Todobar stores your tasks on the device and, when iCloud sync is active, sends
task records and synchronisation metadata to Apple's CloudKit service. Todobar includes no
advertising, analytics or tracking.
Last updated 21 August 2026
What does the app collect?
Todobar has no separate Todobar account, advertising, analytics or tracking. It does not
collect usage information for JOS. iCloud sync uses the Apple Account already configured on
your device; the data sent to Apple CloudKit is described below.
What is stored on your device
Task titles, completion and deletion state, manual order, creation times and random task
identifiers. The local store also contains revision histories needed to merge changes,
durable pending-sync entries and CloudKit synchronisation state.
Todobar keeps a current version and a previous local safety snapshot so an interrupted or
invalid write does not silently become an empty list. A random installation identifier and
account- and environment-scoped sync metadata keep changes from different installations,
Apple Accounts or CloudKit environments separate.
Your appearance, text-size, completed-task visibility, toolbar and task-input placement
choices remain in local settings. On Mac, the operating system manages the launch-at-login
registration.
iCloud synchronisation through CloudKit
When iCloud sync is active, Todobar stores one record per task in the app's private CloudKit
database associated with your Apple Account. A task payload includes its title, completion
and deletion state, manual order, creation time and the revision data used to merge changes
made on different devices. The revision data includes opaque writer identifiers and mutation
counters.
Todobar writes the task payload, its schema version and an integrity fingerprint through
CloudKit's encrypted-values API. This statement does not mean that all CloudKit metadata is
end-to-end encrypted: record identifiers and CloudKit system or operational metadata may
exist outside those custom encrypted fields. CloudKit data is managed under Apple's service,
terms and privacy policy.
If the network or iCloud is unavailable, accepted changes remain in the local pending queue
and are sent when synchronisation resumes. Separate sync state is used for each Apple Account
and cloud environment, so records are not intentionally copied across those boundaries.
Deleting tasks
Deleting a task, or clearing completed tasks, removes it from the visible list and records a
durable deletion state. The encrypted task payload — including its title and revision data —
can remain in the local store and its CloudKit record so the deletion can reach other devices
and an older copy cannot restore the task during a later merge.
Removing Todobar from a device can remove its local app data, but does not by itself guarantee
deletion of records already stored in CloudKit. To delete Todobar's CloudKit data, use the
iCloud storage and app-data controls provided for your Apple Account.
If CloudKit reports that you deleted Todobar's private cloud data, the app asks before it
also clears cached tasks from the device. Cancelling that confirmation keeps the local data
in place and leaves cloud synchronisation paused.
System backups
Apple's device backup or a backup made to a computer may include Todobar's local app data.
Those backups are controlled separately through your Apple Account, device or computer.
Deleting a task, the app or its CloudKit data does not necessarily remove a copy already held
in a system backup.
Support via email
If you email support, your address and the information you choose to include are used to
answer the question. Todobar does not automatically attach or send your tasks or local data.
Do not include task titles or app data in a support message.
Children
The app is not directed at children. It contains no advertising, analytics, tracking or
profiling.
Changes
If this policy changes, the date above changes with it. Questions go to
info@jos.se.