YouDo privacy notice

Who we are

YouDo is made by YouDo ("we"). Contact: admin@youdo.uk. We are the controller for the small amount of data described under "YouDo Sync", "Usage statistics" and "Contacting us".

Your notes stay on your device

YouDo is a local app. Your notes, files, settings, passwords and API keys are stored on your computer or phone (passwords and keys in its keychain). We never see them. Your notes only leave your device if you switch on YouDo Sync (end-to-end encrypted) or send something to an online feature yourself - the AI helper or email.

Things that go online only when you use them

Each feature’s page in Settings ▸ Extensions says exactly what it sends. In short, your device contacts these services directly, and each of them sees your IP address:

• Map: map backgrounds from OpenFreeMap, OpenStreetMap, Carto, OpenTopoMap, Esri, Amazon (terrain) or MapTiler (with your key) show which areas you look at. With Online access off the map shows no background.
• Place search: what you type goes to komoot (Photon). While the Map is open, addresses in your notes’ location that have no coordinates yet are looked up with OpenStreetMap Nominatim, as are map points you ask about.
• Weather: the coordinates of your location and of the notes and events you view, rounded to about 1 km, go to Open-Meteo.
• Location detection (if you switch it on): ipapi.co, or Google’s network location service.
• Routing and places (if on): coordinates go to FOSSGIS (Valhalla), Geoapify or Overpass.
• AI helper: a page you link is first fetched by YouDo from your device (so that site sees your IP address); then its text, the text you ask about, and the date, time and your location (unless switched off) go to Anthropic under your own API key and account.
• Email: goes through your own mail servers.
• Google Calendar and Strava (if connected): your own accounts.
• Spelling dictionaries: downloaded from jsDelivr when you add a language.
• Updates: the app asks GitHub for new versions and downloads them from GitHub - the desktop app when it starts and every few hours, the phone app once a day. GitHub sees your IP address. You can switch the automatic checks off on the Updates page (desktop) or in Settings ▸ This phone (phone).

With Online access off, only update checks and usage statistics still connect - and each of those has its own switch.

YouDo Sync (optional)

YouDo Sync is free during the beta; we plan to make it a paid feature later, and will tell you before we charge for anything. Your notes are encrypted on your device with a key only your devices hold. Our server (run on Cloudflare) stores locked copies we cannot read.

The server can see: that your vault exists, its devices and their names, when they last synced, how much you store and how many files, and your IP address while you connect (used for abuse limits; when a vault is created we keep only a salted hash of it, deleted within 48 hours). It cannot see your notes, their names, attachments or history, or your passphrase and recovery code.

The sync server counts how many vaults and devices exist, how much space they use and whether they were used recently, to plan capacity. It can’t read your notes, and these counts are never linked to you.

These counts are part of running YouDo Sync. They are not the usage statistics below: that switch does not cover them, and they are kept only as daily totals, each deleted 31 days after the day it counts.

Usage statistics (desktop)

After you have seen the first-run notice, and at most once a day, the desktop app sends a random install ID, your operating system and the app version; Cloudflare derives a country from the connection. It never sends your notes, your name or your files, and we do not store your IP address. The install ID is a random number, but it is still pseudonymous data. Turn it off in the first-run notice or at any time in Settings ▸ Help & feedback. The phone app sends none.

We keep statistics for 13 months, then they are deleted automatically. Your install ID is shown in Settings ▸ Help & feedback; to have the statistics for it deleted sooner, email admin@youdo.uk with it.

This website (youdo.uk)

The website is hosted on Google Firebase. It sets no cookies and uses no advertising or tracking tools. We count visits with Cloudflare Web Analytics, which sets no cookies and records the page, the country, the referring site, the browser and the operating system - not who you are. To show the latest version, your browser asks GitHub for the newest YouDo release; Firebase, Cloudflare and GitHub see your IP address as part of serving these requests.

Contacting us

If you email us or report a bug, we use what you send to reply and to fix things. Bug reports and ideas go to GitHub and are public, so do not post personal details there.

How long we keep data

YouDo Sync data is kept until you choose "Delete from server". It can then be restored for 30 days, and is erased after that.

The sync server’s daily counts (see "YouDo Sync") are deleted 31 days after the day they count.

Usage statistics are kept for 13 months, then deleted automatically.

Our legal bases

Providing the service you asked for (YouDo Sync). Our legitimate interests in keeping it secure, in planning its capacity, and in counting how many people use YouDo (statistics). Your choices in Settings.

Where data is processed

Cloudflare may process YouDo Sync and statistics data outside the UK, including in the US, under its data processing terms.

Your rights

You can ask to see, correct or delete your data, or object to how it is used. Delete YouDo Sync data yourself in Settings ▸ Extensions ▸ YouDo Sync ▸ Delete from server. For anything else, email admin@youdo.uk. Without your vault or install details we usually cannot tell which data is yours. We reply within one month.

Children

YouDo is not intended for children under 13.

Complaints

Tell us first at admin@youdo.uk. You can also complain to the UK Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

Changes

We update this notice when what YouDo does changes, and note it in the release notes.