1. Introduction
This Notice at Collection is provided pursuant to the California Consumer Privacy Act as amended by the CPRA and applies to California residents. It describes how TodoTicked, a product of Phoenix Digital, LLC ("we," "us," or "our"), collects and uses personal information.
For complete practices, see our Privacy Policy and Privacy Choices.
2. Categories of Personal Information We Collect
| Category | Examples |
|---|---|
| Identifiers | Name, email address, account ID, IP address, device identifiers |
| Customer records information | Name, email, billing-related account data (card data handled by processors) |
| Commercial information | Subscription plan, purchase history, billing status |
| Internet / network activity | App interactions, feature usage, diagnostics |
| Geolocation (coarse) | Approximate location derived from IP address |
| User content | Tasks, notes, journal entries, attachments you create |
| Inferences | Limited product insights derived from usage to improve the Service |
3. Sensitive Personal Information
We may process:
- Account credentials (passwords stored as secure hashes by our auth provider)
- Contents of messages or journal entries you voluntarily create
We use sensitive personal information as needed to provide the Service and for security, not for unexpected secondary purposes. See Privacy Choices to submit limitation requests.
4. Purposes for Collection and Use
- Provide, maintain, and improve productivity features
- Authenticate users (including Google and Apple sign-in)
- Process payments and manage subscriptions
- Sync data and enable collaboration you configure
- Provide support and service communications
- Secure the Service and prevent fraud/abuse
- Comply with law and enforce our Terms
5. Sources
- Directly from you
- Automatically from your devices and browsers when you use the Service
- Authentication providers (Google, Apple)
- Payment platforms (Stripe, Apple, Google Play)
- Integrations you connect
7. Sale or Sharing
We do not sell personal information and we do not share personal information for cross-context behavioral advertising. Opt-out information is available on Privacy Choices.
8. Retention
We retain personal information while your account is active and as needed for the purposes above, legal compliance, and security. Soft-deleted content is typically purged after about 30 days. Account deletion removes associated content from primary systems, subject to backup rotation and legally required retention.
9. Your CCPA/CPRA Rights
California residents may request to know, delete, correct, opt out of sale/sharing, limit use of sensitive personal information, and be free from discrimination for exercising rights. Submit requests through app settings or [email protected].
10. Contact
Phoenix Digital, LLC
Email: [email protected]