Privacy Policy

Version: 1.2 | Effective: May 2026 | Last updated: May 9, 2026

Last updated: May 9, 2026

TodoHub is a brand of RTec Desenvolvimento de Softwares LTDA (“we”, “our”, or “company”). We respect the privacy of TodoHub users and visitors to our institutional channels. This Privacy Policy describes how we process personal data in line with Brazil’s General Data Protection Law (Law No. 13,709/2018 — LGPD), and with other laws that may apply depending on your region (such as the GDPR where relevant).

Using the TodoHub application or our website implies that you have read this policy. Additional rules may apply under the Google Play Store, Apple App Store, or contracts we enter into with you.

1. Controller and contact

The controller of personal data processed in connection with TodoHub is RTec Desenvolvimento de Softwares LTDA, registered with the Brazilian Federal Revenue under CNPJ No. 17.280.026/0001-33.

For privacy requests or questions: privacy@todohub.com, contact@todohub.com, or +55 (11) 97481-5293.

2. Scope of this policy

This policy applies to the TodoHub mobile and web services, authentication flows, push notifications, and our institutional website (including contact channels). Features that rely on Google sign-in or calendar integrations may involve processing by Google under its own terms; when you connect external calendars, their providers’ policies also apply.

3. Data we may collect

Depending on how you use TodoHub, examples include:

Account and sign-in (via Google): identifiers, name, and email address as provided by Google when you choose Google sign-in. We do not collect or store account passwords for TodoHub through this policy’s scope, and we do not collect profile photos for the purposes described here.
Tasks and scheduling: task titles, descriptions, dates, priority, and status; appointment or calendar-related information you create or sync.
Technical data: IP address, device type, operating system, browser or app version, and similar data needed for security, troubleshooting, aggregated metrics, and service operation.

4. Purposes and legal bases

We process personal data to:

Provide TodoHub features (tasks, calendar-related functionality, and related productivity tools);
Authenticate users through Google and maintain your account;
Send push notifications when you opt in (via OneSignal);
Process purchases or subscriptions through the Google Play Store or Apple App Store, according to those platforms’ rules;
Meet legal or regulatory obligations;
Protect the security of the service and prevent abuse;
Improve stability and communication channels.

Depending on the situation, we rely on bases such as performance of a contract or preliminary procedures at your request, compliance with a legal obligation, consent where required (for example, optional integrations or notifications), or legitimate interest when compatible with your rights and expectations.

We do not sell your personal data. We do not share data for unrelated third-party advertising as described in this policy.

5. Suggestions, rules-based logic, and AI-assisted processing

TodoHub may suggest or pre-fill information (for example, titles, times, priorities, or arrangements) based on what you provide—such as tasks, calendar-related content, and settings—and on the overall picture of your use. Some processing uses deterministic rules and conventional algorithms; other features may use machine learning or other AI methods. We may combine approaches, and the technical mix can evolve as the product improves.

These outputs are assistive: they help you organize your agenda and tasks; they are not a substitute for your own choices. You can review, edit, or disregard any suggestion. We do not aim to make solely automated decisions about you that produce legal or similarly significant effects without your meaningful involvement; where a feature could materially affect you, you stay in control to accept, adjust, or dismiss it.

If the law applicable to you grants specific rights regarding automated decision-making or profiling (for example, explanation, human intervention, or objection), contact us through the channels in Section 9 and we will handle your request in accordance with that law.

6. Sharing of data

We may share data with essential service providers, strictly as needed for the purposes above:

Infrastructure: hosting on virtual servers or cloud/VPS providers (without committing to a specific vendor name);
Authentication: Google, when you use Google sign-in;
Payments: Google Play Store and Apple App Store handle payment processing for in-app purchases and subscriptions under their terms;
Communications: OneSignal for push notifications.

International transfers may occur when providers or platforms operate outside Brazil. When required, we use safeguards compatible with applicable law.

7. Security and retention

We adopt reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or improper alteration. Specific technologies may evolve over time; we do not warrant a particular encryption standard in this document.

We keep data for as long as necessary for the purposes stated, to comply with legal obligations, or to defend rights in administrative or judicial proceedings. Indicative periods: account-related data while your account is active; user content may be retained for a short grace period after closure where needed for deletion or backup cycles; access logs for a limited period consistent with security needs; records related to transactions may be kept as required by tax or commercial law (often several years where applicable).

8. Your rights

Subject to LGPD and other applicable laws, you may request confirmation of processing, access, correction of incomplete or inaccurate data, anonymization, deletion or portability where applicable, information on sharing, and withdrawal of consent when consent is the legal basis, among other statutory rights.

Where those laws provide rights related to automated processing or profiling (including explanation or review), you may exercise them through the same contact channels, subject to verification and legal limits.

9. How to exercise your rights and contact information

To exercise your rights, contact us at privacy@todohub.com or contact@todohub.com, or call +55 (11) 97481-5293. We may ask for reasonable information to verify your identity before fulfilling a request.

General and privacy-related inquiries use the same channels: privacy@todohub.com and contact@todohub.com.

10. Location of processing

Data may be processed and stored in Brazil (São Paulo), the United States, and Europe. We do not specify individual regions or data centers in this policy.

11. Cookies and similar technologies

Our website may use cookies or similar technologies for basic operation or analytics (for example, through tags such as Google Tag Manager / analytics tools). You can manage preferences in your browser; additional consent mechanisms may be added over time and this policy may be updated accordingly.

12. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. Please revisit this page periodically. The last update date is shown at the top of this document.