Privacy Policy
Last updated: 19 July 2026
1. Controller
Jusuf Azer
Stadtring 91, 33647 Bielefeld
Email: info@esales.ninja
Data protection contact: Jusuf Azer, info@esales.ninja
2. Overview
This policy describes how personal data is processed when you use the Panda ToDo app and the website at pandatodo.com.
Panda ToDo app
The current feature set includes:
- A task list on the home screen (create, edit, mark as done, archive)
- Optional priority level (Low / Medium / High) per task
- Local storage of your tasks on your device (Android, iOS, Web)
- No user account and no registration
- No cloud sync — no app data is transmitted to our servers
- No analytics or tracking services (no analytics, no crash reporting with personal data)
The architecture is local-first: tasks and related app data (e.g. completion status, archive status, priority) are stored exclusively on your device. This privacy policy will be updated when new features are introduced (e.g. cloud sync, accounts, notifications).
Website
The website at pandatodo.com provides Imprint, Privacy Policy, and Terms of Service as static pages. When you visit the website, our hosting provider processes technically necessary server log data (e.g. IP address, timestamp, page accessed, browser type) for operation, security, and error analysis of the web server or content delivery network.
No cookies for analytics or marketing are set and no user tracking is used. The website has no contact forms and does not collect registration data.
3. Categories of data processed
| Area | Data | Purpose |
|---|---|---|
| App | Task text (entered by you), status (done/archived), priority level, internal identifier | Providing the task management function |
| Website | Server log data (e.g. IP address, timestamp, page accessed) | Operation and security of the website |
4. Legal bases
Where personal data is processed, this is done on the basis of the GDPR:
- Art. 6 (1) lit. b GDPR — performance of a contract or pre-contractual measures (providing the task management function in the app)
- Art. 6 (1) lit. f GDPR — legitimate interest (e.g. operation and security of the website)
5. Retention period
- App: Tasks are stored locally on your device until you delete them (e.g. by archiving and removing), reset app data, or uninstall the app. Archived tasks remain in local storage but are no longer visible in the app.
- Website: Server log data is stored only as long as necessary for operation and security.
6. Third parties and processors
App
In the current feature set, no third parties with access to your task data are used. Local storage uses the platform's device storage (Flutter shared_preferences); no data is transmitted to our servers or to third parties.
The user interface is based on Material Design 3 (Flutter Material components), which run entirely locally on your device. No data is transmitted to Google or other providers in the process.
Website
We use BunnyWay d.o.o. (bunny.net), Dunajska cesta 165, 1000 Ljubljana, Slovenia, as a processor for hosting and content delivery. bunny.net processes only the server log data described in section 2 on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with bunny.net.
7. Your rights
You have the following rights vis-à-vis the controller:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Lodge a complaint with a supervisory authority (Art. 77 GDPR)
Competent supervisory authority:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2-4, 40213 Düsseldorf, Germany
https://www.ldi.nrw.de/
8. Changes
We will update this privacy policy when the feature set of the app or website changes. The current version date is shown at the top of this page.