Last updated: 1/31/2026
Introduction
Wondu ("we", "our", or "us") is a task aggregation application that helps you consolidate todos from multiple platforms. This Privacy Policy explains how we collect, use, and protect your information when you use our service.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name (if you sign up with Google)
- Password (encrypted)
Connected Platform Data
When you connect third-party platforms (Todoist, Google Tasks, Notion), we collect and store:
- OAuth access tokens (encrypted)
- Task data from your connected platforms (titles, descriptions, due dates, completion status)
- Platform-specific metadata (project IDs, database IDs, etc.)
Usage Information
We automatically collect:
- Sync logs and timestamps
- Error logs for debugging purposes
How We Use Your Information
We use your information to:
- Provide and maintain the Wondu service
- Sync your tasks between connected platforms
- Authenticate your access to third-party platforms
- Improve and optimize our service
- Communicate with you about service updates or issues
- Debug and fix technical issues
Data Storage and Security
We take data security seriously:
- Encryption: All OAuth tokens are encrypted using AES-256-GCM encryption before storage
- Database: Your data is stored in a secure PostgreSQL database
- HTTPS: All connections to Wondu use HTTPS encryption
- Access Control: Your data is isolated and only accessible to your account
Data Sharing
We do NOT:
- Sell your data to third parties
- Share your task data with other users
- Use your data for advertising
- Access your data except when necessary for providing the service or debugging issues you report
We DO share data with:
- Connected Platforms: Your tasks are synced to Todoist, Google Tasks, and Notion as you direct
- Service Providers: We use Vercel for hosting and Neon for database services
Your Rights
You have the right to:
- Access: View all your data stored in Wondu
- Disconnect: Remove platform connections at any time
- Delete: Request deletion of your account and all associated data
- Export: Your task data is always accessible through your connected platforms
To exercise these rights, disconnect platforms via the Connections page or contact us at the email below.
Data Retention
We retain your data as long as your account is active. When you disconnect a platform, associated tasks are deleted. If you delete your account, all data is permanently removed within 30 days.
Children's Privacy
Wondu is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the application.