PRIVACY POLICY

Effective Date: May 15, 2026 Last Updated: May 15, 2026

Electric Lantern LLC ("we," "us," or "our") operates To Do Machine (the "Service"), an AI-powered to-do list application. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here.

1. WHO THIS POLICY APPLIES TO

The Service is currently offered to users located in the United States. If you access the Service from outside the U.S., please be aware that your information will be transferred to, stored, and processed in the United States.

2. INFORMATION WE COLLECT

We collect the following categories of information:

Account Information. When you create an account, we collect your email address and any password or authentication credentials you provide.

To-Do Content. The tasks, lists, notes, due dates, and other content you create, upload, or store in the Service.

Generated Code and AI Outputs. When the Service generates code or other content for you using AI, we store both your inputs (prompts, instructions) and the resulting outputs so you can access, edit, and re-use them.

App Configuration Data. Settings, preferences, integrations you enable, and other configuration data tied to your account.

Usage Analytics. Information about how you interact with the Service, including features used, buttons clicked, session duration, error logs, crash reports, and approximate timestamps. We use this data to understand how the Service is performing and to improve it.

Technical Information. IP address, browser or device type, operating system, and similar technical identifiers automatically collected when you use the Service.

We do not intentionally collect precise geolocation data, biometric data, or sensitive personal information.

3. HOW WE USE YOUR INFORMATION

We use the information described above to:

• Provide, operate, and maintain the Service;
• Process your to-do items and generate AI-powered content (such as code) on your behalf;
• Authenticate your account and prevent unauthorized access;
• Improve the Service, debug issues, and develop new features;
• Communicate with you about your account, updates, and support requests;
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your to-do content or generated code to train our own AI models.

4. AI PROCESSING AND THIRD-PARTY AI PROVIDERS

To deliver AI features, we send certain user content (such as your prompts, to-do items, and related context) to third-party AI providers, which currently include providers such as OpenAI and Anthropic. These providers process your data on our behalf to generate responses, which are then returned to you through the Service.

When we send data to AI providers:

• We use their commercial API offerings, which under their current published terms do not use API inputs or outputs to train their models by default.
• Each provider applies its own retention and security practices. Please review the privacy policies of the AI providers we use for more information.
• We do not send your email address, password, or other account credentials to AI providers as part of normal AI processing.

If we add, remove, or change AI providers in a way that materially affects how your data is handled, we will update this policy.

5. HOW WE SHARE INFORMATION

We share personal information only in the following circumstances:

Service Providers. We share information with vendors who help us operate the Service — including AI providers (as described above), cloud hosting, authentication, analytics, and customer support tools — under contracts that limit their use of your information.

Legal Requirements. We may disclose information if required by law, subpoena, court order, or other legal process, or to protect the rights, safety, or property of Electric Lantern LLC, our users, or others.

Business Transfers. If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

With Your Consent. We may share information with other parties when you direct us to do so.

We do not sell your personal information to third parties, and we do not share it for cross-context behavioral advertising.

6. DATA RETENTION

We retain your account information, to-do content, generated code, and configuration data for as long as your account is active. If you delete your account, we will delete or de-identify your personal information within a reasonable period, except where we are required to retain it for legal, accounting, or security reasons (for example, fraud prevention or tax records).

Usage analytics and aggregated data may be retained in de-identified form for longer periods.

7. DATA SECURITY

We use commercially reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit, access controls, and regular security review. However, no system is completely secure, and we cannot guarantee absolute security.

8. YOUR CHOICES AND RIGHTS

You can:

• Access, update, or delete your account information through the Service's settings;
• Export your to-do content and generated code;
• Close your account at any time, which will trigger deletion as described in Section 6;
• Opt out of non-essential analytics where offered in the Service settings;
• Contact us at support@todomachine.com with questions or requests about your information.

NOTICE TO CALIFORNIA RESIDENTS

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

• Know what personal information we collect, use, disclose, and (if applicable) sell or share;
• Request access to and a copy of your personal information;
• Request deletion of your personal information;
• Request correction of inaccurate personal information;
• Limit the use of sensitive personal information (note: we do not currently use sensitive personal information for purposes that would trigger this right);
• Not be discriminated against for exercising these rights.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

To exercise any of these rights, contact us at support@todomachine.com. We may need to verify your identity before responding.

NOTICE TO OTHER STATE RESIDENTS

Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, and others as applicable) may have similar rights to access, delete, correct, and obtain a copy of their personal information. To exercise these rights, contact us at support@todomachine.com.

9. CHILDREN'S PRIVACY

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child has provided us with personal information, please contact us at support@todomachine.com.

10. THIRD-PARTY LINKS AND INTEGRATIONS

The Service may link to or integrate with third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service before the changes take effect. The "Last Updated" date at the top reflects the most recent version.

12. CONTACT US

If you have any questions or concerns about this Privacy Policy or our data practices, contact us at:

Electric Lantern LLC 418 Broadway, STE N Albany, NY 12207 USA Email: support@todomachine.com