Privacy

What Tudutu keeps about you, where, and what it does with it. Last changed 11 October 2026.

Tudutu is made and run by Tudutu Ltd, a company in the United Kingdom, which is responsible for what's kept. Write to richard.bushnell@tudutu.com about any of this.

In short

• Tudutu keeps what you put into it, so it can show it to you on your devices.
• It isn't sold, shared, used for advertising, or used to train anything.
• There are no advertisers, trackers or analytics in Tudutu.
• You can delete your account, and everything in it, yourself, at once.

What's kept

• What you put in: your Tudus and everything you add to them (titles, notes, times, deadlines, reminders, places, links, photos, files and recordings), your folders and contexts, and the people you name, with any phone number or email address you give for them.
• How you sign in: the id your Microsoft, Google or Apple account is known by, so the same account is recognised next time. If you sign in by a code sent by email, your email address. Tudutu never sees or keeps a password.
• Calendars you connect: the address of the account, and a key that lets Tudutu read its calendar, kept locked so that a copy of the database alone can't use it. What's on the calendar is not kept (see below).
• Each device: a random number that tells your devices apart, so changes made on two of them can be put together.
• The server's log: a record of requests and errors, kept for finding faults. It isn't meant to hold what's in your Tudus; it can include the address of a calendar you've connected.

Google and Outlook calendars

If you connect a calendar, Tudutu asks Google or Microsoft for permission only to read: which calendars you have, and what's on them. It uses that for one thing, to show those events on your Calendar in Tudutu beside your own.

• Events are fetched when you look at your Calendar, held in the server's memory for about two minutes, and not written to Tudutu's database.
• Tudutu can't change, add or delete anything on those calendars.
• What's read is shown to you and to nobody else. It isn't given to anyone, used for advertising, or used to build or train any AI or machine-learning model. Nobody at Tudutu Ltd reads it.
• Removing the calendar in Settings throws the key away. You can also take Tudutu off the list of apps in your Google or Microsoft account.

Tudutu's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Signing in with Google or Microsoft

When you sign in with Google or Microsoft, they tell Tudutu who you are: an id for your account, and your email address. Tudutu keeps the id. It reads nothing else from the account. When you sign in with Apple, Apple tells Tudutu an id for you and nothing else: no name and no email address.

Where it's kept, and who else handles it

Everything is kept on Microsoft Azure, in Microsoft's data centres in Ireland, and sent between your device and the server encrypted. These companies handle some of it on Tudutu's behalf, and only to do what's described here:

• Microsoft: runs the servers and storage; sends sign-in codes by email; signs you in, and holds your Outlook calendar, if you use those.
• Google: signs you in, and holds your Google calendar, if you use those.
• Apple: signs you in, if you use Sign in with Apple.

Nobody else is given anything.

Things marked Sensitive

Marking something Sensitive hides it on your screen until you reveal it. It's kept on the server like everything else, protected in the same way, and not separately encrypted.

In your browser

Tudutu keeps a few things in your browser so it works: that you're signed in, which device this is, and how you've set your Calendar. While you're signing in or connecting a calendar it sets a cookie for a few minutes, so that only your browser can finish what it started. Nothing is used to follow you around the web.

How long it's kept, and deleting it

• What you put in is kept until you delete it. Things in the Trash are deleted for good after 90 days, or sooner if you empty it. The server's backups, which are kept for seven days in case of a fault, hold them until they're replaced.
• Delete my account, in Settings, deletes your account and everything in it from the server straight away, including photos, files and connected calendars. It can't be undone. The server's backups, which are kept for seven days in case of a fault, hold it until they're replaced. How to delete your account, step by step.
• The server's log is kept for about a month and then discarded.

Your rights

You can ask for a copy of what Tudutu keeps about you, for it to be corrected, or for it to be deleted, by writing to richard.bushnell@tudutu.com. If you're in the UK or the EU and think it's been handled wrongly, you can also complain to your data protection authority; in the UK that's the Information Commissioner's Office.

Children

Tudutu isn't meant for children under 13.

Changes

If what Tudutu keeps, or what it does with it, changes, this page will change first, and the date at the top with it.