Privacy policy

Last updated: 11 October 2026

Setdo ("we") makes an app for sending checklists to people and seeing them get done. This policy explains what we collect, why, who can see it, where it's stored, and your rights. It applies to the Setdo app for iPhone.

What we collect

Account

• Your email address, or the name and email Apple or Google share when you sign in with them. If you use Sign in with Apple and hide your email, we only get Apple's relay address.
• The name you choose, and a profile photo if you add one.
• Your time zone and language, so lists open on your own day and the app and its emails use your language.

What you do in the app

• The spaces you create or join, your role in each (setter or doer), and the groups you're in.
• The lists you send and receive: their items, schedules, and any reference pictures a setter adds to an item.
• What you do on a list: what you check off and when, your written answers, numbers you enter, photos you add, and the word you pick for how the day felt.
• Messages between people in a space: thumbs up, short notes and nudges.
• Your notification settings and quiet hours.
• Reports you send about someone in a space, and the reason you choose.

Setdo Pro

• If you subscribe, whether you have Setdo Pro, which plan, and when it renews or ends. Apple handles the payment: we never see your card or payment details.

Your device

• A push token, used only to send the reminders and updates you turn on.

We don't use advertising, analytics or tracking tools. We don't sell or rent your data, and we don't use it to build advertising profiles.

Why we use it

We use your information only to run Setdo: to sign you in, deliver lists to the right people on the right day, show progress to the setter who sent the list, send the reminders and emails you need (such as sign-in codes), keep the service secure, and review reports. We don't use it for anything else without asking you first.

Who can see it

• People in your spaces see your name and profile photo.
• The setter who sent you a list sees your progress on it: what you checked, your answers, numbers and photos, and how the day felt.
• Other people on the same list see your progress only if the setter turns on shared progress for that list.
• Photos you add to a list are stored privately. Only you and that list's setters can open them, through links that expire after an hour.
• Reference pictures on items are stored privately and can be opened only by people in that space.
• Reports are seen only by us. The person you report isn't told who reported them.
• Nobody outside your spaces can see any of it.

Where it's stored and who processes it for us

Your data is stored in Canada, in Supabase's Canada Central (Montréal) region. These companies process data for us only to provide their service:

• Supabase (database, sign-in and file storage, in Canada)
• Expo and Apple (delivering push notifications; Expo's servers are in the United States)
• Our email delivery service (sending sign-in emails; servers in the United States)
• Apple and Google (sign-in, only if you choose them)
• Apple and RevenueCat (Setdo Pro subscriptions: Apple takes the payment, RevenueCat tells us whether your subscription is active; RevenueCat's servers are in the United States and it receives only your Setdo user ID and your App Store purchase records)

When a provider handles data outside Quebec or Canada, we check it protects your information to a standard comparable to Canadian law, and we bind it by contract to use the data only for our service. Data held in another country can be subject to that country's laws.

How long we keep it

We keep your data while you have an account. When you leave a list or a space, the setter keeps your past progress on it. When you delete your account, we delete your profile, your progress and the lists you sent; spaces you own pass to another member. Backups are overwritten within 7 days. We keep reports for up to one year after they're resolved, then delete them.

Security

Data travels encrypted (HTTPS). Access is limited by row-level rules in our database, so each person can only read what they're allowed to see. Private photos are served through links that expire. If a breach puts your information at risk of serious harm, we'll tell you and the privacy regulators as the law requires.

Your rights

You can, at any time:

• See and correct your name, photo and email in the app (Account → Account settings).
• Turn notifications on or off (Account → Notifications).
• Leave a list, or a space (Account → Space settings).
• Delete your account (Account → Account settings → Delete account). It can't be undone. Deleting your account doesn't cancel a Setdo Pro subscription: cancel it in your iPhone's Settings → Apple Account → Subscriptions.
• Ask us for a copy of the information we hold about you, including in a structured, commonly used format, ask us to correct it, or withdraw your consent, by emailing setdoapp@gmail.com. We reply within 30 days.

If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).

Reporting someone

If someone in a space sends you something abusive or inappropriate, report them from Account → Space settings → Report a setter. We review reports within 24 hours and can remove content or accounts. Leaving the space stops contact with them at once.

Children

Setdo isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, contact us and we'll delete it. In Quebec, a parent's consent is needed for a child under 14.

Changes

If this policy changes, we'll update the date above and tell you in the app if the change matters.

Contact and person in charge of privacy

The person responsible for protecting personal information at Setdo is Wai Ching To, setdoapp@gmail.com, Richmond Hill, Ontario, Canada.