Last updated: November 7, 2026
1. Local storage
iTodo stores tasks, plans, notes, dates, and completion history in a local database on your Mac. Display preferences also stay on your Mac. No account is required. The app includes no advertising, analytics, or third-party tracking SDKs, and does not automatically upload this content to the developer’s servers.
2. Import and export
The app reads or writes a backup only when you choose a file and confirm the operation. Backups contain tasks and notes and are not additionally encrypted by iTodo. Keep them secure. If you choose iCloud Drive or another synced folder, that service may sync the backup under its own settings and privacy policy.
3. AI and MCP
MCP is an optional local integration, not a cloud AI service provided by iTodo. In the App Store version, the connection is off by default. Only after you explicitly allow it in Settings → AI & Data does the app open an HTTP endpoint bound to 127.0.0.1. It does not accept LAN or public internet connections. Random credentials are generated locally and stored in Keychain under service com.wonderyuan.itodo.mcp, account loopback-token-v1. Copying the configuration requires your action and includes credentials; do not share it publicly. Direct-distribution preview builds instead use a stdio client you configure and open no network listener.
A connected client with the credentials can read all tasks and notes and change tasks and plans. The client may send this content to its AI provider. Connect only trusted clients and keep tool-call confirmations enabled. Those clients and AI providers process data under their own privacy policies. iTodo does not control their retention practices.
Turning off the connection in the App Store version, or quitting the app, stops the endpoint. For a direct-distribution build, remove the MCP configuration from your AI client and stop the MCP process. Disconnecting cannot recall data already read or saved by a client. Credentials contain no tasks, names, Apple Account details, or device identifiers. Disabling the connection does not automatically delete its Keychain record, so the same configuration can be reused. To remove it, first disable the connection, delete the Keychain item identified above and the client configuration, then enable the connection again to generate new credentials.
4. System permissions
Launch at login is enabled by you and controlled by macOS Login Items. Backups use the system file picker. iTodo does not need camera, microphone, contacts, location, screen recording, or Accessibility permissions. Island display adaptation reads only screen geometry provided by macOS.
5. Retention and deletion
Data stays on your Mac until you delete records or local data. Deleting a task removes it from the app, but does not delete backups you exported or copies held by a file-sync service. Uninstalling the app may leave its local database and preferences behind. To erase local task data, first quit iTodo and connected MCP clients, find the data location shown in Settings → AI & Data, and delete that directory in Finder. Handle exported backups separately. Deletion is irreversible; decide whether you need a backup first.
6. Pro purchases and trial
iTodo Pro payments and purchase restoration are handled by Apple’s App Store in-app purchase system. The app uses StoreKit locally to verify purchases and access rights. It does not receive your payment card details or upload transactions or task content to the developer’s servers. Purchases are governed by Apple’s account, privacy, and transaction terms. Preview builds cannot make production purchases.
The island trial starts only when you choose to begin it. The App Store version confirms it through an Apple zero-price non-consumable product. Its 72-hour duration is measured from the verified original purchase time; restoring purchases does not restart it. Direct-distribution previews use a local trial record instead. The start and last-check times are kept in local Keychain to determine trial access and detect substantial clock rollback. They contain no tasks, names, Apple Account details, or device identifiers. Uninstalling the app or clearing preferences does not automatically remove this record. You can remove it in Keychain Access under service com.wonderyuan.itodo.pro, account island-trial-v1. This does not delete tasks, revoke Apple-managed purchases, or reset Apple’s trial start time. When the trial ends, only the top island layouts are disabled. No data is deleted and no charge is made automatically.
7. Links, support, and this website
External help and policy links open in your system browser. Do not publicly share screenshots or attachments containing private tasks, internal work, or database contents. The version-information copy action includes app and system details, not task content. An offline policy is included in the app. Support is available at https://itodo.yuanundo.top/support/ and yuanundo@163.com. If you email support, email providers process your address and the content you choose to send so we can respond and resolve the issue. We will not ask for your Apple Account password, payment card details, or a complete task database.
This support website serves static pages only. It uses no advertising, analytics trackers, third-party fonts, or cookies. Hosting infrastructure may process ordinary request information such as IP address, browser information, and access time for delivery, security, and troubleshooting. That information is not linked to the app’s local task database.
8. Policy changes
If data handling changes, this policy and the in-app explanation will be updated. Preparing an App Store release does not mean the app is already available. The policy and App Store privacy declarations must match the actual release and integrations.