and organisational steps to protect data. No internet service or storage system is fully secure, so we cannot promise absolute security. Keep your account credentials private and tell us if you think they have been exposed.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or export your personal data, or to object to some processing. You may also withdraw consent where processing is based on consent and complain to your local data protection authority.

11. International transfers

Our providers may process data in countries other than your own. Where required, we use suitable safeguards for these transfers. See Clerk's legal pages for details about its processing and transfer safeguards.

12. Children

The Service is not intended for children under 16. Do not use the Service if you are under 16.

13. Changes to this policy

We may update this policy. We will change the date at the top and give extra notice when required by law.

14. Contact

For privacy questions or requests, email info@relatedcode.com.