PRIVACY POLICY

Last Updated: October 20, 2026

Electric Lantern LLC ("we," "us," or "our") operates To Do Machine (the "Service"), an AI-powered to-do list application. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here.

1. WHO THIS POLICY APPLIES TO

The Service is currently offered to users located in the United States. If you access the Service from outside the U.S., please be aware that your information will be transferred to, stored, and processed in the United States.

2. INFORMATION WE COLLECT

We collect the following categories of information:

Account Information. When you create an account, we collect your email address and any password or authentication credentials you provide.

To-Do Content. The tasks, lists, notes, due dates, and other content you create, upload, or store in the Service.

Generated AI Outputs. When the Service generates app configurations for you using AI, we store only the resulting outputs so you can access, edit, and re-use them.

Chat Conversations. Your conversations with the AI assistant are stored on our servers so you can revisit them, continue them later, and access them from any of your devices. You control this history: you can delete individual conversations, clear your entire history, or set an auto-delete policy at any time (see Sections 7 and 9).

App Configuration Data. Settings, preferences, integrations you enable, and other configuration data tied to your account.

Public Display Name. If you use the sharing features, we collect the display name you choose to publish under. It is shown publicly next to anything you publish (see Section 6).

Shared Systems. If you publish a "System" — a package of app configuration, theme, and/or generated components — we collect and store its contents together with the title and description you give it. Published Systems are public (see Section 6).

Reports, Notices, and Appeals. If you report content, send us a copyright notice or counter-notification, or appeal a decision we made, we collect the content of what you send us and the contact details you provide with it.

Website Surveys. If you answer an optional survey on our website, we collect your answers (such as your age range, the tools you use to stay organized, and your views on pricing), any text you choose to type in, and information about the ad or link that brought you to the page. Survey answers are not linked to your name, email address, or account. If you tell us you are under 13, the survey ends and we record only that it ended.

Waitlist. If you join our waitlist, we collect your email address and which page or ad led you to sign up, and we use it to send you updates about To Do Machine. Your waitlist email is not linked to any survey answers. To be removed, contact us at support@todomachine.com.

Usage Analytics. Information about how you interact with the Service, including features used, buttons clicked, session duration, error logs, crash reports, and approximate timestamps. We use this data to understand how the Service is performing and to improve it. Our analytics do not include the content of your chat conversations; for AI requests we capture only technical metadata such as token counts, latency, and the model used.

Technical Information. IP address, browser or device type, operating system, and similar technical identifiers automatically collected when you use the Service.

We do not intentionally collect precise geolocation data, biometric data, or sensitive personal information.

3. HOW WE USE YOUR INFORMATION

We use the information described above to:

• Provide, operate, and maintain the Service;
• Process your to-do items and generate AI-powered content on your behalf;
• Operate the sharing features, including publishing, previewing, and distributing Systems you choose to publish;
• Review reports, copyright notices, and appeals, and enforce our Terms of Service and Share Content Policy;
• Authenticate your account and prevent unauthorized access;
• Improve the Service, debug issues, and develop new features;
• Measure and improve our advertising on our website (see Section 5);
• Communicate with you about your account, updates, and support requests;
• Comply with legal obligations and enforce our Terms of Service.

We do not use your to-do content or generated systems to train our own AI models. For how our website uses advertising tools, see Section 5.

4. AI PROCESSING AND THIRD-PARTY AI PROVIDERS

To deliver AI features, we send certain user content to Anthropic, PBC, which processes your data on our behalf using its Claude API. Anthropic is currently our only third-party AI provider.

The user content we send to Anthropic to power AI features consists of: task titles and notes, project and section names, due dates, your assistant context, and the chat conversation history. We do not send your email address, password, or other account credentials to Anthropic as part of normal AI processing.

On our iOS and macOS apps, we ask for your explicit consent before the assistant sends any chat message to Anthropic; you can revoke this consent at any time in Settings → AI Assistant. On the web app, sending a message to the assistant directs us to process it as described in this section.

Anthropic's commercial API terms state that prompts and completions submitted through the API are not used to train Anthropic's models. Under Anthropic's current commercial terms, API inputs and outputs are retained for up to 30 days for trust and safety purposes, after which they are deleted (longer retention may apply in limited cases, such as where required by law or to investigate a confirmed policy violation).

For more information about how Anthropic handles data, please review:

• Anthropic Privacy Policy: https://www.anthropic.com/legal/privacy
• Anthropic Commercial Terms of Service: https://www.anthropic.com/legal/commercial-terms

If we add, remove, or change AI providers in a way that materially affects how your data is handled, we will update this policy.

5. HOW WE SHARE INFORMATION

We share personal information only in the following circumstances:

Service Providers. We share information with vendors who help us operate the Service, under contracts that limit their use of your information. Our current sub-processors include:

• Anthropic, PBC — AI processing for assistant and generation features (see Section 4).
• Fly.io — application hosting and compute.
• Neon — managed Postgres database hosting.
• Additional vendors for authentication, analytics, and customer support tooling.

Publicly, When You Publish. If you use the sharing features, the information described in Section 6 is published for anyone to see.

Legal Requirements. We may disclose information if required by law, subpoena, court order, or other legal process, or to protect the rights, safety, or property of Electric Lantern LLC, our users, or others.

Business Transfers. If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

With Your Consent. We may share information with other parties when you direct us to do so.

Advertising on Our Website. Our website, todomachine.com, uses the Meta Pixel, a tool provided by Meta Platforms, Inc. When you visit the website, the Meta Pixel uses cookies and similar technologies to collect information such as the pages you view, the ad or link that brought you there, your browser and device type, and your IP address, and sends it to Meta. We use it to measure how our ads perform and to show To Do Machine ads to people who have visited our website. Beyond page visits, we tell Meta only that a visitor finished our website survey and which ad message they saw — never survey answers, text you type, your waitlist email address, or anything from inside the To Do Machine app, which does not use the Meta Pixel. Meta's own Privacy Policy governs how Meta uses this information. You can opt out at any time with the "Your Privacy Choices" link at the bottom of every page on our website, and we automatically honor Global Privacy Control (GPC) signals from your browser.

Website analytics. When you visit todomachine.com, we use PostHog, an analytics provider, to count page views and understand how visitors find us. For each page view we record the page address, the referring website, any campaign tags in the link (such as utm_source), which AI assistant sent you if any (for example ChatGPT, Perplexity or Claude), and basic device and browser information (browser, device type, language, time zone). PostHog also receives your IP address to infer an approximate location. We do not use cookies or local storage for website analytics, we do not record sessions or keystrokes, and we do not link website page views to your To Do Machine account. Website analytics is turned off if your browser sends Global Privacy Control, if you opt out on our Your Privacy Choices page, or if you tell us in our survey that you are under 18. Data is processed by PostHog, Inc. in the United States.

We do not sell your personal information for money. Our website's use of the Meta Pixel may count as "selling" or "sharing" personal information for cross-context behavioral advertising under some U.S. state privacy laws; you can opt out as described above. The To Do Machine app does not share your information for advertising.

6. SHARING FEATURES AND PUBLIC CONTENT

The Service lets you publish a System so that other people can view and install it. Publishing is optional, and nothing is published unless you choose to publish it. This section explains what happens to your information when you do.

What becomes public. When you publish a System, its contents (the app configuration, theme, and custom components/features), the title and description you gave it, your public display name, and figures such as its install count are shown on a public page. Anyone can open that page without an account. Public pages can be indexed by search engines, and they can be copied, screenshotted, archived, and shared onward by people we do not control. Treat anything you publish as public and permanent.

What we remove before publishing. Before a System is published, we remove content we consider personal — including the personal context you have saved for To Do Machine's AI features (your "assistant context"). Your tasks and your saved component state are never included in a published System. We show you what will be included before you publish. Please check it: you are responsible for making sure a System you publish contains nothing you want to keep private.

Installed copies. When someone installs a System you published, they receive their own copy of it. If you later unpublish it, or delete your account, the public page is removed and no one new can install it, but copies that were already installed keep working. See Section 7 for what we retain, and Section 15 of our Terms of Service.

Copyright notices. If someone sends us a copyright notice about something you published, we forward the notice to you — including the contact details the sender provided — so that you can respond or send a counter-notification, as the Digital Millennium Copyright Act contemplates. If you send us a counter-notification, we forward it, including your contact details, to the person who sent the original notice. Do not include information in a notice or counter-notification that you are not willing to have shared with the other side.

Reports. Reports about published content are reviewed by a person, not only by automated tools. When we tell a publisher what we did and why, we may describe the substance of a report; we do not disclose the reporter's identity unless we are legally required to.

7. DATA RETENTION

We retain your account information, to-do content, generated content, and configuration data for as long as your account is active. If you delete your account, we will delete or de-identify your personal information within 30 days, except where we are required to retain it for legal, accounting, or security reasons (for example, fraud prevention or tax records).

Published Systems after account deletion. If you delete your account, Systems you published that other users have already installed are retained in de-identified form — your public display name and the link between the System and your account are removed — so that those installed copies keep working. Our lawful basis for this retention is our legitimate interest, and the legitimate interest of the people who installed them, in the integrity of their installs. We also retain records of any restriction or revocation we applied to a System, so that a System we removed stays removed.

Reports, notices, and appeals. Reports, copyright notices, counter-notifications, and appeals are retained for as long as necessary to enforce our policies — including our repeat-infringer policy — resolve disputes, and comply with law.

Usage analytics and aggregated data may be retained in de-identified form for longer periods.

Chat conversations with the AI assistant are stored on our servers so that your chat history is available across your devices. We retain your chat history until you delete it: you can delete individual conversations or clear your entire chat history at any time in the app, and you can optionally set an auto-delete policy that automatically removes conversations older than a period you choose. Deleting your account deletes your stored chat history as described above. Anthropic retains API request data for up to 30 days for abuse monitoring under their commercial terms, after which it is deleted.

8. DATA SECURITY

We use commercially reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit, access controls, and regular security review. However, no system is completely secure, and we cannot guarantee absolute security.

9. YOUR CHOICES AND RIGHTS

You can:

• Access, update, or delete your account information through the Service's settings;
• Export your to-do content and generated custom systems or components;
• Delete your AI chat history at any time — remove individual conversations or clear your entire history in the app, or set an auto-delete policy to remove conversations automatically after a period you choose;
• Unpublish a Shared System at any time from the app, which removes its public page and stops new installs (copies other people already installed keep working — see Section 6);
• Change your public display name at any time in the app;
• Close your account at any time, which will trigger deletion as described in Section 7;
• Opt out of non-essential analytics where offered in the Service settings;
• Opt out of advertising on our website with the "Your Privacy Choices" link at the bottom of any page on todomachine.com, or by turning on Global Privacy Control in your browser;
• Revoke AI consent at any time in Settings → AI Assistant, which will stop new chat messages from being sent to Anthropic;
• Contact us at support@todomachine.com with questions or requests about your information.

NOTICE TO CALIFORNIA RESIDENTS

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

• Know what personal information we collect, use, disclose, and (if applicable) sell or share;
• Request access to and a copy of your personal information;
• Request deletion of your personal information;
• Request correction of inaccurate personal information;
• Limit the use of sensitive personal information (note: we do not currently use sensitive personal information for purposes that would trigger this right);
• Not be discriminated against for exercising these rights.

Our website's use of the Meta Pixel (see Section 5) may be a "sale" or "sharing" of personal information under the CCPA/CPRA. The categories involved are identifiers (such as IP address and cookie identifiers) and internet activity on our website, disclosed to Meta Platforms, Inc. for advertising. You have the right to opt out: use the "Your Privacy Choices" link at the bottom of any page on todomachine.com, or turn on Global Privacy Control, which we honor automatically. We do not knowingly sell or share the personal information of consumers under 16.

To exercise any of these rights, contact us at support@todomachine.com. We may need to verify your identity before responding.

NOTICE TO OTHER STATE RESIDENTS

Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, and others as applicable) may have similar rights to access, delete, correct, and obtain a copy of their personal information. To exercise these rights, contact us at support@todomachine.com. You may also opt out of targeted advertising on our website with the "Your Privacy Choices" link or Global Privacy Control.

10. CHILDREN'S PRIVACY

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child has provided us with personal information, please contact us at support@todomachine.com.

11. THIRD-PARTY LINKS AND INTEGRATIONS

The Service may link to or integrate with third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

12. GOOGLE WORKSPACE API DATA

The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service before the changes take effect. The "Last Updated" date at the top reflects the most recent version.

14. CONTACT US

If you have any questions or concerns about this Privacy Policy or our data practices, contact us at:

Electric Lantern LLC 418 Broadway, STE N Albany, NY 12207 USA Email: support@todomachine.com