Privacy Policy

Last updated: November 8, 2026

Overview

Ticol is a privacy-first reminder app. We designed Ticol so that your personal data stays on your device. This policy explains what data exists, how it's handled, and what choices you have.

1. Data That Stays on Your Device

The following data is created and stored exclusively on your device. Ticol has no servers and cannot access this data:

2. Data That May Leave Your Device

AI Analysis (Optional)

When you create a reminder, Ticol may send the task text only to AI services for intelligent analysis (date extraction, categorization, priority detection). This applies when Privacy Mode is set to "Balanced" or "Cloud First."

Sensitive items are automatically excluded from cloud AI. If you mark a reminder or note as sensitive (via the Sensitive toggle in detail view), its content is never sent to AI providers for subtask generation, notification-time suggestions, auto-tagging, Personal Insights, or conversational-AI search — even in Balanced or Cloud First mode. Same exclusion applies to locked notes.

AI providers process non-sensitive text under their own privacy policies. They cannot identify who sent the request.

iCloud Sync (Optional)

If you enable iCloud Sync, your reminders are stored in your personal iCloud Documents folder. This data is encrypted by Apple and accessible only to devices signed into your Apple ID. Ticol does not operate any cloud servers.

Device Sharing (Optional)

If you use the Link Device feature, reminder text is encrypted end-to-end using Curve25519 ECDH + ChaChaPoly before transmission. Only the paired device can decrypt the content.

Email to Ticol (Optional, off by default)

If you enable Email to Ticol, you get a private email address. Emails sent to that address are received and processed on Ticol's server (Cloudflare) so they can be turned into tasks: we extract the subject and text, discard attachments, hold the message until your device fetches it, then delete it — messages are deleted after fetch and in any case within 7 days. This processing cannot be end-to-end encrypted (an email server must read the message to accept it), which is why the feature is strictly opt-in. What the server sees: the email's sender address, subject, and text, and your random mailbox address. What it never sees: your name, Apple ID, or anything else in the app. Anyone who knows your address can create tasks in your Ticol — treat it like a private number, and generate a new one anytime (the old one stops working immediately). Turning the feature off deletes any unfetched messages at once.

Connected mailboxes (Optional, beta)

If you connect a mailbox (for example Gmail) in Settings > Email to Ticol, Ticol reads your recent mail on your device to find things that have a date and a consequence — bills, renewals, appointments, deadlines — and offers them to you as a list. Nothing becomes a reminder unless you choose it.

Advertising

Ticol displays contextual ads powered by Google AdMob. Ads are selected based on the category of your tasks (e.g., "Shopping", "Work"), not based on your personal profile or browsing history.

What advertisers see: Only the task category (e.g., "Shopping") What advertisers do NOT see: Your actual tasks, name, email, or any personal data

3. Data We Collect

Your task content, notes, names, emails, or personal details: Not collected. Ticol keeps no database of your data — everything stays on your device (and in your personal iCloud if you enable iCloud Sync). The narrow exceptions are the optional features described above: AI analysis passes non-sensitive text through our processing proxy without storing it, and Email to Ticol (if you turn it on) holds incoming emails on our server only until your device fetches them (7 days at most).

Optional — crash reports (off by default): In Settings → Privacy & Security, you can turn on "Help fix bugs (crash reports)". When (and only when) this toggle is on, Ticol sends anonymous crash stack traces to Firebase Crashlytics to help us find and fix bugs.

What a crash report contains when you opt in:

What a crash report never contains, even when turned on:

You can turn the toggle off any time, and collection stops immediately. Deleting and reinstalling the app resets the toggle to off.

Honest disclosure — operational Firebase traffic: Ticol uses Firebase for four purposes: cloud AI analysis (Gemini), push notifications (when enabled), app integrity verification (App Check), and the opt-in crash reporter above. These four services each send minimal operational metadata — app version, device identifier, Firebase SDK version — to Google's Firebase servers so the services can function. This traffic happens regardless of whether crash reporting is turned on, because the other three services are part of how the app works. It does NOT include task content, names, or anything you've typed. The two endpoints you may see in network logs are firebaselogging-pa.googleapis.com (Firebase's shared telemetry channel for FCM / App Check / AI) and firebase-settings.crashlytics.com (only when crash reporting is turned on).

4. Your Rights

You have full control over your data:

5. Children's Privacy

Ticol is designed for general audiences. We do not knowingly collect data from children under 13. Since Ticol collects no data at all, there is no data to protect.

6. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when it was last revised. Continued use of the App after changes constitutes acceptance.

7. Contact

For privacy questions or concerns: