Cookie Do - Privacy Policy

Last updated: September 10, 2026

This policy describes how the Cookie Do iOS app handles your data. The short version: we collect no personal data, and the only thing we do collect is four anonymous counters described below. Cookie Do is published by ByteVoid SASU ("we", "our", "us"). The bytevoid.io website has a separate privacy policy at /legal/privacy.

Cookie Do is a calm, day-by-day to-do app.

The short version

Cookie Do has no accounts and no ads. Your tasks live on your device and, if your iPhone uses iCloud, they also sync through your own private iCloud so your data survives a lost phone and stays in step across your devices. That iCloud copy belongs to your Apple Account; we cannot read it, and it never passes through anything we operate. Subscriptions are billed by Apple; we never see your name, card, or address. The app also sends three anonymous usage counters to our own server, described in full below; nothing in them identifies you or your device.

Your tasks: on your device, and in your own iCloud

  • Your tasks and their days. The things you add, the day each one is scheduled for, optional emoji "toppings," and which tasks you've completed or rolled over. All of this lives in the app's storage on your iPhone.
  • App settings. Small preferences (such as which view you last used). Stored locally.
  • Widgets. The Home and Lock Screen widgets read from shared storage on your device. Nothing extra is collected.

iCloud sync

When your iPhone is signed in to iCloud, Cookie Do stores your tasks in your private iCloud database (Apple's CloudKit), tied to your Apple Account. This is what keeps your devices in sync and lets your tasks come back if you reinstall the app. It is encrypted by Apple in transit and at rest, and it is private by design: only your Apple Account can access it. ByteVoid has no way to read, query, or export it. Your task data never passes through any server we operate; the only thing we do receive is the anonymous usage counters described below.

Sync is optional. If you turn Cookie Do off in your device's iCloud settings, or don't use iCloud at all, the app works fully on-device.

Anonymous usage counters

Cookie Do sends four anonymous usage counters to a server we run: how often the app is opened for the first time after an install, how often the subscription screen is shown, how often it is dismissed, and how often a free trial is started. Each counter carries only four things: the counter's name, the screen or action that triggered it, the app version, and the platform (iOS). Nothing else travels with it.

No identifier of any kind is attached: no device ID, no advertising ID, no account ID, no per-event ID. We do not send a timestamp from the app; our server stamps the calendar day it was received, nothing finer. There is no way to connect a counter back to you, your device, or any other event. Nothing here is used for tracking, profiling, or advertising, and it is never linked to you. Cookie Do's App Store Privacy label reflects this: Data Not Linked to You.

What we do NOT collect

  • No personal data. We never see your tasks or anything else you type.
  • No account, no email, no sign-in. The app does not ask who you are.
  • No advertising, no ad identifiers, no third-party trackers.
  • No identifiers of any kind attached to the anonymous usage counters described above.
  • No AI processing. The only places your task data goes are your device and your own iCloud.

Subscriptions and payments

Cookie Do Pro is purchased through Apple. Apple processes the payment against your Apple Account under Apple's own terms and privacy policy; we never receive your name, payment details, or billing address. Apple provides us with aggregated, anonymous sales reports only. The app checks your subscription status on-device through Apple's StoreKit; that check involves no server of ours.

Deleting your data

Deleting the app removes all of its data from your device. If iCloud sync was on, your tasks also remain in your own iCloud (that's what lets them come back if you reinstall). To delete that copy too: open Settings, tap your name, then iCloud, then Manage Account Storage, choose Cookie Do, and delete its data. Turning Cookie Do off under iCloud instead stops syncing without deleting. There is nothing for us to delete on our end, because we never had your data.

Note: if you have iCloud Backup enabled for your iPhone, Apple's standard device backup may also include app data as part of your encrypted device backup. That is handled by Apple under your iCloud settings and Apple's privacy policy, not by us.

The website is separate

This website (bytevoid.io) uses Plausible, a privacy-friendly, cookie-free analytics tool, to count anonymous page views. Plausible does not use cookies and does not collect personal data. If you email us for support, we see your email address and whatever you choose to include, and we use them only to reply; see the website privacy policy for details. Plausible runs on this website only, not inside the Cookie Do app; the app's own anonymous usage counters are covered above.

Your rights

Your data stays under your direct control: it lives on your device and in your own iCloud, and you can delete either or both at any time as described above. Because we hold no personal data about you on any server, there is, in practice, nothing for us to look up, export, or delete.

If you have emailed us, you can ask us to delete that correspondence at any time by writing to [email protected].

European Economic Area and United Kingdom (GDPR / UK GDPR). You have the rights of access, rectification, erasure, portability, and objection, and the right to lodge a complaint with your supervisory authority. In France, that is the CNIL. In practice these rights have almost nothing to act on, because we collect no personal data about you, on our server or anywhere else; your iCloud data is governed by your agreement with Apple and is under your direct control.

California (CCPA / CPRA). You have the right to know, delete, and opt out of the "sale" or "sharing" of personal information. We do not collect, sell, or share personal information.

Children

Cookie Do does not collect personal data from anyone, including children. It is a simple to-do app suitable for general audiences and contains no ads and no account system. The anonymous usage counters described above carry no personal data and are not used to track anyone, including children.

Data controller

The data controller is ByteVoid SASU, 9 rue des Colonnes, 75002 Paris, France. Contact: [email protected].

Legal basis and retention

We process no personal data by default, so no ongoing storage or retention period applies to you as an individual. The anonymous usage counters are not personal data and carry nothing that identifies you; we keep the aggregated counts indefinitely to understand how the app is used. The only data we ever see about you personally is what you choose to send us by email for support, which we process on the basis of your consent in contacting us and our legitimate interest in replying, and keep only as long as needed to resolve your query before deleting it.

Changes to this policy

We may update this policy. The "last updated" date at the top reflects any changes. If the app ever starts collecting anything beyond what this policy describes, we will update this policy before that happens.

Contact

For questions about this policy, email [email protected].