Privacy Policy — Mr. ToDo
Effective date: 31 July 2026
Mr. ToDo ("the App") is an Android application published by Ibrahim Zaheer ("we", "us"). This policy explains exactly what the App does with your information.
THE SHORT VERSION
The App does not collect, transmit, or sell any personal data. There is no account to create, no analytics, no advertising, no tracking, and no server. All information the App uses stays on your device. We — the developers — cannot see any of it.
INFORMATION WE COLLECT
None. We operate no servers and receive no data from the App. We cannot access your tasks, your blocked-app list, your PIN, or any other information held on your device.
INFORMATION THE APP ACCESSES ON YOUR DEVICE
To do its job the App needs several Android permissions. Everything below is processed locally on your device only and is never sent to us or to anyone else.
Permission: Usage access (PACKAGE_USAGE_STATS)
Why the App needs it: To detect which app is currently on screen, so a blocked app can be interrupted while a Focus Lock is running.
What happens to the data: The foreground app's name is checked in memory against your blocked list and immediately discarded. No browsing or usage history is recorded, stored, or transmitted.
Permission: Query installed apps (QUERY_ALL_PACKAGES)
Why the App needs it: To show you a list of your installed apps so you can choose which to block.
What happens to the data: Only the apps you select are saved, in a local database on your device. The full list is never stored or transmitted.
Permission: Display over other apps (SYSTEM_ALERT_WINDOW)
Why the App needs it: To show the blocking screen on top of a blocked app.
What happens to the data: No data involved.
Permission: Foreground service + notifications
Why the App needs it: To keep the blocker running reliably and show its status.
What happens to the data: No data involved.
Permission: Run at startup (RECEIVE_BOOT_COMPLETED)
Why the App needs it: To restore an active Focus Lock after you restart your phone.
What happens to the data: No data involved.
Permission: Ignore battery optimisation (optional)
Why the App needs it: To stop Android from silently killing the blocker.
What happens to the data: No data involved.
WHAT IS STORED ON YOUR DEVICE
- Your tasks, their times, and completion history
- The list of apps you chose to block
- Your focus-session history and statistics
- A record of attempts to disable the lock (the "accountability log")
- Your friend's PIN — stored only as a salted, stretched cryptographic hash, never as the PIN itself — or, if you use authenticator mode, the shared secret
The PIN hash and authenticator secret are held in Android's encrypted, keystore-backed storage. The App also disables Android backup and device-transfer for its data, so these values cannot be copied off the device through a backup.
NETWORK USE
The App has no analytics, advertising, or reporting of any kind. Two components may contact third parties as part of normal Android functionality:
- Fonts. On first launch the App may download its typefaces from Google's font service, which necessarily reveals your device's IP address to Google. This is a one-time download that is then cached. No information about you or your use of the App is included.
- Text-to-speech. Spoken block-screen messages are passed to your device's text-to-speech engine (typically Google's, on-device). The App prefers offline voices. Only