Effective Date: October 3, 2026 · Last Updated: October 19, 2026
Arbito LLC ("we," "us," or "our") makes TaDo, a task and habit app, and runs the server it talks to (together, the "Service"). TaDo is free. It has no in-app purchases, no subscriptions, no ads, no third-party analytics, and no crash-reporting service.
This policy explains what TaDo collects, why, who can see it, and how to delete it. You can use basic guest tasks locally without an account. To sync and use other features, sign in with your Arbito account; the account itself is covered by the Arbito Account Privacy Policy.
When you sign in, TaDo copies these details from your Arbito account so it knows who you are:
Mojo is earned only. It cannot be bought, sold, cashed out, or sent to another user, and nothing in TaDo costs money.
For signed-in users, our server records the time and platform when TaDo opens, at most once per 30 minutes. These account-linked events are used only for first-party product analytics.
TaDo does not collect your location, contacts, health data, or advertising identifiers, and it does not track you across other companies' apps or websites. It does not use third-party analytics or crash-reporting services. Our server does not store your IP address; it uses it only briefly, in memory, to rate-limit requests made before you sign in.
Where picture settings are available, you can choose initials, a saved avatar design, or a photo you select. Arbito stores your picture choice, avatar design, uploaded picture derivatives, review status, and picture reports or blocks. The same selected picture is used by your connected Arbito apps; editing it does not make a private task list, workout, or profile public.
Uploaded photos are processed on Arbito's server to remove embedded metadata and make square versions. We do not keep the original upload. We use Cloudinary to store the processed shared profile pictures. When you choose a new shared photo, supported apps show it privately to you while other people keep seeing your previous public picture. It is available only to you and authorized reviewers until approval. Approval makes it public automatically if it is still your chosen photo; choosing another picture first cancels that switch. Older apps may require explicit selection after approval. If a photo is not approved, your previous picture remains public and returns in your own view; review status is available in picture settings. An approved public profile photo is accessible to anyone with its image link, even if another part of an app is private. Your saved avatar remains available when you choose a photo.
You can remove a photo or switch to initials in picture settings. Switching to an avatar or initials keeps a saved photo private for reuse; use Remove photo to delete it. Choosing another approved photo removes the previous retained photo; review decisions can also remove a picture. Account deletion schedules removal of stored picture files. Removal from active display happens before file cleanup; supported app and server caches normally revalidate within five minutes; offline or saved copies can remain longer, and copies another person saved may remain outside our control. Restricted recovery backups may retain removed data until their applicable retention period expires. Review and safety records are used to operate and protect the account service. Contact support@arbito.co to report a picture or ask about removal.
We do not use your data for advertising, and we do not sell it.
| Who | What they can see |
|---|---|
| Everyone signed in to TaDo | Your username and avatar where you appear in search, follows, or a leaderboard. The individual leaderboard shows your completed-task count, Mojo earned, and streak, and currently includes every user who has completed tasks, including people with private profiles. |
| People viewing a public profile | Username, avatar, bio, join date, completed-task and achievement counts, follower and following counts, high-fives, and streak. A private profile is not shown to others. |
| Your followers | Feed posts for tasks you finish in public lists while your profile is public. |
| Members of a group you are in | Your username, avatar, join date, group activity, and your place on the group leaderboard. |
| People you block | Nothing new: blocking hides your activity from them and theirs from you, and removes follows between you. |
| Our team | Reports you file or that are filed about you, to review them. |
Making your profile private also makes your lists private. It does not remove feed posts you already made, and it does not currently take you off the individual leaderboard.
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Cloudinary (through the Arbito account service) | Stores processed shared pictures and restricted account/picture identifiers for restore safety | Cloudinary Privacy Policy |
| Arbito account (run by us) | Sign-in, your profile, and your Mojo balance | Arbito Account Privacy Policy |
| Railway | Hosts our servers and database | Railway Privacy Policy |
| Apple / Google | Only if you choose Sign in with Apple or Google for your Arbito account | Apple · Google |
We may also disclose information if the law requires it, or to a successor if the business is transferred, under this policy.
Data is encrypted in transit (HTTPS). Sign-in uses short-lived, signed tokens issued by your Arbito account, and sign-in tokens on your device are kept in secure storage. No method is perfectly secure, but we work to protect your information.
You can see and change your tasks, profile, and privacy setting in the app, and delete your account at any time (Section 6). Depending on where you live, you may also have the right to request a copy of your data, correct it, restrict or object to how we use it, or receive it in a portable format.
Send requests to support@arbito.co. We respond within 30 days.
TaDo is for people 13 and older; an Arbito account requires you to confirm you are at least 13. We do not knowingly collect information from children under 13. If you believe a child under 13 is using TaDo, email support@arbito.co and we will delete the account.
We are based in the United States, and our service providers may process your information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for those transfers.
If we change this policy in a meaningful way, we will update the date at the top of this page and, where appropriate, tell you in the app.