Privacy Policy
Last updated: November 2, 2026
TODO Crush is made by Minosin AB, a company registered in Stockholm, Sweden ("we", "us"). This policy says what we store when you use TODO Crush on the web, on Android, on iOS or from an AI assistant, why we store it, who helps us process it, and how you can get a copy of it or delete it.
What we collect
- Your email address. You sign in with a one-time code we email to you. We use the address to sign you in, to link your purchases to your account and to send you emails about your account and subscription.
- Your board. Your lists and their names and order, and your tasks with their titles, descriptions, tags, due dates and whether they are done or archived. We store it so it is the same on every device and in every assistant you connect.
- Task history. Every change to a task (created, edited, moved, completed, archived, restored) is kept with the time and where it came from (the app, the in-app AI or a connected assistant), so you can see what happened and undo it.
- What you ask the in-app AI. When you use the AI panel, your message and the parts of your board it needs to answer are sent to our server, which asks OpenAI for the reply and the changes to make.
- Assistant connections. When you connect ChatGPT, Claude, Cursor or another assistant over MCP, we keep the access it was granted, which assistant it is and the calls it makes on your board.
- Subscription status. Whether you have an active subscription, its plan and renewal or end date, as reported by Stripe, Google Play or the App Store. We never receive or store your card details.
- Usage data. Events about how you use the app and the website (for example which page you opened or which button you tapped), an install id stored on your device, the link that brought you here, device type and approximate location.
- Session recordings. On the website, Microsoft Clarity records clicks, mouse movement and scrolling, and replays the page as you saw it, including its text and what you typed (nothing is masked). Clarity is never told who you are, but we store the id Clarity gives your session, so a recording can be linked to your account. We use that to help you when you contact us and to fix what does not work.
- Crash reports. The mobile apps can send crash reports with basic device and app information through Firebase Crashlytics.
How we use it
- To run the service: store your board, sync it and let the assistants you connect use it.
- To run the AI features you ask for, in the app and through connected assistants.
- To sell and manage your subscription and unlock the app when it is active.
- To email you: your sign-in codes, a welcome email, and notes about your subscription or board. You can unsubscribe from anything that is not needed to sign in.
- To understand how TODO Crush is used and to find and fix problems.
We do not sell your data, and we do not share it with anyone for their own marketing.
Who processes it for us
- Google Cloud and Firebase: hosting, the database that holds your board and account (Firestore), and crash reports (Crashlytics).
- OpenAI: answers the in-app AI. It receives your message and the board data the answer needs, through our server, and does not use API data to train its models.
- Stripe, Google Play and the Apple App Store: take your payments. Each handles your payment details under its own privacy policy and tells us only the state of your subscription.
- MailerSend: sends our emails.
- Microsoft Clarity: session recordings and heatmaps on the website, as described above. Microsoft receives no account information from us.
- The assistants you connect (for example ChatGPT, Claude or Cursor) read and change your board only after you sign in and allow it, and what they do with your conversations is covered by their own privacy policies.
Where it is stored
Your data is stored in Google Cloud in the EU and encrypted in transit and at rest. Only your account, and the assistants you allowed, can reach your board.
Your rights
Under the EU General Data Protection Regulation you can ask for a copy of your data, have it corrected, have it deleted, receive it in a machine-readable format, and object to how we process it. Email admin@minosin.com and we will answer within 30 days.
Keeping and deleting your data
We keep your data while your account exists. You can delete your account and your board at any time on the delete account page or by emailing admin@minosin.com; we delete your personal data within 30 days. Payment records that the law requires us to keep are kept for that time only. Anonymous, aggregated statistics may be kept.
Children
TODO Crush is not meant for children under 16, and we do not knowingly collect their data. If you think a child has given us personal data, contact us and we will delete it.
Changes to this policy
When we change this policy we update the date at the top and, for important changes, tell you by email or in the app.
Contact
Minosin AB - Sweden
Email: admin@minosin.com