Privacy Policy

tado ("the app") is a personal productivity app for notes, tasks, and calendars, operated at tadonotes.com. This policy explains what information the app handles, why, and the choices you have.

• Content you create: notes, tasks, subtasks, tags, folders, attachments, and audio recordings you make in the app.
• Account identifiers: an email address used for sign-in and for calendar account connections.
• Calendar data you connect: if you link a Google or Microsoft calendar, the app stores event details (title, time, location, attendees, recurrence) needed to display and edit your calendar.
• Connection tokens: OAuth tokens for connected calendar accounts, stored encrypted and used only to sync your calendars.
• Settings: optional Home/Work addresses used solely to estimate travel time to your events.

• To provide the app's features: showing and editing your notes, tasks, and events.
• To sync connected calendars and send the reminders and alerts you configure.
• To estimate travel time when you enable that feature.
• To transcribe or summarize audio only when you explicitly request it.
• To power Memory and "Ask tado": your notes, tasks and calendar events (title, time, location, description and attendee names) are converted into private search entries so tado can find and answer questions about your own information. Answers are generated only for you, from your own data. Connected Google Calendar data is included only if you turn on "Google Calendar AI features" (see below).
• To process meeting notes when you ask: the note text plus the linked event's title and attendee names are used to suggest action items and follow-ups. For meetings created from Google Calendar events this also requires "Google Calendar AI features".

We do not sell your data, use it for advertising, or share it with third parties except the service providers required to operate the app: hosting and database, the calendar and mapping APIs you connect, and an AI processing service (Google Gemini models, accessed through the Lovable AI Gateway) that creates search entries and answers. tado sends this data only to produce results for you and does not use it to train any AI model. Lovable's privacy policy treats data of the people using apps built on Lovable as "Your Users Data", says Lovable does not use it to train its models, and says Lovable limits how its third-party providers may use it, including for training. We rely on those published terms and cannot independently guarantee how third-party providers behave.

Sending connected Google Calendar data to AI is off by default for every account. If you choose Enable — in Settings → Calendar Accounts, or when an AI feature asks — these details go through the Lovable AI Gateway to Google Gemini models: event titles, times, locations, descriptions, guest names and email addresses, plus the text of meeting notes, meeting outcomes and tasks created from those Google events. This is used only to build your private Memory search, answer your Ask tado questions and process meeting notes when you tap Process Meeting. The same switch also covers summarizing, proofreading or finding tasks in a meeting note, or a task, made from a Google event. Meeting notes whose original event can no longer be identified are treated as coming from Google.

If you choose Not now or later turn it off, tado stops sending this data to AI and immediately hides any search entries already made from it from answers. Those entries are not used again unless you turn the feature back on; they are deleted when you disconnect the calendar or delete the events. Syncing, creating and editing events works the same either way.

tado's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google Calendar data is used only to provide features you use in tado: showing, creating, editing and deleting your events, reminders and travel time, and — only if you turn on Google Calendar AI features — your private Memory search, AI answers and meeting processing.
• Google Calendar data is sent to the AI processing service only with that permission and only to produce results for you. tado does not use it to train or improve generalized AI models.
• It is never used for advertising, sold, or shared with data brokers.
• It is never read by humans except with your explicit consent for support purposes.

If you connect a Microsoft account, calendar data is accessed through Microsoft Graph under the same limited-use principles above. Travel-time features send event locations and your saved addresses to Google Maps (Places and Routes APIs) to compute estimates; nothing else is shared.

Your data is kept until you delete it. Deleting a note, task, or event removes it from active storage (trashed items can be restored until emptied). Disconnecting a calendar account revokes tado's access, deletes its stored OAuth tokens, its calendars and events, and the Memory search entries created from those events. To delete everything, contact us at the address below and all data associated with your account will be removed.

Data is encrypted in transit (HTTPS) and at rest. Calendar OAuth tokens are stored encrypted. Each account is protected by sign-in, and every account can only access its own data.

You can delete notes, tasks and events within the app and disconnect calendar accounts at any time. To export or delete all of your data, email us at the address below. You may also revoke tado's access to your Google or Microsoft account from those providers' security settings at any time.

If this policy changes, the updated version will be posted at this URL with a new "last updated" date. Questions? Contact us at support@tadonotes.com.