Short version
Modocus is a local-first task manager and does not require a Modocus account. Core task data stays on your device. Data leaves the device only when you choose to use BYOK, Modocus AI, cloud backup, or an external content preview, as described below.
Local data and device credentials
Tasks, projects, notes, attachments, timers, and event history are stored in a local SQLite database and the app container. AI API keys and replayable StoreKit transaction credentials are stored in the system SecureStore / Keychain. Modocus does not receive your Apple ID, email address, card number, or App Store payment details.
Bring your own AI provider (BYOK)
When you select OpenAI, OpenRouter, or a compatible custom service and enter your own API key, only prompts, selected task context, or audio that you actively submit are sent directly from your device to that provider. They do not pass through the Modocus AI proxy, and your API key is not sent to Modocus. The provider processes data under its own privacy terms.
Hosted Modocus AI
When you subscribe to Modocus AI, prompts, relevant task context, or audio that you actively submit pass through the Modocus AI proxy on Cloudflare to an upstream model provider. The core Assistant currently primarily uses OpenAI models, but a model may change based on the task, quality, reliability, and cost.
The proxy does not persist request bodies, audio, or model responses, and AI Gateway body logging is disabled. To enforce 300 operations per billing period, process refunds, and operate the service, we retain a salted anonymous subscription subject, hashed operation or transaction identifiers, scene, model, token or audio usage, latency, status, and error codes. Operational metrics expire after 14 days; period quota state remains through its billing period, and refund state remains until Apple reverses the refund or the record is no longer needed.
Purchases and the App Store
Pro Lifetime and Modocus AI are purchased through Apple StoreKit. Apple handles payment, renewal, cancellation, refunds, and purchase restoration. The app sends an Apple-signed subscription transaction credential to the Modocus AI proxy for anonymous authentication. App Store Server Notifications V2 send refund and revocation status to the proxy. Transaction identifiers are salted and hashed before persistent storage.
Backup and external content
Google Drive backup is enabled only after you authorize it. OAuth PKCE sends backup files directly to your own Drive, and Modocus holds no relay credential.
When you open a YouTube or Bilibili preview embedded in a note, the app may request public thumbnail or metadata endpoints. Those platforms receive the information normally included in a network request.
App analytics, advertising, and website data
The Modocus app does not include Firebase, Sentry, Mixpanel, or a third-party advertising SDK. We do not sell personal data or track in-app behavior for advertising. Crash logs remain on-device unless you choose to send them.
This website uses Google Analytics with IP anonymization to understand page visits. If you submit a launch-notification email, the email, language, source, submission time, truncated user-agent, and a one-way hash of the request IP are stored in Cloudflare D1. The hash is used for abuse prevention and cannot be reversed by Modocus. Subscription records remain until you unsubscribe, request deletion, or the notification purpose ends.
Your rights
- Access and portability: view app data on-device and export JSON or zip backups.
- Deletion: delete data inside the app, or uninstall the app to remove local app data.
- Proxy and website data: email hello@modocus.app to request access to or deletion of data we can reasonably locate. Because subscription subjects are one-way hashes, we may need support information shown on your device and cannot derive your Apple ID from the hash.
Contact the same address for rights under GDPR, CCPA, or other applicable law.
Security and international processing
Network traffic uses HTTPS. Cloudflare provides Modocus AI and website infrastructure, while OpenAI or another disclosed provider may process model requests. Data can therefore be processed outside your country or region. No internet service can promise absolute security; avoid submitting sensitive information that is not needed for the AI task.
Children's privacy
Modocus is not directed at children under 13 and we do not knowingly collect personal information from children. A parent or guardian who learns that a child submitted personal information can contact hello@modocus.app to request deletion.
Changes and contact
We update the effective date on this page. If processing changes materially, we will provide a prominent notice in the app or on this page. Historical versions remain available in the public source repository.
For privacy questions, complaints, or data requests, email hello@modocus.app.