Last Updated: June 7, 2025

This Privacy Policy describes how Island Todo Private Limited ("we," "us," or "our") collects, uses, stores, shares, and protects your information when you use our website, application, and services (collectively, the "Services").

We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy also outlines how we specifically handle data obtained from Google APIs, adhering to Google's API Services User Data Policy, including its Limited Use requirements.

By accessing or using our Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our Services.

1. Information We Collect

We collect various types of information in connection with the Services we provide, including:

• Personal Information You Provide Directly:
  
  • Contact Information: Such as your name, email address, phone number, and postal address when you create an account, subscribe to our newsletter, or contact us.
  • Account Information: Usernames, passwords, and other credentials used to access our Services.
  • Communication Information: Any information you provide when you communicate with us, such as customer support inquiries or feedback.
  • User-Generated Content: Any content you create, upload, or share through our Services.
  • Payment Information: If you make purchases through our Services, we or our third-party payment processors collect payment card details or other financial information. We do not store full payment card numbers on our servers.
• Information Collected Automatically:
  
  • Usage Data: Information about how you access and use our Services, including your IP address, browser type, operating system, pages viewed, time spent on pages, referral URLs, and clicks.
  • Device Information: Information about the device you use to access our Services, including hardware model, operating system and version, unique device identifiers, and mobile network information.
  • Log Data: Server logs may include information like your IP address, browser type, referring pages, pages visited, and the date and time of your visit.
  • Location Information: With your consent, we may collect precise location data from your device.
• Information Collected from Google APIs (Google User Data): When you choose to connect your Google account or use features that integrate with Google services within our application, we may access certain data from your Google account. Our use of this data will always be limited to the practices explicitly disclosed in this Privacy Policy and will comply with Google's API Services User Data Policy, including the Limited Use requirements.
  The specific types of Google user data we may access, use, store, or share, and the reasons for doing so, include:
  
  • [List specific Google API scopes and the data accessed, e.g., "Google Profile Information (name, email address, profile picture): Used to personalize your account within our app and provide a seamless sign-in experience. We store this to display your profile details within the app."]
  • [List another scope and its use, e.g., "Google Calendar Data (read-only access to events): Used to display your calendar events within our app to help you manage your schedule. We do not modify or share your calendar data with third parties."]
  • [List another scope and its use, e.g., "Google Drive Read-only Access (to specific files you select): Used to allow you to [explain specific functionality, e.g., 'attach documents from your Google Drive to your projects within our app']. We only access files you explicitly select and do not modify or share them."]**
  We commit to requesting only the narrowest scopes necessary to provide the functionality you opt into. We do not request access to data we do not need or for "future enhancements" that have not yet been implemented.

2. How We Use Your Information

We use the information we collect for various purposes, including:

• To Provide and Maintain Our Services: To operate, maintain, and improve the functionality of our website and application.
• To Personalize Your Experience: To tailor content, features, and offers to your interests.
• To Communicate With You: To send you updates, security alerts, and support messages, as well as marketing and promotional communications (where you have opted in).
• To Process Transactions: To process payments and fulfill orders for products or services.
• For Analytics and Research: To understand how users interact with our Services, identify trends, and conduct research to improve our offerings.
• For Security and Fraud Prevention: To detect, prevent, and respond to potential security breaches, fraud, or other malicious activities.
• To Comply with Legal Obligations: To meet our legal and regulatory requirements, including responding to lawful requests from public authorities.

3. How We Share Your Information

We may share your information with third parties in the following circumstances:

• With Your Consent: We may share your information when you give us explicit permission to do so.
• With Service Providers: We engage third-party service providers to perform functions on our behalf, such as hosting, data analysis, payment processing, customer service, and marketing. These providers will only have access to the information necessary to perform their functions and are obligated to protect it. This includes services from Google, such as Google Analytics, to help us understand app usage.
• For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency request).
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
• To Protect Our Rights: We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, or violations of our Terms of Service.
• Aggregated or Anonymized Data: We may share aggregated or anonymized data that cannot reasonably be used to identify you.

Specifically regarding Google User Data: We will not share your Google user data with any other application or third party unless we have your explicit consent, and such sharing is consistent with Google's API Services User Data Policy, including the Limited Use requirements. We will only use your Google user data for the specific purposes for which you granted access and as described in this Privacy Policy.

4. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

5. Data Security

We implement appropriate technical and organizational measures designed to protect the security of any personal information we process. However, please be aware that no security system is impenetrable, and we cannot guarantee the absolute security of your information. You are responsible for keeping your password and account details confidential.

6. Your Data Protection Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:

• Right to Access: You have the right to request access to the personal information we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.
• Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal information, under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information, under certain conditions.
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• Right to Object: You have the right to object to our processing of your personal information, under certain conditions.
• Right to Withdraw Consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the contact details provided below. We will respond to your request in accordance with applicable laws.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (like web beacons and pixels) to track activity on our Services and hold certain information. Cookies are small data files stored on your device that help us improve our Services and your experience, see which areas and features of our Services are popular, and count visits. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

8. Children's Privacy

Our Services are not intended for individuals under the age of [e.g., 13 or 16, depending on relevant laws]. We do not knowingly collect personal information from children without parental consent. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete such information from our systems. Note: If your application is directed primarily at children, it should not use Google Sign-In or any other Google API Service that accesses data associated with a Google Account.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Services after the effective date of the revised Privacy Policy constitutes your acceptance of the terms.

10. Contact Us

If you have any questions about this Privacy Policy, your data, or your rights, please contact us:

Island Todo Private Limited Island Todo PVT LTD, Island Todo Email: asad@islandtodo.com Website: https://islandtodo.com

You can check on the status of your project by contacting our customer service team at any time during regular business hours or by emailing us directly with specific questions or concerns. Additionally, periodic progress reports will be provided to keep you updated on where things stand.