Last updated: July 24, 2026
Wishtodo does not sell your data or show ads. Your tasks and notes are private to your account, protected by per-user database security, and synced across your devices. We use one privacy-focused analytics tool (Microsoft Clarity) to understand how the app is used so we can improve it — details below.
| Category | Collected | Shared |
|---|---|---|
| Account email | Yes | Processor only |
| Your content (tasks, notes, folders, etc.) | Yes | Processor only |
| AI request content (only when you use AI) | When used | AI providers |
| Usage & interaction analytics (Microsoft Clarity) | Yes | Microsoft |
| Advertising ID | None | No |
| Location data | None | No |
| Contacts, photos library, or microphone | None | No |
"Processor only" means data is stored with the infrastructure providers that run the app on our behalf (see Third-Party Services) — never sold, rented, or shared with advertisers.
To sync across your devices, Wishtodo stores the following in your private account (a Supabase Postgres database with row-level security, so only you can read your own rows) and on your device:
Data in transit is encrypted with HTTPS/TLS. We do not collect your location, contacts, photo library, or microphone.
When you use the in-app AI assistant ("Macho"), slash commands, "Ask AI", or the optional daily/weekly report, the relevant text — and, for image features, the image you attach — is sent to a third-party large-language-model provider to generate a response. Depending on the request these may include:
We send these providers only what is needed to fulfil your request, and we do not send them your account identity for profiling. We do not use your content to train AI models. If you prefer not to use AI, simply don't — the rest of the app works without it.
To understand how the app is used and improve it, Wishtodo uses Microsoft Clarity, a product-analytics service. Clarity automatically captures in-app interaction data — taps, navigation, scrolls, screen views, and aggregated session recordings/heatmaps of how the interface is used — along with basic device and usage information (such as device model, OS version, and approximate region).
This data is processed by Microsoft on our behalf to produce usage insights. It is not sold, and we do not use it for advertising. Microsoft handles it under its own terms — see the Microsoft Privacy Statement and Clarity documentation.
Clarity is intended to capture how the interface is used, not the private contents of your tasks and notes. If you are in the EEA, UK, or another region that requires it, you may opt out of this analytics processing — see Your Rights & Controls below, or contact us.
Security is built into how Wishtodo stores and moves your data:
No method of transmission or storage is ever 100% secure, but we use industry-standard safeguards and deliberately collect the minimum the app needs to work.
We retain your content until you delete it or delete your account. Deleting an item removes it from your synced account.
You can delete your entire account and all associated data at any time — see the Account & Data Deletion page, or email us. Once deleted, data cannot be recovered (aside from short-lived encrypted infrastructure backups that rotate out on the provider's normal schedule).
Wishtodo relies on a small set of processors to run the app:
We do not integrate advertising SDKs, and we do not share your data with data brokers.
You stay in control of your data. You can:
Where the GDPR or UK GDPR applies, we process your data on these bases:
Your data may be processed on servers located outside your country (for example by Supabase, the AI model providers, or Microsoft for Clarity analytics). Where data crosses borders, we rely on those providers' safeguards and standard contractual protections for such transfers.
Wishtodo is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
If we update this privacy policy, the changes will be posted on this page with a revised "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.
By using Wishtodo, you consent to this privacy policy. Optional features such as AI and push notifications are opt-in, and you can stop using them — or delete your account — at any time.