Skip to privacy policy
‹ Back to appMountains To Do

YOUR DATA. YOUR CLIMB.

Privacy & App Policies

Clear information about your data, your choices, and using MountainsToDo.

Effective: October 17, 2026 · Last updated: October 18, 2026

Privacy policy

Operator: MountainsToDo operates the Mountains To Do task-planning service at mountainstodo.com. This policy describes the current alpha service and its account, task, and synchronization features. For privacy questions, contact privacy@mountainstodo.com.

1. Information we process

Account information
Your email address, an account identifier, authentication records, and session credentials. Your password is submitted to our authentication provider, Supabase, to manage sign-in; it is not included in your task document.
Your task content
Task titles and descriptions, due dates and times, priorities, projects, labels, completion records, reminder settings, reminder time zones, and associated ordering and update information that you choose to save.
Optional notifications
If you enable notifications, we store the device’s push endpoint, browser-generated encryption keys, account association, and delivery records. Reminder timestamps are processed on our server so alerts can be sent while the app is closed. Notifications include task titles and may appear on your lock screen, depending on your device’s notification preview settings. Task descriptions are not included.
Device storage
When automatic sign-in is enabled, the browser saves your sign-in session on this device. When disabled, the login session stays only in the open page’s memory and reloading or reopening requires signing in again. The browser also stores cached task data for synchronization, appearance and accessibility preferences, layout choices, and temporary password-recovery state. Clearing site data removes these local copies; unsynced changes may be lost.
Operational information
Hosting, authentication, and email services may process IP addresses, browser or device information, request timestamps, security events, and delivery records to operate and protect the service.
Messages you send us
If you contact support or privacy, we receive your email address, message, and any information you choose to include.

The current alpha does not request access to your device’s contacts, photos, microphone, camera, or precise location. Do not put passwords, payment-card details, or other highly sensitive information into tasks.

2. How we use information

Where data-protection law requires a legal basis, we process information to provide the service you request, for legitimate interests such as security and support, or to meet legal obligations. If a future optional feature relies on consent, we will explain the choice and how to withdraw it.

3. Service providers and disclosures

We use providers for the following operational purposes. They process the information needed for their role under their service terms and data-protection commitments. We require appropriate confidentiality and safeguards for personal information handled on our behalf.

We may also disclose information when legally required, to address fraud or security threats, or as part of a transfer of the service with appropriate notice and safeguards. Your tasks are not published to other users by the current app.

4. Advertising, tracking, and sales

We do not sell your personal information, serve advertising, or use advertising SDKs in the current alpha. We do not use your task content for targeted advertising or track you across other companies’ apps and websites. Operational provider logs are used for service delivery and security. Any material change to these practices will be reflected in an updated policy.

5. Retention and security

Account and task records are retained while needed to provide your account and until you delete content or request account deletion. Task edits and deletions reach the cloud after a successful sync. Undo state, offline device copies, provider backups, and security or email-delivery logs can persist separately. Provider backups and operational records follow the applicable provider retention schedules; some records may be retained to satisfy legal obligations or resolve security issues.

We use HTTPS and account-based access controls to protect task access. These measures do not make the service end-to-end encrypted, and no internet service can guarantee absolute security. Authorized service operators and providers may access information when needed to operate, support, or secure the service.

You can turn off notifications for this device in Settings or through your device controls. Push-device records remain while registered or until the service detects an expired subscription. Reminder queue and delivery records older than seven days after their scheduled time are routinely removed. Account deletion removes associated device and reminder records.

6. International processing

Our providers may process information in countries outside your country of residence. Applicable provider agreements and lawful transfer safeguards govern those transfers where required. Contact us if you need information about a particular data-protection request.

7. Children

This service is not directed to children under 13. If local law requires a higher age or parental permission, those requirements also apply. If you believe a child has provided personal information without the required permission, contact us so we can investigate and arrange deletion where appropriate.

8. Policy changes

We will update the date on this page when this policy changes. Material changes will be communicated through the service or another appropriate channel. New permissions, native-app features, or data uses will be described before they are introduced where required.

Your data choices

Stopping use of the app or signing out does not automatically delete your account. Clearing browser storage does not delete the cloud account.

App terms

MountainsToDo provides tools for planning and tracking tasks. This is an alpha: features may change, access may be interrupted, and saved information may require recovery from a backup. Keep an exported copy of information you cannot afford to lose.

If an iOS version is distributed through Apple’s App Store, Apple’s Standard Licensed Application End User License Agreement applies unless a separate license is supplied with that version. Apple is not the operator of MountainsToDo or responsible for its support.

Contact & support

Operator: MountainsToDo

App supporthello@mountainstodo.com Privacy & data requestsprivacy@mountainstodo.com

For sign-in help, include the account email and a description of the issue. For sync problems, include the device and browser you used. Please do not email passwords, reset links, or unnecessary sensitive task content.