GDPR

Very Simple Todo is built in the EU and hosts your data in the EU. This page summarises how we handle the GDPR. It is an honest description of the service, not legal advice.

Controller

Portfoliobox Stockholm AB (org. no. 556894-4382), Rånövägen 30, 168 39 Bromma, Sweden, provides Very Simple Todo and is the data controller for your account and todos. Contact us at verysimple@portfoliobox.net for any data-protection request.

What we process and why

• Account identity (Apple/Google identifier, email, name, optional picture), to sign you in and sync your list. Legal basis: performance of our contract with you.
• Your todos (title, notes, done state, star, timestamps), to provide the app's core function and, where you connect one, to let your assistant work with them. Legal basis: performance of our contract.
• Session and connection tokens (hashed), to keep you signed in and to let the assistants you connect reach your list. Legal basis: performance of our contract.
• Subscription status from Apple, to know whether you may add and edit todos and connect an assistant. Legal basis: performance of our contract.
• Security logs, to keep the service safe. Legal basis: our legitimate interest in a secure service.

Where it is processed

In Amsterdam (EU), on Fly.io infrastructure. We do not transfer your todos outside the EU. If you connect a third-party assistant, that assistant's own provider processes the todos you let it access under their terms. That is your choice, and you control it with the token you can revoke.

Your rights

• Access and portability: request a copy of your data in a portable format.
• Rectification: correct anything; you can edit todos and your name in the app directly.
• Erasure: delete a todo in the app, or delete your account under Account and everything tied to it goes with it.
• Restriction and objection: ask us to pause or stop certain processing.

To exercise any of these, email verysimple@portfoliobox.net. You also have the right to complain to your local data-protection authority.

Sub-processors

• Fly.io: hosting and database (Amsterdam, EU).
• Apple: sign-in, subscription billing, and app distribution.
• Google: sign-in, when you choose it.