Privacy policy

Privacy policy for the website and the Android app “No Things To Do” under the EU General Data Protection Regulation (GDPR).

In short

• As the developer, I do not collect, store or receive any personal data, neither through the app nor through this website.
• The app has no account, no ads, no analytics or tracking services and no server of its own.
• Your lists, notes, dates and family entries stay on your phone.
• Data only leaves your phone when you use a third-party feature, for example the AI with your own API key. It then goes directly to that provider, not to me.

1. Controller

2. The app

Storage on your device

Everything you create in the app (lists, items, reminders, notes, PDFs, scans, family planner, activities, boards, settings) is stored only on your device. I have no access to it.

Android backup

If backup is turned on in your Android settings, Android may back up the app's data to your own Google account. This backup is done by Google and stays in your account, not with me. You can turn it off in the Android settings.

AI features (optional, your own key)

The AI is not required. Without a key, the app works with simple rules on the device or, if your phone supports it, with Gemini Nano directly on the device. In these cases no data leaves the phone.

If you enter your own API key, the app sends your AI request directly to the provider you chose. This can be Google (Gemini API), Groq, OpenRouter, Together AI, OpenAI or another OpenAI-compatible provider you enter. Only the content needed for the request is sent, for example the spoken or typed sentence, the title and items of the list concerned, the current date and, for a scan, the recognised text. I do not receive this data. Processing by the provider is subject to its terms and privacy policy, which you accepted when you created your key. Depending on the provider, processing may take place outside the EU.

Your key is stored encrypted in the Android Keystore on your device and is only sent to the respective provider. You can delete it at any time in the AI settings.

The legal basis is your consent, given by entering the key and starting the request (Art. 6(1)(a) GDPR).

Voice input

For voice input (the microphone button and the microphone widget), the app uses your Android system's speech recognition. Depending on the device and its settings, the provider of that speech recognition, usually Google, processes the recording on the device or on its servers. The app itself does not store any recordings. You can revoke the microphone permission at any time in the Android settings.

Scanning documents and recognising text

The document scanner and text recognition use Google ML Kit through Google Play services. Recognition runs on the device.

Purchases and ratings through Google Play

The optional support purchase (Pro, widget colors) is handled by Google Play Billing, and in-app rating by the Google Play In-App Review feature. Google processes the necessary data under Google's privacy policy. I do not receive any payment details. In the Play Console, Google provides me with order and statistics data (for example the order number, country and amount of a purchase, and public reviews). I use this only for accounting and statutory retention obligations (Art. 6(1)(b) and (c) GDPR).

Permissions

• Internet: only for AI requests to the provider you chose.
• Microphone: only for voice input, when you start it.
• Notifications, exact alarms, start after reboot: so reminders arrive on time and survive a restart.

3. This website

The website uses no cookies, no analytics or tracking services and no forms. The video, images and fonts are loaded from the same server as the page.

Hosting by Cloudflare

The website is delivered through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary data that your browser sends automatically: IP address, date and time, the page requested, browser and operating system. This data is used only to deliver the website, to fend off attacks and to keep it stable. Cloudflare runs a worldwide server network for this, so the data may also be processed in the USA.

The legal basis is my legitimate interest in a secure and fast website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection under the EU Commission's adequacy decision. A data processing agreement with Cloudflare is in place (Data Processing Addendum, Art. 28 GDPR). More: cloudflare.com/privacypolicy.

I do not use any Cloudflare analytics features (such as Web Analytics).

Links to Google Play

The “Get it on Google Play” buttons are plain links. Only when you click one do you go to Google Play, where Google's privacy policy applies.

4. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)), for the AI for example by deleting your key. As I do not store any data about you, I can usually only confirm that none exists. For data held by AI providers, Google or your hosting, please contact the respective provider.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

5. Changes

If the app or the website changes, I will update this policy. The version published here applies.

Last updated: October 2026 · Deutsche Fassung