The short version
Use Traguardo without an account and your data never leaves your device. No sync, no cloud, no tracking of your tasks.
Create an account and we sync your tasks to our servers in the EU so they follow you across devices. That's the only reason your data goes online.
We never sell your personal data, and we don't run third-party ads. AI features send only the text you choose to our servers, and that text is not used to train AI models.
The rest of this policy fills in the detail: the exact data involved, the companies that help us run the service, how long we keep things, and how to get it all deleted.
Who we are
Traguardo is an independent app built and operated by Filip Růžička (trading as frose.io), based in the Czech Republic (EU). For privacy purposes, we are the data controller for the personal data described here.
Questions, requests, or anything privacy-related — email [email protected]. A real person reads it.
Two ways to use Traguardo
This is the most important thing to understand, because it decides whether any of your data ever leaves your device.
Local mode
Everything stays on your device. Your tasks, projects and mindmaps are stored locally only. There's no registration, no sync, no AI, and no data sent to us. If you delete the app, that data is gone with it — so keep a device backup if you want to keep it.
Account & sync
When you sign in, your tasks, projects and mindmaps sync to our servers so they stay in step across your devices and your Apple Watch. This is opt-in — you actively choose it — and it's what unlocks sync, backup and the premium AI features.
You can start in local mode and switch to an account later. Everything below about servers and third parties applies only once you have an account.
What we collect and why
Account identity
To create an account you sign in with email and password or with Sign in with Apple. We store your email address (or the identifier Apple provides) to identify your account and to sign you in. Passwords are handled by our authentication provider and stored only in hashed form — we never see your plain password.
Two-factor authentication
For accounts that use a password, we send a one-time code (OTP) to your email to confirm it's really you. We process your email address and the code for this purpose.
Your content that syncs
With an account, the tasks, projects, mindmaps and their details you create sync to our servers so they're available on all your devices. We store this to provide the sync and backup you asked for — nothing more.
Attachments (premium)
If you attach images or PDFs to a task, those files are stored on our servers so they sync with the task. They're deleted when you delete the task or your account.
Subscriptions
Premium is billed by the Apple App Store. We use RevenueCat to tell us whether your subscription is active. We never receive or store your card or payment details — Apple handles all of that.
Push notifications
If you turn on reminders or the morning briefing, we store a device token so we can deliver those notifications to you through Apple's Push Notification service (APNs). You can turn notifications off at any time in the app or your device settings.
Transactional email
We send necessary emails — like your login code and reminders — through Resend. These are service messages, not marketing.
Diagnostics & analytics
To keep the app working and understand which features are used, we collect limited diagnostics:
- Firebase Analytics — aggregate usage events (for example, that a task was created or a screen was viewed), used to improve the app.
- Sentry — crash and error reports, sampled, with no screenshots and no session replay, so we can find and fix bugs.
Location — stays on your device
If you set a location-based reminder, the geofencing runs entirely on your device. Your location is never sent to our servers.
Calendar — stays on your device
If you connect your calendar, Traguardo reads and writes events through Apple's EventKit on your device. The contents of your calendar are never sent to our servers.
AI features
Premium AI features — such as natural-language capture, breaking a task into subtasks, turning a photo into tasks, and the morning briefing — need to process the text (or image) you give them.
When you use one of these features, the content you submit is sent to our server and processed via the Anthropic (Claude) API to generate the result, which is returned to you. Your app never contacts Anthropic directly.
Legal bases (GDPR)
Where the GDPR applies, we rely on these legal bases:
- Performance of a contract — to give you the account, sync, notifications and AI features you signed up for.
- Legitimate interests — to keep the service secure and reliable, prevent abuse, and improve it through limited diagnostics, balanced against your rights.
- Consent — for optional device permissions you grant (such as location or calendar access), which you can withdraw at any time in your device settings.
- Legal obligation — where we must keep certain records to comply with the law.
Where your data is stored
Your synced account data lives on managed servers in Frankfurt, Germany (EU), operated on our behalf by DigitalOcean. Some of the providers above may process limited data outside the EU. Where that happens, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Retention & deletion
We keep your account data for as long as your account exists. When you delete something, we delete it.
- Delete your account in the app (or via the account deletion request) and we remove your account and all associated data — tasks, projects, mindmaps, attachments and device tokens — in a cascading delete.
- Diagnostic and analytics data is retained only for a limited period and in aggregate form.
- Local-mode data isn't held by us at all; you remove it by deleting the app.
Backups are cycled out on a rolling basis, so residual copies clear shortly after deletion.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify data that's wrong or incomplete.
- Erase your data (you can do this yourself in the app at any time).
- Portability — receive your data in a usable format.
- Object to or restrict certain processing.
- Withdraw consent for optional permissions, without affecting past processing.
To exercise any of these, email [email protected]. If you believe we've mishandled your data, you can lodge a complaint with your local supervisory authority. In the Czech Republic that's the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ) — uoou.gov.cz.
Security
We protect your data in transit and at rest with industry-standard measures: encrypted connections (TLS with full certificate verification), hashed passwords, optional two-factor authentication, and access controls on our servers. No system is perfectly secure, but we take reasonable steps to keep yours safe and to fix issues quickly when they arise.
Children
Traguardo is not directed to children under 16, and we don't knowingly collect their personal data. If you believe a child has provided us data, contact us and we'll delete it.
Changes to this policy
If we change how we handle your data, we'll update this page and move the effective date at the top. For significant changes, we'll give you notice in the app or by email. Continuing to use Traguardo after a change means you accept the updated policy.
Contact
Filip Růžička (frose.io) · Czech Republic (EU)
Email: [email protected]
See also our Terms of Use, which govern your use of the app.