Cookie Do - Privacy Policy

Last updated: November 1, 2026

This policy describes how the Cookie Do iOS app handles your data. The short version: we do not ask for personal data. We collect ten anonymous counters. We keep the notice that Apple sends us for each purchase. We keep the words of a feature request when you choose to send one. All three are described below. Cookie Do is published by ByteVoid SAS ("we", "our", "us"). The bytevoid.io website has a separate privacy policy at /legal/privacy.

Cookie Do is a calm, day-by-day to-do app.

The short version

Cookie Do has no accounts and no ads. Your tasks live on your device and, if your iPhone uses iCloud, they also sync through your own private iCloud so your data survives a lost phone and stays in step across your devices. That iCloud copy belongs to your Apple Account; we cannot read it, and it never passes through anything we operate. Subscriptions are billed by Apple; we never see your name, card, or address. Apple does tell our server about each purchase. See Subscriptions and payments. The app also sends ten anonymous usage counters to our own server, described in full below; nothing in them identifies you or your device. If you choose to send us a feature request from inside the app, we receive the words you typed, with no identifier attached.

Your tasks: on your device, and in your own iCloud

  • Your tasks and their days. The things you add, the day each one is scheduled for, optional emoji "toppings," and which tasks you've completed or rolled over. All of this lives in the app's storage on your iPhone.
  • App settings. Small preferences (such as which view you last used). Stored locally.
  • Widgets. The Home and Lock Screen widgets read from shared storage on your device. Nothing extra is collected.

iCloud sync

When your iPhone is signed in to iCloud, Cookie Do stores your tasks in your private iCloud database (Apple's CloudKit), tied to your Apple Account. This is what keeps your devices in sync and lets your tasks come back if you reinstall the app. It is encrypted by Apple in transit and at rest, and it is private by design: only your Apple Account can access it. ByteVoid has no way to read, query, or export it. Your task data never passes through any server we operate; what we do receive is described below.

Sync is optional. If you turn Cookie Do off in your device's iCloud settings, or don't use iCloud at all, the app works fully on-device.

Anonymous usage counters

Cookie Do sends ten anonymous usage counters to a server we run: how often the app is opened for the first time after an install, how often the subscription screen is shown, how often it is dismissed, how often a free trial is started, how often the app asks Apple to show the rating prompt, which of its own rules held the prompt back when it does not ask, how often the app shows its own question about what to build next, how many people open the app on a day (at most one counter a day), how many open it in a week (at most one a week), and how many complete a task in a week (at most one a week). Each counter carries only five things: the counter's name, the screen, action or rule that triggered it, the app version, the platform (iOS), and how the app was installed (App Store, TestFlight or a development build), so that test builds never count as real use. Those three also carry the number of days since the app was first opened on this iPhone (0 to 30, or 31 for longer), so we can see if people come back. Nothing else travels with it.

No identifier of any kind is attached: no device ID, no advertising ID, no account ID, no per-event ID. The app sends no timestamp. Our server files each counter under the calendar day it arrived. It also keeps the time of the latest counter in each group of identical counters. There is no way to connect a counter back to you or your device. Nothing here is used for tracking, profiling, or advertising, and it is never linked to you. Cookie Do's App Store Privacy label reflects this: Data Not Linked to You.

Feature requests

Cookie Do has a "Request a feature" sheet. You can open it from Settings, and the app may also offer it, at most twice. Sending a request is your choice: close the sheet and nothing is sent.

When you tap Send, the app sends the words you typed to a server we run. Five other things travel with them: where you opened the sheet (Settings or the app's own question), the app version, the build number, the platform (iOS), and how the app was installed (App Store, TestFlight or a development build). Our server records the time the request arrived. Nothing else is stored with it: no name, no email address, no device ID, no advertising ID, no account ID. The request reaches us over the internet like any other: it carries standard technical headers, such as your device's language setting, and our host, Railway Corp. (United States), handles your IP address to deliver it. Railway keeps it in its server logs for 30 days. Our server runs in the Netherlands. We do not store your IP address or these headers with your request.

We read requests to decide what to build. Our server keeps them in its database. Once a week, our server sends a count of new requests to a private Telegram chat that only ByteVoid reads. The count holds none of your words. We read the words in our database.

A request is your own words. Please leave personal details out of it. If you do include personal details, we receive them as part of the text. A request carries no identifier, so we cannot find yours by who you are, and we cannot reply to it. To have a request deleted, email [email protected] with its words and the day you sent it, and we will delete it.

What we do NOT collect

  • We never see your tasks. We receive your words in only three ways. They are a feature request, a public App Store review and an email to us. We receive a feature request only when you choose to send one.
  • No account, no email, no sign-in. The app does not ask who you are.
  • No advertising, no ad identifiers, no third-party trackers.
  • No identifiers of any kind attached to the anonymous usage counters or to a feature request.
  • No AI processing. The only places your task data goes are your device and your own iCloud.

Subscriptions and payments

Cookie Do Pro is purchased through Apple. Apple processes the payment against your Apple Account under Apple's own terms and privacy policy; we never receive your name, payment details, or billing address. Apple sends us two kinds of data. The first is aggregated sales reports. The second is a notice each time a purchase or a subscription changes. A notice holds Apple's identifier for your subscription, the product, the price, the currency and the store country. It holds no name and no email address. Our server keeps these notices to check revenue and handle refunds. The app checks your subscription status on-device through Apple's StoreKit; that check involves no server of ours.

We also read the public reviews that people write about Cookie Do on the App Store. We keep the review text, the rating, the reviewer name and the store country. Apple publishes these reviews. We send a short extract of each new review to our private Telegram chat.

Deleting your data

Deleting the app removes all of its data from your device. If iCloud sync was on, your tasks also remain in your own iCloud (that's what lets them come back if you reinstall). To delete that copy too: open Settings, tap your name, then iCloud, then Manage Account Storage, choose Cookie Do, and delete its data. Turning Cookie Do off under iCloud instead stops syncing without deleting. There is nothing of your tasks for us to delete on our end, because we never had them. We do hold other data, such as a feature request, Apple's purchase notices and your emails to us. The Your rights section says how to have them deleted.

Note: if you have iCloud Backup enabled for your iPhone, Apple's standard device backup may also include app data as part of your encrypted device backup. That is handled by Apple under your iCloud settings and Apple's privacy policy, not by us.

The website is separate

If you email us for support, we see your email address and whatever you choose to include, and we use them only to reply; see the website privacy policy for details. The app's own anonymous usage counters are covered above.

Your rights

Your data stays under your direct control: it lives on your device and in your own iCloud, and you can delete either or both at any time as described above. Your tasks never reach our servers. Our servers hold four things. The first is anonymous counters. The second is Apple's notice for each purchase, which holds an identifier for your subscription. The third is the words of a feature request, if you sent one. The fourth is public App Store reviews. Our host also keeps your IP address in its server logs for 30 days. A feature request you sent carries no identifier; to have one deleted, see the Feature requests section above.

If you have emailed us, you can ask us to delete that correspondence at any time by writing to [email protected].

European Economic Area and United Kingdom (GDPR / UK GDPR). You can complain to us about how we handle your data. Write to [email protected]. We acknowledge each complaint within 30 days. You have the rights of access, rectification, erasure, portability, and objection, and the right to lodge a complaint with your supervisory authority. In France, that is the CNIL. In the United Kingdom, it is the Information Commission (ICO). The counters are anonymous, so these rights have nothing to act on there. These rights do apply to Apple's purchase notices. They apply to a feature request that holds personal details. They apply to the emails you send us. To use a right, write to us. For a feature request, send its words and the day you sent it. For a purchase notice, send the date, the product and the store country of the purchase. We delete data unless the law requires us to keep it. Your iCloud data is governed by your agreement with Apple and is under your direct control.

California (CCPA / CPRA). You have the right to know, delete, and opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information, and we do not ask for any.

Children

Cookie Do does not ask anyone for personal data, including children. It is a simple to-do app suitable for general audiences and contains no ads and no account system. The anonymous usage counters described above carry no personal data and are not used to track anyone, including children. A feature request carries only the words typed into it.

Data controller

The data controller is ByteVoid SAS, 9 rue des Colonnes, 75002 Paris, France. Contact: [email protected].

Legal basis and retention

We process some personal data. The list is:

  • Apple's purchase notices
  • the feature requests you send
  • the emails you send us
  • public App Store reviews
  • your IP address in the server logs of our host

The anonymous usage counters are not personal data and carry nothing that identifies you; we keep the aggregated counts indefinitely to understand how the app is used. Feature requests carry no identifier. We read them on the basis of our legitimate interest in improving the app, each one sent at your own initiative; we keep them while they help us plan the app, and we delete one on request as described above. Personal data reaches us in four ways. They are Apple's purchase notices, a feature request, an email to us, and a public App Store review you write. We process purchase notices on the basis of our legitimate interest in correct revenue and refund records. We keep them until we delete them. We have set no end date. We delete a notice or a request when you ask, unless the law requires us to keep it. We process a support email on the basis of your consent in contacting us and our legitimate interest in replying. We keep it while we need it to answer you, and we delete it if you ask.

Who receives your data

  • Apple Inc. (United States) runs the App Store, payments, iCloud sync and the purchase notices. Apple acts under its own terms and privacy policy.
  • Railway Corp. (United States) hosts the server that receives the counters, the feature requests and the purchase notices. That server runs in the Netherlands.
  • Cloudflare, Inc. (United States) carries the traffic of our web pages and of the short link cookiedo.app. It sees visitor IP addresses.
  • Fastmail Pty Ltd (Australia) hosts our email, including [email protected].
  • Telegram Messenger Inc. delivers messages to our private team chat (see Feature requests).

International data transfers

ByteVoid SAS is established in France. Some of our providers are outside the European Economic Area and the United Kingdom. For each of them, we use the safeguard in this list. For the EEA, that is the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. For the UK, that is the UK Addendum to those clauses or the UK extension to the Data Privacy Framework.

For the EEA, each transfer follows Chapter V of the GDPR. For the UK, each transfer follows Article 44A of the UK GDPR and meets the UK data protection test. Under that test, the protection after the transfer must not be materially lower than UK protection.

  • Railway Corp. (USA; our servers run in the Netherlands). EEA: Standard Contractual Clauses. UK: clause 9.4 of Railway's data processing terms. It uses the Data Privacy Framework if the recipient is certified, or the UK Addendum to the Standard Contractual Clauses.
  • Cloudflare, Inc. (USA). EEA: Standard Contractual Clauses, or the EU-US Data Privacy Framework. UK: the UK Addendum.
  • Fastmail Pty Ltd (Australia). EEA: Standard Contractual Clauses. UK: Fastmail names no safeguard yet.
  • Apple Inc. (USA). This is not a ByteVoid transfer. Your tasks go to your own iCloud. Apple acts under its own terms.

Changes to this policy

We may update this policy. The "last updated" date at the top reflects any changes. If the app ever starts collecting anything beyond what this policy describes, we will update this policy before that happens.

Contact

For questions about this policy, email [email protected].