Privacy Policy

Our Commitment to Privacy

icando.app is committed to protecting your privacy. Unlike many productivity apps, we do not collect, store, or transmit any personal information. Your data stays on your device.

What We Do NOT Collect

We do not collect, store, or process:

• Personal information (names, emails, phone numbers) except when explicitly provided for authentication
• Personally identifiable information or user profiles
• Location data
• Device information or identifiers for tracking purposes
• Payment information (our service is free)
• Data for advertising or marketing purposes

Note: Authentication features are currently not implemented in the user interface, so no personal data collection occurs in normal usage.

How Your Data is Stored

All your data (todos, timer settings, preferences) is stored locally on your device using browser localStorage. This means:

• No data is sent to our servers
• No internet connection required for core functionality
• You have full control over your data
• Data persists across browser sessions

Analytics and Usage Data

We use Umami Analytics to understand how users interact with our app and improve the user experience. Umami is a privacy-first, cookie-less analytics platform that does not collect any personal information. Umami collects:

• Anonymous usage statistics (page views, button clicks, session duration)
• Technical information (browser type, device type, screen resolution)
• Geographic location (country level only, derived from truncated IP)

This data is completely anonymized and aggregated. We cannot identify individual users, and no data is shared with third parties for advertising or tracking purposes. Umami does not use cookies and does not track users across different websites.

Cookies and Tracking

We use minimal cookies for essential functionality only. Currently, cookies are used for:

• Session Cookies: HttpOnly cookies that maintain login sessions (7-day expiration)
• Purpose: Secure session management
• Storage: Cookies are stored securely and can be managed through browser settings

The core Pomodoro timer and todo functionality works entirely without cookies. Our analytics platform (Umami) is cookie-less and does not store any information on your device.

Third-Party Services

icando.app does not integrate with third-party services for data collection. The only external communications are:

• Loading the app from our web server
• Optional Azure Table Storage sync (user-initiated, encrypted)
• Service worker for offline functionality

Optional Cloud Sync

For users who choose PRO features, we offer optional synchronization with Azure Table Storage. This feature:

• Is completely optional and user-controlled
• Requires explicit user consent
• Uses end-to-end encryption
• Can be disabled or data deleted at any time

Data Security

Since your data never leaves your device, security is primarily your responsibility. However, we implement security best practices including:

• HTTPS encryption for app delivery
• Secure coding practices
• Regular security audits
• No server-side data storage vulnerabilities

Children's Privacy

icando.app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent and believe your child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the new policy on this page with an updated effective date.

Your Rights

Since we don't collect personal data, there are no traditional data subject rights to exercise. However, you always have:

• Full control over your local data
• Ability to delete all data by clearing browser storage
• Right to stop using the service at any time

Contact Information

For privacy-related questions or support, contact us via X (Twitter) Direct Message:

• Contact us on X (Twitter) @icando_app

Changelog

• 1.4 (2026-01-15): Replaced Google Analytics with Umami Analytics (privacy-first, cookie-less). Removed all tracking cookies and updated cookie policy.
• 1.3 (2026-01-02): Added Google Analytics disclosure and updated cookie policy to include analytics cookies.
• 1.2 (2026-01-02): Corrected cookie policy to accurately reflect session cookie usage for authentication.
• 1.1 (2026-01-02): Comprehensive rewrite emphasizing privacy-first approach, clarified no data collection policy, added sections on local storage, offline functionality, and user rights.
• 1.0 (2025-12-02): Initial draft.