Privacy Policy
Last updated: October 15, 2026
CoTick ("we") is a to-do list app you can share with family, friends and teammates. This policy explains what data we collect when you use the CoTick app and its web pages, how we use it, and how you can delete it.
What we collect
- Account: your name, email address and a randomly generated @handle. If you sign up with email, your password is stored only as a one-way hash.
- Sign in with Google or Apple: the identifier of that account and the email address and name it provides. With Sign in with Apple, we keep the token Apple issues, encrypted, only to revoke it with Apple when you delete your account.
- Your content: lists, items, whether they are checked, their order, photos you add, and who added or changed what and when.
- Sharing and friends: list members and their permissions, invitation links, friends, the nicknames you give them, contact groups, and email addresses you enter to invite people.
- Safety: the people you block, and the reports you send (what you reported, the reason, and a copy of the reported name or list at that time).
- Technical data: our servers record IP addresses, browser or device type, and the name and last use of each signed-in device, to keep the service running and secure.
We do not collect your location, contacts or advertising identifiers, and we use no third-party analytics or advertising tools.
How we use it
Only to provide CoTick: signing in, syncing between your devices, sharing lists with the people you choose, showing who made which changes, and keeping the service secure. We do not sell your data, use it for advertising, or track you across other apps or websites.
Who can see your data
- List members: in lists you share, members see the list, your name and @handle, and the changes you make.
- Public lists: anyone with the link can view a list set to Public (without its members). Links to other lists only say "No access", without the list's name or contents.
- Other users: people can find you by name, @handle or your full email address to add you as a friend or member. Search results show only your name and @handle.
- Service providers: our servers are hosted by a cloud hosting provider; Google and Apple handle the sign-in methods you choose.
- Where the law requires it, we disclose the data needed.
Tips (in-app purchases)
Apple handles the payment for tips. We do not receive your payment details, and our servers do not record tips.
Data on your iPhone
So that CoTick works offline, your lists and photos are stored on your iPhone. They are removed when you sign out or delete the app.
Keeping and deleting data
- We keep your data until you delete it. In the app, Me → Delete account deletes your account, the lists you own (for all their members), your memberships in other lists, friends, nicknames, contact groups and sign-in methods, and revokes Sign in with Apple. Items you added to other people's lists remain, without your name.
- If you cannot use the app, email us to ask for deletion.
- Data in backups and technical logs is overwritten or deleted after a limited time.
- Reports are kept so we can review them and keep CoTick safe, even after the accounts involved are deleted.
Security
All connections between the app and our servers are encrypted with HTTPS. Photos can only be read after a permission check and are never stored publicly.
Children
CoTick is not directed at children under 13, and we do not knowingly collect personal data from children.
Your rights
You can change your name, delete content or delete your account in the app at any time. To get, correct or delete other data, contact us.
Changes
If this policy changes significantly, we will update this page and the date above.
Contact
This policy is also available in Traditional Chinese, Simplified Chinese and Japanese. If the versions differ, the Traditional Chinese version prevails.