App Privacy Policy

Information used to provide the app

When you connect Google, Go2Do uses Google's authorization process to access the account information, task lists, tasks and calendar information permitted by the permissions you grant. These data support account display, task management and calendar features. You enter your Google password on Google's sign-in page; Go2Do does not ask you to provide it to us.

Your authorization screen controls the permissions granted. Task and calendar changes made through the app may be sent to Google to perform the actions you request. Go2Do is an independent product and is not affiliated with or endorsed by Google.

Account verification and service status

When you connect Google, Go2Do sends the identity credential provided by Google over an encrypted connection to go2do.app for verification. We store the stable Google account identifier, email and its verification status, account status, creation time and last sign-in time to identify accounts, provide service status and help authorized administrators resolve account issues. These records are stored in Cloudflare D1 and are accessible only to authorized administrators.

The service does not receive your Google task or calendar contents, offline change queue or Google refresh credentials, and does not store the original identity credential. Service-session credentials are stored as one-way hashes; verification records and expired sessions are periodically removed under retention rules. Charging and trials are currently disabled; this account verification does not start a subscription or a payment. Account records are retained as needed to provide the service. Contact info@datamega.net to request access, correction or deletion.

Local storage and offline use

Go2Do stores app preferences, cached task information and changes awaiting synchronization on your computer so that previously synchronized tasks remain available offline. The current Windows application stores saved Google sign-in credentials using Windows Credential Manager.

Local changes are sent to Google when you reconnect and synchronize. Signing out or revoking authorization does not necessarily delete cached app data or data already stored in your Google account. Uninstalling the app may also leave local files that need to be removed separately.

Task caches, pending changes and account preferences are stored separately on this computer for each Google account. Older data whose owner cannot be confirmed are retained separately and are not automatically sent to a newly signed-in account.

Google Analytics 4 (GA4) and data uploads

We use Google Analytics 4 (GA4), provided by Google, to track and analyze the use of Go2Do services. Relevant service-usage and technical analytics data are transmitted over the internet and uploaded to Google's GA4 servers for processing and reporting. These data are not limited to storage on your computer.

Analytics may include app launches and sessions, feature interactions, event times, application version, operating system, language, error-related events and pseudonymous app-instance or device identifiers. The information collected depends on the analytics features enabled in the released application and any applicable consent choices. Identifiers are not a promise that data are anonymous.

We use these statistics to understand feature adoption, troubleshoot service issues and improve reliability and usability. We do not send task titles, task notes, calendar-event contents, Google passwords, authorization tokens, names or email addresses to GA4 as analytics event data. Google API content is used for the user-facing task and calendar functions you authorize, rather than advertising profiles.

Feedback and Cloudflare hosting

When you choose to submit feedback, we collect the problem description, feedback category, application version and platform, and any reproduction steps, system details, language or limited diagnostic codes you choose to include. A contact email is optional; we use it to follow up only when you permit contact. Please do not include task contents, passwords, authorization tokens or other sensitive information.

Feedback is sent over HTTPS to go2do.app and stored in Cloudflare D1 for authorized administrators to review, troubleshoot and record handling progress. Release installers are stored in Cloudflare R2. Cloudflare processes network information needed to deliver and protect these services. IP addresses are used for request limiting but are not stored in our feedback database. Feedback text and contact email are not sent to GA4. Contact info@datamega.net to request correction or deletion of a feedback record; provide its reference number if available.

Google and other disclosures

Google receives information necessary for the Google services you connect, and receives the analytics data uploaded to GA4. Google processes information under the applicable Google service terms, data-processing arrangements and privacy policies. Please review the linked Google policies below to understand Google's processing practices.

Information may be processed in countries or regions outside your place of residence, including locations where Google or its service providers operate. Where required by applicable law, we must provide the relevant notice and obtain consent or establish another lawful basis before collection or cross-border transfer. We may also disclose information when required by law or necessary to protect the security and lawful rights of users and the service.

Retention and security

We retain information only for as long as needed for the purposes described in this policy, to meet legal obligations or to resolve disputes. Local app data remain until removed through applicable app, operating-system or manual data-management processes. GA4 data are subject to the property's configured retention rules and Google's applicable processing and deletion mechanisms; aggregated reports may be handled differently from individual event data.

We use reasonable measures to protect information, including the operating system's credential storage for saved Google credentials. No storage or transmission method can be guaranteed completely secure. Keep your device and Google account secure and avoid including sensitive information in feedback or diagnostic reports.

Your choices and requests

You may stop using the app, sign out and revoke Go2Do's access in your Google Account's third-party connections settings. You can manage or delete tasks and calendar data through the relevant Google services. Revocation prevents further authorized access but does not automatically erase information already collected.

Contact info@datamega.net to request access, correction, deletion, a copy of relevant personal data, or to raise an objection or withdraw an analytics consent where applicable. We will handle requests under applicable law and may need to verify your identity. Some aggregated statistics cannot be linked back to a particular person. Where separate analytics consent is required, this policy and the service terms do not replace that consent; withdrawal does not invalidate prior lawful processing.

Children and policy updates

Go2Do is a general-purpose productivity app, not a service specifically directed to children. A person who cannot independently consent under applicable law should use it only with the appropriate parent or guardian's involvement. Contact us if you believe information has been collected from a child without the required authorization.

We may update this policy as the service or its data practices change. We will display the updated date and provide additional notice or seek consent for material changes where required. This policy describes the Go2Do application; any separate website analytics or data collection must be explained through the relevant website notice.

Contact us

The service provider is Xiamen DataMega Technology Co., Ltd (厦门万网智联科技有限公司). For privacy questions, data requests or service enquiries, email info@datamega.net.