Operator / Data Controller: Gallahadd Software LLC
Product: AI Todo Plus (Apple App Store ID 6749715981)
Mailing: Gallahadd Software LLC, Waxahachie, Texas, United States
Effective / Last Updated: September 25, 2026 (version 3.1)
Gallahadd Software LLC (“Gallahadd,” “we,” “us,” or “our”), based in Waxahachie, Texas, United States, operates AI Todo Plus (the “App”). For privacy and data-protection purposes, Gallahadd Software LLC is the operator and data controller of personal information processed in connection with the App, except where Apple, OpenAI, or another third party is the independent controller of data you provide directly to them (for example, Apple ID / iCloud / StoreKit, or OpenAI if you use your own API key under their terms).
Contact for privacy requests: [email protected]
The App may collect the following automatically to operate, secure, and improve the product:
We do not invent or withhold the fact of analytics or crash collection: if your installed build and App Store privacy labels show such data types, treat this section as applying. Exact tooling may change over time; App Store privacy labels and this policy are the disclosures to rely on.
If you turn on Save to Apple Health in Nutrition settings and grant permission, the App writes the food you log to Apple Health as dietary energy, protein, carbohydrates, total fat, fiber, sugar, sodium and saturated fat (with the food name, time, and identifiers that let the App update or remove its own entries). The App:
You can change or revoke this permission at any time in the Health app (Sharing › Apps) or iOS Settings › Health › Data Access & Devices, and turn off Save to Apple Health in the App. Entries already saved stay in Apple Health until you delete them there.
Calendar Sync is off by default. If you turn it on in Settings › Calendar Sync and grant calendar access, the App writes the title, notes and due date of each open task that has a due date to a calendar named “AI Todo Plus” through iOS Calendar, so it can appear on your other devices and on wall displays that subscribe to your iCloud Calendar. The App only reads and changes events in that calendar; it does not read or change your other calendars and does not send calendar data to Gallahadd, OpenAI or any other third party. You can turn it off in the App, revoke access in iOS Settings › Privacy & Security › Calendars, and delete the “AI Todo Plus” calendar in the Calendar app.
| Data Type | Purpose | Storage Location |
|---|---|---|
| Task Data | Core app functionality | Local device + iCloud (if you enable sync) |
| Nutrition Data (food log, saved foods, goals) | Food tracking and daily totals | Local device + iCloud (if you enable sync); optionally written to Apple Health (see 2.4) |
| Food Search Terms and Barcodes | Look up nutrition facts for packaged and common foods | Sent to USDA FoodData Central and Open Food Facts to answer the lookup (see 4.2); not stored by Gallahadd |
| AI Prompts (including Describe food descriptions) | Generate meal plans, workouts, smart tasks, and food nutrition estimates | Temporary processing via AI provider; not retained by us after response (per current product design) |
| Subscription Status | Enable paid features | Apple’s systems + local entitlement cache |
| Usage Analytics | Improve app experience and reliability | Apple and/or Gallahadd’s configured analytics tooling (see App Store privacy labels) |
| Crash Diagnostics | Diagnose failures and improve stability | Apple and/or Gallahadd’s configured crash tooling (see App Store privacy labels) |
When you use AI features (meal planning, workout generation, natural-language processing, and Nutrition › Describe food estimates):
AI Todo Plus AI (no personal key). When you use AI features without your own OpenAI API key, the App sends each AI request you start to an AI service operated by Gallahadd on Cloudflare, Inc.’s network (Cloudflare Workers, in the United States and other Cloudflare locations), which forwards it to OpenAI and returns the answer. Cloudflare acts as our processor. This service does not store or log the content of your requests or of the answers; it keeps only what it needs to prevent abuse: an anonymous per-install key identifier created by Apple’s App Attest (it does not identify you), request and token counts per day and month, and technical logs of the model, time, status and size of each request, kept for up to 7 days. To help OpenAI detect misuse, requests carry a one-way hash of that identifier. The service asks OpenAI not to store responses; OpenAI’s own retention and data-sharing terms still apply. With your own key, requests go directly from your device to OpenAI and never pass through this service.
Apple Intelligence on your iPhone (optional). On supported iPhones you can run some AI features with Apple’s on-device model: by choosing “Try on this device” after a request fails, or by turning on Settings › “Use Apple Intelligence on this iPhone when possible”. Those requests are processed on your device and are not sent to Gallahadd or OpenAI; results are labeled “Made on device”. When Nutrition › Describe runs on device and you are online, it may look up food names in Open Food Facts or USDA FoodData Central, as described in 4.2.
When you search for a food or scan a barcode while online, the search text or barcode is sent to the USDA FoodData Central API (U.S. Department of Agriculture, via api.data.gov) and/or Open Food Facts to return nutrition facts. These requests include the App name and version but no account, device or personal identifiers; like any internet request, the services receive your IP address. Without your own USDA key, USDA lookups use a shared demonstration key and run only when you tap Search or scan a barcode. The built-in food database works offline without any request.
If you enable iCloud sync:
We implement reasonable technical and organizational measures appropriate to the App’s design:
No method of transmission or storage is 100% secure. We cannot guarantee absolute security.
For data stored only in your iCloud account or processed solely by Apple or OpenAI, those parties’ tools and policies also apply.
Subscription tiers described in the App Store listing and in-app purchase screens control access to AI limits and other paid features. Prices and entitlements may change; the App Store listing controls current offers.
| Tier (indicative; App Store listing controls) | Indicative price | Data / feature notes |
|---|---|---|
| Free | $0 | Local storage; limited AI requests/day |
| Basic | As shown in App Store Connect / StoreKit | iCloud sync, higher AI limits |
| Premium | As shown in App Store Connect / StoreKit | Higher/unlimited AI as configured |
Trial: If a free trial is offered, Apple handles billing after the trial per your Apple ID settings. Cancel anytime through Apple to avoid charges after the trial.
AI Todo Plus is not directed at children under 13. The Terms of Service require users to be at least 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact [email protected] and we will take appropriate steps.
Your data may be processed in:
Where required, appropriate safeguards for international transfers are a matter of the applicable provider’s terms and applicable law.
California residents may have additional rights, including rights to know, delete, and correct certain personal information, and to non-discrimination for exercising rights. We do not sell personal information as “sale” is commonly understood under CCPA. To submit a request: [email protected].
For individuals in the EU/EEA/UK where those laws apply:
Contact the controller at [email protected].
| Data Type | Retention |
|---|---|
| Active app / account data on device & iCloud | Until you delete it or remove the App / iCloud data |
| Deleted tasks | May be recoverable for a short period (e.g., ~30 days) if that feature ships |
| Food log and Apple Health entries | Until you delete them in the App (and, for Health entries, in the Health app) or remove the App / iCloud data |
| AI prompts and answers | Not retained by Gallahadd; the AI Todo Plus AI service keeps no content (provider may have its own logs under its policy) |
| AI Todo Plus AI usage data | Anonymous per-install App Attest key and request/token counts while the install uses the service; technical request logs (no content) up to 7 days |
| Analytics | Retained as needed for product improvement, then deleted or aggregated; see App Store privacy labels and tooling defaults |
| Crash logs | Typically short retention for diagnosis, then deleted or aggregated |
We may update this privacy policy to reflect product or legal changes. We will post the updated date on this page and, for material changes, may provide in-app notice. Continued use after the effective date means you acknowledge the updated policy.
For privacy-related questions or requests:
Privacy contact (no separate DPO appointed unless required):
Gallahadd Software LLC
Waxahachie, Texas, United States
[email protected]
This privacy policy is a publish-ready working copy for Gallahadd Software LLC / AI Todo Plus. It is not legal advice and does not guarantee regulatory “coverage.” Effective as of the Last Updated date above.
© 2026 Gallahadd Software LLC. All rights reserved.