TickPrivacy policy
Tick is a to-do app for planning tasks, getting reminded and sharing them with others. This policy explains what data Tick processes, why, who it is shared with and what your rights are. It applies to the website ticktodo.nl, the Tick web app and the Tick Android app.
Who is responsible?
Dio Communicatieadvies (sole proprietorship)
Aijenseweg 18, 5854 PT Bergen (L), the Netherlands
Chamber of Commerce (KvK) number 58772316
Email: dio@ticktodo.nl
In short
- We only use your data to make Tick work.
- No ads, no tracking, no analytics, and we never sell anything.
- You can always download your data and have your account deleted.
What data and why
| Data | Purpose |
|---|---|
| Account: name, email address, password (stored only as a hash) | Logging in, recognising your account, and letting others share a task or list with you |
| Your tasks: titles, descriptions, lists, subtasks, reminder times, repeats | The core of the app: storing your tasks and showing them on all your devices |
| Attachments and background photo you add yourself | Showing them with your task or in the app |
| Places: addresses and coordinates you add to a task or as a favourite place | Reminders on arrival or departure |
| Shared tasks and lists: who you share with, who ticked something off or took it on | Keeping track of tasks together |
| Devices: push notification data (an address at your browser's or phone's notification service), browser type, and from the Android app: device name, app version and whether notifications and location are on | Sending reminders, and showing you in Settings which devices are linked |
| Settings: time zone, language, default times and display | Making Tick work the way you want |
| Technical data: IP address (briefly, to limit login attempts) and when you were last active | Security and preventing abuse |
Your location
- Driving mode in the web app uses your location only on your device. Your location is not sent to us.
- Place reminders in the Android app: your phone itself keeps track of when you arrive at or leave a place (also while the app is in the background, if you allow it). Your current location is not sent to us; only the places you save with a task are stored on the server.
- If you use "current location" when choosing a place, that one spot is saved as the task's place.
Legal basis
We process your data because it is necessary to provide the service you use (performance of a contract), and for security and preventing abuse (legitimate interest). For location and notifications your device asks for your permission first; you can withdraw it at any time in your phone's or browser's settings.
Who is data shared with?
- Cloudflare hosts the app, the database and attachments. Cloudflare processes the data on our behalf under a data processing agreement. Cloudflare has servers worldwide; transfers outside the EU are covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
- Notification services of your browser or phone (such as Google, Apple or Mozilla) deliver push notifications. A notification contains the task's title.
- OpenStreetMap: the map in the app loads map tiles directly from OpenStreetMap, which therefore sees your IP address. When you search for an address, our server sends the search term to Nominatim (OpenStreetMap), without your IP address or account.
- People you share with see the tasks or lists you share with them, and your name.
- Payments: if you pay for Tick, this goes through a payment provider. It processes your payment details; we never see card numbers or bank details.
We do not sell your data and do not share it with anyone else, unless the law requires us to.
How long do we keep data?
- As long as your account exists, we keep your tasks and settings.
- A task in the trash is deleted for good after 30 days.
- When you delete your account, your tasks, places, keys, devices, settings and attachments are deleted. Tasks you shared with others disappear for them too; a shared list passes to another member.
- Data we must keep by law, such as invoices, we keep as long as the law requires (7 years).
Security
All connections are encrypted (https). Passwords and keys are stored only as a hash, never readable. The data is stored encrypted on Cloudflare's servers. Login attempts are limited to prevent guessing.
Cookies and local storage
Tick only uses what is necessary: a cookie to keep you logged in, a cookie for your language choice, and local storage in your browser so the app works offline and remembers your display settings. There are no tracking or advertising cookies.
Your rights
You have the right to access your data, have it corrected or deleted, receive a copy (in Tick itself: Settings › Data › Backup), and to object to or restrict processing. Send an email to dio@ticktodo.nl; you will get an answer within one month.
Deleting your account: email dio@ticktodo.nl from your account's email address and ask for your account to be deleted. We delete it within 30 days and let you know when it is done.
If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Children
Tick is not intended for children under 16.
Changes
When we change this policy, the date at the top changes. For major changes we let you know in advance.