We do not want your data.
There is no app on your phone, so there is nothing to track. Della only knows what you type to her in the chat. Nothing more, and nothing less.
Old-fashioned, on purpose. Wired earphones are making a comeback, because nobody wants to charge five different gadgets anymore. TwoDo List works on the same idea. Instead of an app that wants your camera, your contacts, your calendar, and your exact location, all it needs is a text message. Simple technology on purpose, so your life gets simpler, not more complicated.
That is the whole design. Not a missing feature, a promise we are keeping.
TwoDo List knows only what you tell it. There is no app on your phone, no account to create, and no connection to your calendar, email, contacts, or photos. This policy explains what that means in practice.
Contents
- Introduction
- Who We Are
- Information We Collect
- How We Use Your Information
- Legal Basis for Processing
- How We Share Your Information
- Automated Processing
- Your Partner and What They See
- What We Do Not Do
- Data Retention
- Your Rights and Choices
- Children's Privacy
- Data Security
- International Data Transfers
- Changes to This Policy
- Contact Us
1. Introduction
This Privacy Policy describes how Kuchinunu, Inc. (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with TwoDo List (the “Service”), a shared task and reminder service delivered through messaging channels including WhatsApp, and our website at twodolist.ai.
By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please do not use the Service.
2. Who We Are
TwoDo List is a product of Kuchinunu, Inc., a C-Corporation incorporated in the State of Delaware, United States. Kuchinunu, Inc. is the data controller responsible for processing your personal information under this Privacy Policy.
| Legal entity | Kuchinunu, Inc. |
|---|---|
| Brand | TwoDo List |
| Entity type | C-Corporation (Delaware) |
| Principal office | San Francisco, California, United States |
| Contact | [email protected] |
3. Information We Collect
3.1 Information you provide directly
- Your phone number. Your number is your identity on the Service. There is no username, no password, and no account to create.
- Your messages. We collect the content of the messages you send to Della, our assistant inside the Service, and the messages she sends you. This includes the tasks, reminders, notes, and any other information you choose to share in the thread.
- Details you volunteer. Over the course of a conversation you may tell Della things such as your first name, your general location or time zone, or the dates of a trip. We keep these only to make the Service work as you would expect (for example, so a reminder fires at the right local time).
- Your partner's contact details. If you choose to connect a partner, you provide us their name and phone number. See section 8 and the Terms of Service regarding your responsibility to have their permission.
- Support correspondence. If you contact us for support, we collect what you send us.
3.2 Information collected automatically
- Message delivery metadata. Our messaging provider supplies technical delivery information such as message identifiers, timestamps, and delivery or failure status, which we use to confirm that messages actually arrive.
- Website analytics. Our website may record basic, aggregate request information such as page requested and approximate region. We do not use advertising cookies or cross-site behavioural tracking pixels.
3.3 What we do not collect
Because there is no TwoDo List app installed on your device, we do not and cannot collect device location, contact lists, photos, calendar entries, email, screen time, other apps' notifications, or advertising identifiers. See section 9.
4. How We Use Your Information
- To provide the Service: recording tasks, sending reminders at the times you ask for, and passing messages between you and your connected partner;
- To maintain continuity in your conversation, so Della remembers what you have already told her;
- To send the recurring check-ins that are part of the Service, which you can ask her to reduce or stop at any time;
- To diagnose delivery problems and improve reliability and quality;
- To detect, investigate, and prevent abuse, fraud, or unauthorised use;
- To comply with legal obligations and enforce our Terms of Service;
- To respond to your support enquiries.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
5. Legal Basis for Processing
Where applicable law requires a legal basis, we rely on:
- Performance of a contract. Processing necessary to deliver the Service you have asked for.
- Legitimate interests. Processing necessary to keep the Service reliable and secure, provided those interests are not overridden by your rights.
- Consent. Processing you opt into, such as receiving messages on a given channel. You may withdraw consent at any time.
- Legal obligation. Processing required to comply with applicable law.
6. How We Share Your Information
We do not sell your personal information. We disclose it only in the following limited circumstances.
6.1 Service providers
We rely on a small number of third-party providers to operate the Service. They are contractually permitted to use your information only to provide their service to us, and are bound by confidentiality obligations. They fall into these categories:
- Messaging delivery, to deliver and receive messages on WhatsApp and, where offered, SMS;
- Language-model processing, to interpret what you write and compose Della's replies (see section 7);
- Database and hosting infrastructure, to store your tasks, reminders, and conversation history and to run the Service;
- Email delivery, to send you transactional email if you contact us or request it.
6.2 Your connected partner
Information reaches your partner only as described in section 8.
6.3 Legal requirements
We may disclose information where required by law or where we believe in good faith that disclosure is necessary to comply with a valid legal process, or to protect the rights, property, or safety of any person.
6.4 Business transfers
In a merger, acquisition, reorganisation, or similar event, your information may transfer to the acquiring entity. We will provide notice before your information becomes subject to a different privacy policy.
7. Automated Processing
Della's replies are generated by automated systems, including third-party language-model infrastructure operated on our behalf. The content of your messages is processed by those systems in order to understand your request and compose a response.
These systems can make mistakes. Della may misread a request or state something inaccurate. The Service is a convenience for organising everyday household tasks and reminders; it is not a substitute for professional advice, and you should not rely on it for decisions that carry legal, financial, medical, or safety consequences. See the Terms of Service.
We do not use automated decision-making that produces legal or similarly significant effects concerning you.
8. Your Partner and What They See
Your list is yours. Nothing reaches your partner unless you hand it over, and what you hand over is exactly what they see. Nothing more.
When you connect a partner, the two of you have separate, private conversations with Della. Specifically:
- Your partner receives a task only when you hand that task to them. They receive the task itself, any note you attached, its timing, and your first name.
- Your partner does not receive, and cannot browse, the rest of your list.
- Your conversation with Della is not shown to your partner, and theirs is not shown to you. Della passes along only what you explicitly ask her to pass along.
- Either of you may ask us to disconnect the connection at any time.
If you provide someone else's phone number, you are confirming that you have their permission to do so and that they are an adult. See the Terms of Service.
9. What We Do Not Do
These are commitments about how the Service is built, not merely settings:
- No device tracking. There is no app to install, so there is no location tracking, no screen-time monitoring, and no harvesting of your other notifications.
- No integrations. We do not connect to your calendar, email, contacts, files, or photos, and we do not ask for access to them.
- No advertising. We do not sell or rent your information, we do not serve ads, and we do not share your information for cross-context behavioural advertising.
- No account to breach. There is no password and no stored credential, because there is no login.
10. Data Retention
We retain your tasks, reminders, and conversation history for as long as you use the Service, so that Della can remember context you have already given her. If you ask us to delete your information, we will delete it as described in section 11, except where we are required to retain records to comply with a legal obligation or to resolve a dispute.
Backups are retained on a rolling basis and are overwritten in the ordinary course.
11. Your Rights and Choices
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal information, to request a portable copy, to withdraw consent, and to lodge a complaint with your local supervisory authority. We do not discriminate against you for exercising these rights.
Everyday controls, in the thread
- Fewer messages. Tell Della to check in less often, or to stop the recurring check-ins entirely.
- Stop messaging. Reply STOP to stop receiving messages on that channel.
- Disconnect your partner. Ask Della to remove the connection.
Access and deletion requests
To request a copy of your information or its deletion, email [email protected] from a message that identifies the phone number you use with the Service, so that we can verify the request. We will respond within the period required by applicable law.
12. Children's Privacy
The Service is intended only for adults aged 18 or over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. Do not connect a person under 18 as a partner. If you believe a minor has provided us information, contact [email protected] and we will delete it.
13. Data Security
We use reasonable technical and organisational measures to protect personal information, including encryption in transit and access controls limiting who can reach production data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Please note that messages delivered over WhatsApp or SMS are also subject to the security practices of those platforms and your mobile carrier.
14. International Data Transfers
We are based in the United States and our infrastructure providers may process information in the United States and other countries. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.
15. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after the changes take effect constitutes acceptance of the revised policy.
16. Contact Us
Questions, requests, or complaints about this Privacy Policy or your personal information:
| [email protected] | |
| Entity | Kuchinunu, Inc., San Francisco, California, United States |