Privacy policy

In short

We keep what you put in Tickosh, so it's on all your devices.

Your tasks, lists, notes and settings, and the account details you sign in with.

You can sign in with Google or Apple instead of a password.

They tell Tickosh your name, email address and an account id. Nothing else in your Google or Apple account comes with it.

We don't sell it, show you ads, or track you.

There are no analytics or advertising tools in Tickosh, and your tasks are never used to train AI.

A few services help run Tickosh.

Each gets only what its job needs. They're all listed below.

If you share a list, the people on it see what's on it.

With your name and who did what. Nothing from your Google Calendar ever goes into a shared list.

You can take your data with you, and have it deleted.

Settings has Download my data and Delete account.

Google Calendar data is only used to show and sync your calendars, and to remind you about them if you ask.

As Google's Limited Use rules require.

Who looks after your data

Tickosh is run by Ordinal Works, based in Singapore. Ordinal Works decides how your data is used and is responsible for it; in this policy, "we" means Ordinal Works. Our data protection officer can be reached at privacy@tickosh.com.

This policy covers the Tickosh app and this website. The website itself sets no cookies and keeps nothing about your visit, apart from the request logs described below.

What Tickosh keeps

Your account

• Your name and email address.
• Your password, if you have one, stored only as a one-way hash (Argon2id), so no one can read it back.
• If you use them: your passkeys (the public half only), and your two-step sign-in secret and backup codes, stored encrypted.
• A photo, if you add one. The app redraws it on your device first, as a small square picture, which leaves behind any location or camera details in the original.

If you sign in with Google or Apple

• The id Google or Apple gives your account, and the email address it shares, which Settings, Sign-in shows you.
• Your name, if signing in with them is how you made your Tickosh account.
• If you choose Hide My Email with Apple, the address Apple makes for Tickosh, which forwards to yours. Tickosh's emails go there.
• From Apple, a key that lets Tickosh tell Apple to end the connection, stored encrypted and used only for that, when you disconnect Apple or delete your account. From Google, nothing more.

Signing in with them gives Tickosh no access to your calendars, contacts, photos or anything else in your Google or Apple account. Connecting Google Calendar is separate, and asks you again. What Google shares when you sign in is used only to sign you in and show which account can, under the rules in Google user data.

What you put in Tickosh

Tasks, events, lists, folders, tags, notes, dates, repeats, reminders, saved filters, the names of calendar files you import, and your settings, such as your time zone, quiet hours and how Tickosh looks.

With the garden on, Tickosh also keeps a note of each task you finish (which task and when), which is what grows the garden, along with the names you give plants and which visitors came. Turning the garden off in Settings hides it and deletes nothing. A shared list's plot is grown from everyone's finished tasks on that list, and never says who finished what.

If you bring in lists from Apple's Reminders app on an iPhone, the app first reads the names of your lists and how many reminders each holds, on the iPhone, so you can choose; that stays on the iPhone. Then it reads only the lists you pick, once, and they become tasks in your account like any others. Reminders itself isn't changed, and nothing else in it is read.

Your places

• The places you save, such as Home or the pharmacy: each one's name, address and point on the map, stored encrypted so they can only be read for your account.
• Which tasks remind you at a place, and how near counts as being there.
• The place you give an event, such as the dentist's: its name, address and point on the map, kept with the event like its other details, and how you're getting there (by car, public transport or on foot). On a shared list, the people on it see the event's place.
• Where you go is never kept by Tickosh. Your phone itself notices when you arrive at or leave a place you saved, and shows the reminder. When you choose "Current location" or search for a place, your phone's location is used for that moment and not kept.
• For time to leave, in the 90 minutes before an event with a place, your phone sends where it is, rounded to about 100 metres, so our server can ask Apple Maps how long the trip takes. Neither where you are nor the answer is kept; your phone uses it to say when to leave. With location off for Tickosh, it doesn't happen, and the event's own reminder still comes.

If you share lists

• The lists and folders you share, who they're shared with, and what each person can do.
• The email addresses you invite. The invitation emailed to them shows your name and the list's name. Only a list's owner sees the addresses; the others on it see names.
• On a shared list, everyone on it sees its tasks and notes, who added each one and who's doing it, and your name, your photo if you added one, and the colour you chose.
• Until someone takes a task nobody has been given, its reminders go to everyone who can edit the list, when the list is set that way (it is, unless its people switch it off). If you say Not me to one, that is kept with the task so you aren't reminded again; it isn't shown to the others.
• The list's history: who added, ticked, changed, moved or removed what, with each task's title at the time.
• If you use them: tasks you give someone or are given, Remind me too, and check-ins (who offered a hand or asked how a task is going, and the reply). Who you've muted is seen only by you.
• Tasks from your Google Calendar never go into a shared list. If someone on a shared list sends it to their own Google Calendar, its tasks go there too, in their Google account.

If you connect Google Calendar

• Your Google account's address, and which permissions you gave Tickosh.
• The names and colours of your calendars, and how you chose to show each one.
• Events from the calendars you turn on: their titles, times, descriptions and the link back to each in Google; or the tasks made from them, if you chose tasks.
• The key Google gives Tickosh to stay in sync, stored encrypted under a key that never leaves Google Cloud's key service.
• Which of your tasks Tickosh has put in your "Tickosh" calendar.

If you connect iCloud

• Your Apple Account's email address.
• The app-specific password you made for Tickosh, stored encrypted under a key that never leaves Google Cloud's key service.
• The names and colours of your iCloud calendars, and how you chose to show each one.
• Events from the calendars you turn on: their titles, times, descriptions and where they are; or the tasks made from them, if you chose tasks.
• Which of your tasks Tickosh has put in your "Tickosh" calendar in iCloud.

If you connect Outlook

• Your Microsoft account's address.
• The key Microsoft gives Tickosh to stay in sync, stored encrypted under a key that never leaves Google Cloud's key service.
• The names and colours of your Outlook calendars, and how you chose to show each one.
• Events from the calendars you turn on: their titles, times, descriptions, where they are and the link back to each in Outlook; or the tasks made from them, if you chose tasks.
• Which of your tasks Tickosh has put in your "Tickosh" calendar in Outlook.

Your devices and security

• For each device you're signed in on: its IP address and the name of its browser or app, so you can see your devices in Settings and sign them out.
• A security log of sign-ins and changes to your password, passkeys, two-step sign-in and the Google or Apple accounts that can sign you in, with the IP address each came from.
• If you turn on alerts: the address your phone's or browser's push service gives Tickosh, so alerts can reach that device, and on a phone the addresses for the timer on its lock screen.
• Short-lived counters of requests per IP address, which stop people guessing passwords.

When something breaks

An error report: what went wrong, where in the app, the browser or phone and its version, and your account's id. Reports leave out cookies, what you type, request contents and your IP address. For one in ten pages and requests, how long it took, without your account's id, so we can find what's slow.

What Tickosh doesn't collect

Where you go (a position used for time to leave isn't kept), your contacts, advertising identifiers, or analytics about how you use the app.

If you let the phone app show your phone's own calendars, it reads them on your phone and shows them there. Their events are never sent to Tickosh's servers or anyone else, and which calendars you chose to show is kept on the phone only.

If you speak a task, your phone or browser does the listening with the speech recognition it already has. On a phone that can, the audio stays on the phone; otherwise Apple or Google turn it into words under their own privacy policies, and in a browser the browser's maker does. Tickosh never receives or keeps any audio: only the words, in the add field, and nothing is saved until you add the task. The microphone is only on while the button is.

If you use an iPhone Focus filter for Tickosh, the lists you chose for each Focus are kept by iOS and on your iPhone, and never sent to Tickosh's servers.

What it's used for

• Running Tickosh for you: keeping your data in sync across your devices, sending the reminders you set, and sending the emails you ask for, such as confirming your address or the morning overview. This is what our agreement with you, the terms of use, needs.
• Keeping accounts safe: limiting sign-in attempts, keeping the security log, and checking new passwords against known breaches. This is in your interest and ours.
• Fixing problems: error reports tell us when something breaks, so we can fix it.
• Sharing, when you choose to: showing the people on a list what's on it and who did what, emailing the invitations you send, and the notifications between people on a list, such as a task given to you or a check-in. This is part of running Tickosh for you.

We don't sell your data, use it for advertising, build a profile of you, or use your tasks to train AI. We don't send marketing emails. We read your data only if you ask us to, for example to help with a problem, or if the law requires it.

Services that help run Tickosh

These services handle data for us, under their own data processing terms, and only for the job described. Your tasks and account are stored in Singapore.

An alert shows the task's name and time on your lock screen, and the morning overview email names your first few tasks. Turn on "Hide task names" in Settings and both say only how many things there are.

Each of these providers offers terms that cover moving data between countries, including the standard contractual clauses used for data from Europe.

Google user data

If you connect Google Calendar, Tickosh asks Google for permission to:

• see the list of your calendars;
• read the events in the calendars you turn on;
• make one calendar of its own in your account, called "Tickosh", and add, change and remove events in that calendar only;
• only if you choose to delete an event "from Google Calendar too", and allow it when Google asks: delete that event from a calendar you own.

What Tickosh reads is used only to show your events in Tickosh, keep them up to date, and remind you about them if you turn that on. The lists you choose are copied into "Tickosh" and kept up to date there; changes you make to them in Google come back to Tickosh. Tickosh never changes or deletes other events unless you ask it to delete one.

• Your Google data isn't used for advertising, sold, or used to train AI, and no person reads it unless you ask us to, it's needed for security, or the law requires it.
• Tickosh has no AI features. Your Google data, including data from Google Workspace APIs such as Google Calendar, isn't used to develop, improve or train any AI or machine-learning model, personalised or not, and isn't sent to any AI service.
• Tickosh doesn't make aggregated or anonymised data out of your Google data. Everything here applies to anything derived from it, such as the tasks made from your events.
• It isn't shared with anyone, apart from the services that do what you ask for: Google Cloud, which runs Tickosh's servers and database in Singapore; and, only for a reminder or the morning email you've turned on that includes an event, your phone's push service (Apple or Google) or Postmark, which deliver that alert or email with the event's title and time. With "Hide task names" on in Settings, even those leave the title out.
• It travels only over encrypted connections. The key Google gives Tickosh is stored encrypted, under a key that never leaves Google Cloud's key service; the database and its backups are encrypted at rest, on a private network with no public address; and only Tickosh's operator can reach them.
• You can disconnect at any time in Tickosh's Settings → Calendars. Tickosh then gives up its access and deletes the events it brought in, the key, and its record of what it sent, straight away; they're gone from backups within 30 days. Turning one calendar off removes its events the same way. If you remove Tickosh's access in your Google account instead, syncing stops at once, and Settings → Calendars asks whether to connect again or disconnect. Open tasks made from a calendar's events go to the Trash, which empties itself after 30 days; ones you've finished stay in your Archive. The "Tickosh" calendar stays in your Google account until you delete it there. Deleting your Tickosh account gives up the access and deletes all of it too.

Tickosh's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

iCloud calendars

Apple doesn't let apps sign in to iCloud on your behalf, so connecting iCloud uses an app-specific password: one you make for Tickosh in your Apple Account, never your Apple Account password. That password also opens iCloud Mail and Contacts. Tickosh uses it only for your calendars, and only with Apple's iCloud servers:

• to see the list of your calendars;
• to read the events in the calendars you turn on;
• to make one calendar of its own, called "Tickosh", and add, change and remove events in that calendar only;
• only if you choose to delete an event "from iCloud too": to delete that event.

Tickosh never reads your mail or contacts, and never changes or deletes other events unless you ask it to delete one. What it reads is used only to show your events in Tickosh, keep them up to date, remind you about them if you turn that on, and tell you when to leave for one with a place. It's treated as your Google data is: not used for advertising, sold, used to train AI, or shared with anyone apart from the services that do what you ask for, as above; and what comes from it never goes into a list you share. When an event's place comes as an address without its point on the map, our server asks Apple Maps where it is, sending the address alone.

The password is stored encrypted, under a key that never leaves Google Cloud's key service, and opened only to talk to iCloud. You can disconnect at any time in Settings → Calendars. Tickosh then deletes the password, the events it brought in and its record of what it sent, straight away; they're gone from backups within 30 days. Open tasks made from a calendar's events go to the Trash, which empties itself after 30 days; ones you've finished stay in your Archive. The "Tickosh" calendar stays in your iCloud account until you delete it there. Apple has no way for an app to revoke the password itself, so to stop it working, revoke it in your Apple Account under Sign-In and Security, App-Specific Passwords. If Apple stops accepting it, Tickosh stops trying and asks you for a new one.

Outlook calendars

If you connect Outlook, Tickosh asks Microsoft for permission to read and write your calendars, to see who you are, and to keep syncing without asking you each time. Microsoft has no narrower permission for calendars, so this one covers all of them. Tickosh uses it only:

• to see the list of your calendars;
• to read the events in the calendars you turn on;
• to make one calendar of its own, called "Tickosh", and add, change and remove events in that calendar only;
• only if you choose to delete an event "from Outlook too": to delete that event.

Tickosh never reads your mail or contacts, and never changes or deletes other events unless you ask it to delete one. What it reads is used only to show your events in Tickosh, keep them up to date, remind you about them if you turn that on, and tell you when to leave for one with a place. It's treated as your Google data is: not used for advertising, sold, used to train AI, or shared with anyone apart from the services that do what you ask for, as above; and what comes from it never goes into a list you share. When an event's place comes as an address without its point on the map, our server asks Apple Maps where it is, sending the address alone.

The key Microsoft gives Tickosh is stored encrypted, under a key that never leaves Google Cloud's key service. You can disconnect at any time in Settings → Calendars; Tickosh then deletes the key, the events it brought in and its record of what it sent, straight away, and they're gone from backups within 30 days. Open tasks made from a calendar's events go to the Trash, which empties itself after 30 days; ones you've finished stay in your Archive. The "Tickosh" calendar stays in your Outlook account until you delete it there. To remove Tickosh from your Microsoft account too, open account.microsoft.com, then Privacy, then Apps and services. If Microsoft stops Tickosh's access, syncing stops and Settings → Calendars asks you to connect again.

Cookies and your device

Tickosh uses only the cookies it needs to sign you in:

• a sign-in cookie, which lasts 30 days and renews while you use Tickosh;
• two short ones while you sign in with a passkey or a two-step code, which last 5 and 10 minutes;
• one while you sign in with Google or Apple, which lasts 10 minutes;
• a cookie that skips the two-step code on one device for 30 days, only if you tick "Don't ask again on this device".

There are no tracking or advertising cookies, so there's no cookie banner.

So that Tickosh works without a connection, your device keeps a copy of your data, along with your preferences and recent searches. Signing out deletes that copy and your recent searches; preferences such as the theme stay. The copy is protected by your device's own lock, not by Tickosh, so keep your device locked.

How long things are kept

After something is deleted for good, a note that it existed (its id and nothing else) is kept for 120 days, so your other devices learn that it's gone.

When you leave a shared list, or its owner takes you off it, it leaves your devices, what you added stays on it for the people still there, and its history no longer shows your name. When you delete your account, your name goes from every list's history.

Keeping it safe

• Every connection to Tickosh is encrypted.
• The database sits on a private network with no public address, and Google encrypts it and its backups at rest.
• Passwords are hashed with Argon2id. You can add passkeys and two-step sign-in, and see and sign out your devices in Settings.
• Alerts to a browser are encrypted on the way, so the push service can't read them. In the phone apps, Apple or Google deliver the alert's words; turn on "Hide task names" to leave them out.

If a breach affects your data, we'll tell you without undue delay, and tell the authorities where the law requires.

Your rights

Wherever you live, you can ask us for a copy of your data, to correct it, to delete it, or to stop using it for something. Depending on where you live, laws such as the GDPR or Singapore's PDPA give you these rights formally, and the right to complain to your data protection authority.

• A copy: Settings, Account, Download my data, saves everything in one file. Calendar files downloads your events and dated tasks for a calendar app.
• Correcting: change anything in the app, or ask us.
• Deleting: delete items in the app, or your whole account from Settings, Account. Deleting your account says what goes and what's kept.

We'll answer within 30 days, and won't charge for it.

Children

Tickosh isn't for children under 13. If you think a child under 13 has an account, tell us and we'll delete it.

Changes to this policy

If we change this policy in a way that matters, we'll email you at least 30 days before. The date at the top always shows the latest version.

Contact

Email privacy@tickosh.com with any question about your data. For security problems, email security@tickosh.com.