Privacy Policy
Effective October 1, 2026
- No account. Your tasks and notes stay on your phone.
- When you dictate, only the recognized text is sent to our server to turn it into tasks. We don't store it.
- No ads, no tracking. Anonymous crash reports and usage statistics help us fix bugs; they never include your tasks or what you dictate.
1. Who we are
Tudu is a voice-first planner developed by dopell ("we", "us"). This policy explains what data the Tudu app for Android and iOS handles and why.
2. Data stored on your device
Your tasks, notes, categories, lists, settings, and the trial and purchase status are stored only in the app's private storage on your device. We don't receive them.
If system backup is turned on for your device, Android may include this app data in your Google account backup, as controlled by your device settings. You can delete all app data at any time by clearing the app's storage or uninstalling the app.
3. Voice input
Speech is recognized by your device's system speech service: Google on Android, Apple on iOS. If the offline language model for your language is installed, recognition happens on the device. Otherwise the audio may be processed by Google or Apple under their own privacy policies.
Tudu doesn't record or keep audio and never sends audio to our server.
4. Text sent to our server
To create tasks, the recognized or typed text is sent over an encrypted connection (HTTPS) to our parsing server at api.dopaplan.xyz, together with:
- the current time and your time zone, so "tomorrow at 10" lands on the right day;
- the speech and interface language;
- the names of your categories, lists, and tags, so tasks go to the right place;
- a random installation ID created by the app, used only to apply a daily limit on parsing. It isn't linked to your identity or device identifiers and changes if you reinstall the app.
The server passes the text to AI model providers (through OpenRouter or directly; currently OpenAI and DeepSeek) to structure it into tasks and returns the result to the app. Our server doesn't store the text or the result. The AI providers process the text under their own terms and may retain it temporarily, for example for abuse monitoring.
5. Server logs
Our web server keeps access logs for up to 7 days to protect the service from abuse: IP address, time, request path, response status, and user agent. The logs don't contain the text you dictate, your installation ID, or the app key.
6. Crash reports and usage statistics
When the app crashes or hits an error, it sends a report to Sentry: what went wrong and where in the code, the app version, and basic device information (model and operating system). Reports don't include your tasks, notes, or dictated text.
The app also sends anonymous usage events to PostHog, such as "task added" or "trial started", with the app version, the operating system, and a random ID created by the app. Events don't include your tasks, notes, dictated text, or your identity, and screen recording is off.
We use this only to fix bugs and improve Tudu, never for advertising, and we don't combine it with data from other companies. Sentry and PostHog are hosted in the United States; like any internet service, they see the IP address of the connection.
7. Purchases
On Android, the one-time purchase is processed by Google Play. We don't receive your payment details. The app checks the purchase status with Google Play on your device. On iOS, the free trial and the one-time purchase are processed by the App Store in the same way, and the app checks them with Apple on your device.
8. Notifications
Reminders are scheduled locally on your device. No push notification service is used.
9. What we don't do
- We don't show ads.
- We don't use tracking or advertising SDKs, and we don't track you across other companies' apps or websites.
- We don't sell or share personal data.
- We don't require an account.
10. Children
Tudu isn't directed to children under 13, and we don't knowingly collect personal information from them.
11. Your choices
- You can use Tudu without dictation by typing tasks instead.
- You can delete everything by clearing the app's storage or uninstalling it.
- Our server doesn't keep your text, and server logs are deleted automatically within 7 days.
12. Security
All traffic between the app and our server is encrypted. The server accepts requests only from the app, applies rate limits, and runs in an isolated environment.
13. Changes
If this policy changes, we'll update this page and the effective date above.
14. Contact
Questions about privacy: use the developer contact email listed on Tudu's App Store or Google Play page.