In short: OverPowered To-Do App stores your account, tasks, notes, projects, and optional images in Firebase so you can sync across web and Android. Optional OP To-Do Pro subscriptions are sold through Google Play Billing; we store plan/entitlement status on your account (shared on web and Android). We do not sell your data or use it for advertising. Payments and refunds are handled by Google Play.
This Privacy Policy describes how Erick Warui ("we", "us", or "our") handles information when you use the OverPowered To-Do App mobile application and related web app (together, the "App").
By creating an account or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.
1. Who we are
Developer: Erick Warui
Contact email: erickwarui28@gmail.com
Website: https://erickwarui28.github.io/es-todo/
For privacy-related questions, access requests, or deletion requests, contact us at the email address above.
2. What the App does
OverPowered To-Do App helps you plan daily tasks, track weekly completions, organize projects/categories, save notes, attach optional images, and set local reminder notifications. You can sign in with Google, email/password, or username, and optionally enable Google Authenticator–style 2FA.
The App offers a free tier and an optional paid upgrade called OP To-Do Pro (for example Summaries, extra project limits, images, recurrence, export, and related Pro features). Pro is purchased on Android through Google Play; the same Free/Pro entitlement applies when you sign in on the web.
3. Information we collect
Depending on how you use the App, we may process:
- Account information — email address, username, display name, authentication identifiers, and (if you choose Google Sign-In) basic Google profile details provided by Google for sign-in
- Security data — password authentication credentials managed by Firebase Authentication; optional Time-based One-Time Password (TOTP) / authenticator settings you enable
- App content you create — tasks, due dates, completion status, notes, project/category names, reminder times, soft-delete/trash metadata, and optional images you attach
- Subscription and entitlement data — Free/Pro plan status, trial or subscription expiry times, product identifiers (such as monthly or yearly), plan source (for example Google Play / RevenueCat, in-app trial, or admin grant), and related timestamps used to unlock Pro features on web and Android. We do not receive or store your full payment card number; Google Play processes payments.
- Device permissions (Android) — camera and/or photo library access only when you choose to attach an image; notification permission when you enable reminders
- Technical/operational data — standard Firebase/Google service logs needed to authenticate, sync, and operate the App (for example, authentication events); purchase and entitlement events processed via Google Play and RevenueCat as needed to validate subscriptions
We do not sell personal information and do not use your task/note content for advertising or third-party marketing.
4. How we use your information
We use the information above to:
- Create and secure your account, including optional two-factor authentication
- Store and sync your tasks, notes, projects, and images across your signed-in sessions
- Schedule and show local reminder notifications you configure
- Provide account features such as Trash (soft delete), restore, and permanent delete
- Determine and sync Free vs Pro access (including trials and grace periods) across web and Android
- Process and validate OP To-Do Pro purchases, restores, renewals, and cancellations through Google Play Billing and RevenueCat
- Operate admin/support features that are limited to authorized administrators of the App
- Maintain security, prevent abuse, and improve reliability of the service
5. Payments, subscriptions, and refunds
Optional OP To-Do Pro subscriptions (for example monthly or yearly plans, which may include a free trial offer configured in Google Play) are sold on Android using Google Play Billing. Google collects and processes payment information under Google’s terms and privacy policy. We receive subscription status and related entitlement information so we can unlock Pro features on your account.
We use RevenueCat to help manage in-app purchases and entitlements with Google Play. RevenueCat may process identifiers such as your app user id (typically your Firebase Auth user id) and purchase/entitlement metadata according to RevenueCat’s privacy policy.
Refunds, cancellations, and billing disputes for Play purchases are handled by Google Play under Google’s policies. You can manage or cancel subscriptions in your Google Play account subscription settings. Soft trials or admin grants that do not go through Google Play are not Google Play charges.
The website does not process card payments for Pro. Web reads the same plan status stored on your account after an Android purchase (or after an eligible trial/admin grant).
6. Where your data is stored
Account and app content are stored using Google Firebase services (including Firebase Authentication and Cloud Firestore). Optional task/note images are compressed and stored with your documents (as data URLs) rather than in a separate public media CDN. Plan/entitlement fields used for Pro access are stored with your Firebase user profile.
On Android, reminder notifications are scheduled locally on your device. Camera/gallery access is used only to pick or capture images you choose to attach.
Access to user content in Firestore is restricted by security rules so that, under normal operation, each signed-in user can only read and write their own data (except for limited admin tooling for authorized administrators).
7. Third-party services
The App relies on these providers to function:
- Google Firebase / Google Cloud — authentication and cloud database hosting
- Google Sign-In — optional sign-in method
- Google Play — Android distribution, Google Play Billing for OP To-Do Pro, and related Play services
- RevenueCat — subscription and entitlement management for Google Play purchases
- GitHub Pages — hosting of the web app and this privacy policy page
Those providers process data according to their own privacy policies. We configure Firebase so your app content is associated with your account and not shared publicly by us.
8. Data sharing and disclosure
We do not sell, rent, or trade your personal information.
We share data only with the infrastructure and billing providers listed above as needed to run the App and validate subscriptions, or if required by law, regulation, legal process, or governmental request, or to protect our rights, users, or the public where permitted by law.
9. Retention and deletion
- While your account is active: we retain account, content, and entitlement data needed to provide the App and honor an active Pro subscription or trial.
- Trash: items you soft-delete remain until you restore them or permanently delete them (or clear trash).
- Account deletion / content deletion: you may permanently delete individual items in the App. To request full account deletion or help removing remaining data, email erickwarui28@gmail.com. Canceling a Google Play subscription through Google does not by itself delete your OP To-Do account.
- Uninstalling the Android app removes the local app and local notification schedules from that device, but does not by itself delete your cloud account data or cancel a Play subscription.
10. Your choices and rights
You can:
- Update or delete tasks, notes, projects, and images inside the App
- Enable or disable notifications and revoke camera/photos permission in Android settings
- Enable, disable, or change authenticator 2FA from Account settings
- Manage, restore, or cancel Pro subscriptions through Google Play (Android) and the in-app Account / Restore purchases controls
- Sign out, stop using the App, or request account/data deletion by contacting us
Depending on your location (including the EEA, UK, Kenya, and other regions with data protection laws), you may have rights to access, correct, delete, restrict, or object to certain processing, or to data portability. Contact us to exercise these rights.
11. Children's privacy
The App is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has created an account or provided information, contact us and we will help address it.
12. Security
We use industry-standard providers (Firebase Authentication and Firestore rules) and optional 2FA to help protect accounts. Payment card data for Play purchases is handled by Google Play, not by our servers. No method of electronic storage or transmission is 100% secure. Please use a strong password, protect your devices, and keep 2FA enabled when available.
13. International users
Firebase/Google and RevenueCat may process and store data in data centers outside your country. By using the App, you understand that your information may be transferred to and processed in countries where those providers operate, subject to applicable safeguards and provider terms.
14. Data collection summary (Google Play)
| Data type | Collected? | Shared with third parties? | Purpose |
|---|---|---|---|
| Account info (email, username, Google Sign-In identifiers) | Yes | Yes — Firebase/Google for auth & sync | Account creation and sign-in |
| App content (tasks, notes, projects, reminders) | Yes | Yes — Firebase/Google for storage | Core app functionality |
| Photos/images you attach | Optional | Yes — stored with your Firebase documents | User-provided attachments |
| Purchase / subscription / entitlement status | Yes (if you subscribe or start a trial) | Yes — Google Play Billing; RevenueCat for entitlement sync; Firebase for plan fields on your profile | Sell and fulfill OP To-Do Pro; sync Free/Pro across devices |
| Payment card numbers | No (not received by us) | Processed by Google Play only | Google handles checkout for Play subscriptions |
| Local notifications | On device | No | Reminders you schedule |
| Advertising ID / ads data | No | No | Not applicable |
| Precise location / contacts / SMS | No | No | Not applicable |
15. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If changes are material, we may also notify you through the App or Google Play listing. Continued use of the App after an update means you accept the revised policy.
16. Contact us
If you have questions about this Privacy Policy or our privacy practices, contact:
Erick Warui
Email: erickwarui28@gmail.com
Privacy policy URL:
https://erickwarui28.github.io/es-todo/privacy-policy.html