1. Overview
Twocan is a local-first todo list app. Your lists live on your device. We do not require an account, and we do not collect analytics, advertising identifiers, or payment information.
2. Information Stored on Your Device
The following data is stored only on your device and never leaves it unless you share a list:
- Your todo lists and their items
- App preferences (theme, language, appearance settings)
3. Shared Lists
When you choose to share a list, that list's title and todos are uploaded to our server so people you share the link with can view it. Important details:
- Sharing is opt-in per list; lists you don't share never touch the network
- Shared lists are stored on Cloudflare infrastructure (D1 database)
- There are no accounts: anyone who has a list's share link can view and edit that list
- Share links use long random identifiers that are infeasible to guess
- Edits you make to a shared list are synced to the server; edits from others are downloaded to your device
- Shared lists remain on the server until deleted; contact us to request deletion of a shared list
4. Information We Do Not Collect
We do not collect:
- Names, email addresses, or any account information
- Usage analytics or behavioral data
- Location data
- Photos, contacts, or other device content
- Payment information (the app has no purchases)
5. Data Sharing and Disclosure
We do not sell, trade, or transfer your information to third parties. Shared-list data is processed by Cloudflare, our hosting provider, in accordance with their privacy policy. We may disclose data if required by law or legal process.
6. Data Security
Shared lists are transmitted over HTTPS and stored on Cloudflare's infrastructure. Because access to a shared list is controlled solely by knowledge of its link, treat share links like the contents they protect: only send them to people you want to have access.
7. Your Rights
You can:
- Delete any local list at any time from within the app
- Request deletion of a shared list from our server by contacting us with its link
- Stop syncing at any time by deleting your local copy of a shared list
8. Children's Privacy
Our service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Since the app collects no personal information and requires no account, no profile of any user — child or adult — is created.
9. International Users
Shared lists are stored on Cloudflare's global network and may be processed in the United States or other countries where Cloudflare operates infrastructure.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the new Privacy Policy on this page and update the "Last updated" date.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at support@twocantodo.com.