Privacy Policy

Last updated 20 October 2026

2Do.Team is a shared todo list for teams. This page explains exactly what it stores, why it stores it, and who can see it. It describes what the software actually does rather than what we might one day reserve the right to do.

What we store

Your account

• Your first and last name, and your email address.
• Your password, kept only as a bcrypt hash. It is not readable by us and cannot be recovered — a forgotten password is reset, never retrieved.
• A profile photograph, if you choose to add one.
• Which team you belong to, and whether you are an administrator.

What you put into it

• Todos: their title, due date, who they are assigned to, and whether they are done.
• Projects: their name and description.
• Comments you write on a todo.
• Todos you mark private, which are stored like any other todo but shown only to you — not to teammates, administrators or the TV.
• If you report a comment, a record of the report: who made it, the comment as it was, and the reason you gave.
• Your team’s name, description and logo.

Your devices

If you use the iPhone or Mac app and allow notifications, we store the push token Apple issues for that device, along with the platform it belongs to. It is deleted when you sign out, and automatically when Apple tells us the device no longer accepts notifications.

The “My 2dos” widget on the Mac desktop and iPhone home screen reads your todos with the same sign-in the app uses, kept in the device’s Keychain. It stores nothing of its own.

A screen on the wall (Apple TV)

Nobody signs in on a TV. To link one, it shows a short code that a team administrator approves; the code expires after ten minutes. The linked TV keeps a key for that one team in its Keychain, and shows the team’s members (names and photographs), how many open and overdue todos each has, and the titles and due dates of the coming week’s todos — never private ones. It sends its time zone so “today” is right for the room; that is not stored. We record when each TV last checked in, so administrators can see which screens are in use, and an administrator can unlink a TV at any time.

Claude (optional, off unless an administrator turns it on)

A team administrator can allow members to connect Claude, the AI assistant made by Anthropic, so it can read the team’s members, projects and todos and add todos — for instance from meeting notes. It acts only for the member who connects it, with their permissions, and only after they approve it. What Claude reads is sent to Anthropic and handled under that person’s own agreement with Anthropic. We store only a record of the connection, and an administrator can disconnect it, or turn Claude off for the whole team, at any time.

Security records

• When a sign-in or password reset is attempted, we record the email address used and the IP address it came from, solely to limit repeated attempts. These records delete themselves once the limit expires — within an hour at most.
• Actions taken by site administrators are recorded, so that access to other people’s data is accountable.
• When something breaks, we record the error, where it happened, and which account and team were involved, so it can be fixed.

Cookies

One cookie, which keeps you signed in for seven days. It cannot be read by JavaScript and is not used to follow you anywhere. There are no third-party cookies and no advertising cookies.

What we do not do

• There is no analytics, no tracking pixel, and no advertising network. None.
• Your data is never sold, and never shared for advertising.
• We do not ask for your location, contacts, microphone or camera. When you upload a photograph, its embedded metadata — including any GPS coordinates your phone recorded — is stripped before the image is stored.
• We do not build a profile of you, and we do not use your content to train anything.

Who can see it

• Your team. Everyone on your team can see the team’s todos, projects and comments, and each member’s name and photograph. That is the point of a shared list.
• Your team’s administrators. They can add and remove members, change a member’s details, and set a new password for a member.
• Nobody on another team. Every request is scoped to one team, and a request for something belonging to another team is answered as though it does not exist.
• Us, only where necessary to keep the service running, investigate a fault, or comply with the law.

Companies that process data for us

These providers handle data on our behalf, and only to run the service:

• Vercel — hosting for the website and API.
• MongoDB Atlas — the database.
• Amazon Web Services — sending email, and storing uploaded images.
• Apple — delivering push notifications. A notification passes through Apple’s servers, so the text it contains (such as the title of a todo assigned to you) is visible to that service in transit.
• Anthropic — only if your team has turned on Claude and you have connected it yourself, as described above.

How long we keep it

• Your account and your team’s content stay until they are deleted.
• Deleting your account, or being removed from a team, deletes your account, your device tokens and your private todos. Shared todos remain with the team — you are simply taken off them — and your comments stay, shown as written by a former member, so the team’s work is not destroyed by someone leaving. If you are the only person on a team, deleting your account deletes the team and everything in it.
• Reports of comments are kept so administrators can act on them, and go with the team if it is deleted.
• An invitation link expires after 7 days; a password reset link after one hour.
• Sign-in rate-limit records delete themselves, as described above.
• Error reports are kept until they are cleared.

Your choices

• You can change your name, email, photograph and password at any time, on the web or in the app, and you can remove your photograph entirely.
• You can delete your own account at any time: My Profile, then “Delete my account”, on the web or in any of the apps. You can also ask your team’s administrator, or write to us.
• You can report another member’s comment to your team’s administrators, who can remove it or remove that person from the team.
• You can turn notifications off in your device settings, or by signing out of the app.
• You can ask us for a copy of what we hold about you, or ask us to delete it, using the address below.

Children

2Do.Team is a tool for workplaces and is not directed at children under 13, and we do not knowingly collect their information.

Changes

If this policy changes, the date at the top changes with it. If a change is significant, we will say so in the app.

Contact

Questions, or a request about your own data: info@betisapps.com