Operator / Data Controller: Gallahadd Software LLC
Product: AI Todo Plus (Apple App Store ID 6749715981)
Mailing: Gallahadd Software LLC, Waxahachie, Texas, United States
Effective / Last Updated: October 20, 2026 (version 4.0, for app version 2.0 and later; version 3.2 applies to earlier app versions)
Gallahadd Software LLC (“Gallahadd,” “we,” “us,” or “our”), based in Waxahachie, Texas, United States, operates AI Todo Plus (the “App”). For privacy and data-protection purposes, Gallahadd Software LLC is the operator and data controller of personal information processed in connection with the App, except where Apple, OpenAI, or another third party is the independent controller of data you provide directly to them (for example, Apple for Apple ID, iCloud, StoreKit purchases and Apple Intelligence, including Private Cloud Compute; or OpenAI when you use your own API key under your agreement with OpenAI).
Contact for privacy requests: support@gallahadd.com
The App may collect the following automatically to operate, secure, and improve the product:
If you turn on Save to Apple Health in Settings › Food and grant permission, the App writes the food you log to Apple Health as dietary energy, protein, carbohydrates, total fat, fiber, sugar, sodium and saturated fat (with the food name, time, and identifiers that let the App update or remove its own entries). The App:
You can change or revoke this permission at any time in the Health app (Sharing › Apps) or iOS Settings › Health › Data Access & Devices, and turn off Save to Apple Health in the App. Entries already saved stay in Apple Health until you delete them there.
Calendar Sync is off by default. If you turn it on in Settings › Calendar Sync and grant calendar access, the App writes the title, notes and due date of each open task that has a due date to a calendar named “AI Todo Plus” through iOS Calendar, so it can appear on your other devices and on wall displays that subscribe to your iCloud Calendar. The App only reads and changes events in that calendar; it does not read or change your other calendars and does not send calendar data to Gallahadd, OpenAI or any other third party. You can turn it off in the App, revoke access in iOS Settings › Privacy & Security › Calendars, and delete the “AI Todo Plus” calendar in the Calendar app.
| Data Type | Purpose | Storage Location |
|---|---|---|
| Task Data | Core app functionality | Local device + iCloud (if you enable sync) |
| Nutrition Data (food log, saved foods, goals) | Food tracking and daily totals | Local device + iCloud (if you enable sync); optionally written to Apple Health (see 2.4) |
| Food Search Terms and Barcodes | Look up nutrition facts for packaged and common foods | Sent to USDA FoodData Central and Open Food Facts to answer the lookup (see 4.4); not stored by Gallahadd |
| AI Prompts (including Describe food descriptions and meal photos) | Break tasks into steps, split text into tasks, generate meal plans, workouts and grocery lists, AI chat, and food nutrition estimates | Depends on your choice in Settings › AI (see 4.1–4.3): Apple Intelligence processes requests on your device, or with Apple’s Private Cloud Compute for larger requests; with your own OpenAI key, requests go from your device to OpenAI, asking OpenAI not to store them; AI Todo Plus AI (existing customers only) passes requests through our service, which does not store their content. Not retained by Gallahadd. |
| Purchase Status | Unlock the packs you own and, for existing customers, AI Todo Plus AI | Apple’s systems + a cache in the App’s settings on your device |
| Crash Diagnostics | Diagnose failures and improve stability | Apple, only if you share analytics with app developers |
Your choice of AI. You choose the AI in Settings › AI: Apple Intelligence (4.1), your own OpenAI API key (4.2), or, only for customers who had it before app version 2.0, AI Todo Plus AI (4.3). Nothing is sent for AI unless you start a request (for example breaking down a task, splitting text into tasks, meal, workout or grocery planning, AI chat, or Food › Describe and Photo), and then only the details you enter for that request. A request is never sent to an AI you did not choose: if a request fails, the App may offer the other AI options you have set up as buttons (for example “Try with your OpenAI key”), and sends nothing until you tap one.
When Settings › AI is set to Apple Intelligence (the default on iPhones that support it), AI requests you start are answered by Apple’s on-device model when they fit, and do not leave your device. Larger requests are sent to Apple’s Private Cloud Compute (iOS 27 or later). Apple states that it designed Private Cloud Compute so that requests are used only to answer them and are not stored or made accessible to anyone, including Apple; see Apple’s Private Cloud Compute documentation and privacy policy. Apple’s processing follows Apple’s terms and policies, and Apple may apply its own usage limits. Gallahadd and OpenAI do not receive these requests or their results. Results are labeled “Made on device” or “Made with Apple Private Cloud Compute”. When Food › Describe runs on device and you are online, it may look up short food names (up to six words each) in Open Food Facts or USDA FoodData Central, the same lookups as a food search (see 4.4).
If you choose your own OpenAI API key, the key is stored in your device’s Keychain and never sent to Gallahadd. The details you enter for each AI request (for Food › Describe, your food description or meal photo and the meal it is for) go directly from your device to OpenAI with your key and never pass through Gallahadd. Each request asks OpenAI not to store it (store: false). A meal photo is reduced in size and sent without its location or other photo details, only when you tap the Estimate button that names your key. OpenAI processes these requests as an independent provider under your agreement with OpenAI; your OpenAI account’s data controls and OpenAI’s privacy policy apply, and OpenAI may keep data as its policies allow. OpenAI bills you for this use.
AI Todo Plus AI is a hosted AI service we offered before app version 2.0. It is not available to new customers. It remains available, for as long as they stay subscribed, to customers with an active Basic or Premium subscription, and through January 31, 2027 to customers who used the App before version 2.0. It is used only when you choose it in Settings › AI.
Each request you start goes to an AI service operated by Gallahadd on Cloudflare, Inc.’s network (Cloudflare Workers, in the United States and other Cloudflare locations), which forwards it to OpenAI and returns the answer. Cloudflare acts as our processor. This service does not store or log the content of your requests or of the answers. It keeps only what it needs to prevent abuse: an anonymous per-install identifier created by Apple’s App Attest (it does not identify you); that install’s request and token counts by day and by month (daily counts are deleted after about two days and monthly counts about 40 days after their month ends, at the install’s next request; an install that stops using the service keeps its last counts until the service is retired); and technical logs of the model, time, status and size of each request, kept for up to 7 days. To help OpenAI detect misuse, requests carry a one-way hash of that identifier. The service asks OpenAI not to store responses; OpenAI’s own retention and data-sharing terms still apply. Requests made through AI Todo Plus AI may be covered by OpenAI’s data-sharing program for its complimentary usage tiers, under which OpenAI may use those inputs and outputs to improve its models. A Food › Describe meal photo goes through this service only if AI Todo Plus AI is your chosen AI and you tap the Estimate button that names it; it is reduced in size, sent without its location or other photo details, and not stored by Gallahadd or on the service.
When you search for a food or scan a barcode while online, the search text or barcode is sent to the USDA FoodData Central API (U.S. Department of Agriculture, via api.data.gov) and/or Open Food Facts to return nutrition facts. These requests include the App name and version but no account, device or personal identifiers; like any internet request, the services receive your IP address. Without your own USDA key, USDA lookups use a shared demonstration key and run only when you tap Search or scan a barcode. The built-in food database works offline without any request.
When you are signed in to iCloud and iCloud is on for the App, the App syncs through your private iCloud database:
We implement reasonable technical and organizational measures appropriate to the App’s design:
No method of transmission or storage is 100% secure. We cannot guarantee absolute security.
For data stored only in your iCloud account or processed solely by Apple or OpenAI, those parties’ tools and policies also apply.
AI Todo Plus is free to download, and tasks, lists, reminders, habits, calendar sync, widgets, iCloud sync and export are free. The Food & Menu and Fitness packs are one-time in-app purchases processed by Apple; they do not renew, and we never see your payment details. Customers who had the App before version 2.0 receive both packs at no charge (see 4.6). Basic and Premium subscriptions are no longer sold; an existing subscription renews until you cancel it in your Apple Account settings and keeps AI Todo Plus AI available while it is active. Prices are shown in the App Store.
AI Todo Plus is not directed at children under 13. The Terms of Service require users to be at least 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact support@gallahadd.com and we will take appropriate steps.
Your data may be processed in:
Where required, appropriate safeguards for international transfers are a matter of the applicable provider’s terms and applicable law.
California residents may have additional rights, including rights to know, delete, and correct certain personal information, and to non-discrimination for exercising rights. We do not sell personal information as “sale” is commonly understood under CCPA. To submit a request: support@gallahadd.com.
For individuals in the EU/EEA/UK where those laws apply:
Contact the controller at support@gallahadd.com.
| Data Type | Retention |
|---|---|
| Active app / account data on device & iCloud | Until you delete it or remove the App / iCloud data |
| Deleted tasks | May be recoverable for a short period (e.g., ~30 days) if that feature ships |
| Food log and Apple Health entries | Until you delete them in the App (and, for Health entries, in the Health app) or remove the App / iCloud data |
| AI prompts and answers | Not retained by Gallahadd. On-device Apple Intelligence requests stay on your device; for Private Cloud Compute, Apple states requests are not stored, and Apple’s processing follows Apple’s privacy policy. With your own key, the App asks OpenAI not to store them; your OpenAI account’s settings and OpenAI’s policies apply, and OpenAI may keep logs under its policy. AI Todo Plus AI keeps no content. |
| AI Todo Plus AI usage data | Existing customers using AI Todo Plus AI only: anonymous per-install App Attest identifier; that install’s daily request/token counts, deleted after about two days, and monthly counts, deleted about 40 days after their month ends (at the install’s next request; an install that stops using the service keeps its last counts until the service is retired); technical request logs (no content) up to 7 days |
| Crash logs | Kept by Apple and shown to us in App Store Connect under Apple’s retention |
We may update this privacy policy to reflect product or legal changes. We will post the updated date on this page and, for material changes, may provide in-app notice. Continued use after the effective date means you acknowledge the updated policy.
For privacy-related questions or requests:
Privacy contact (no separate DPO appointed unless required):
Gallahadd Software LLC
Waxahachie, Texas, United States
support@gallahadd.com
This privacy policy is a publish-ready working copy for Gallahadd Software LLC / AI Todo Plus. It is not legal advice and does not guarantee regulatory “coverage.” Effective as of the Last Updated date above.
© 2026 Gallahadd Software LLC. All rights reserved.