Privacy policy

Last updated 16 October 2026

Mora is a to-do list for Android, iPhone and the web, made by Riccardo Perana, an individual developer (“we” below). This policy explains what happens to your information when you use the Mora app, its home-screen widget, the web app and this website.

What stays on your device

The app keeps your tasks, subtasks, fees, the counter, the archive and your settings in a database on your phone. The home-screen widget reads the same data, on the same phone. The web app keeps the same kind of data in your browser’s storage.

Mora sends none of it to us or to anyone else, so we can’t see it, back it up or restore it.

If your phone backs itself up to your Google or iCloud account, that backup includes Mora’s data, as it does for most apps. The backup belongs to your account, not to us, and we can’t read it. You turn it on or off in your phone’s settings.

To delete the data, delete the tasks in the app, or uninstall the app, which removes everything from the phone. A phone backup may still hold a copy and bring it back if you reinstall Mora. In a browser, clear the site data for moratodo.app.

Notifications and permissions

The evening reminder is off until you turn it on in Settings. Your phone works out its text and schedules it, and your phone’s own notification system shows it; nothing about it leaves the device.

Mora asks for permissions only when you turn the reminder on. On iPhone it asks for one, Notifications, to show it. On Android it may ask for two: Notifications, to show it, and Alarms & reminders, to show it at the exact time. You can refuse either, or withdraw it later in your phone’s settings.

Payment links

When you reset the counter, you can choose to send the amount to a friend, donate it to a charity or tip the developer. Mora then opens a link in your browser or in the service’s own app. The link can contain the amount, the currency and, for a friend, the username you typed in.

From then on you are using that service (for example PayPal), and its privacy policy applies. Mora doesn’t make, see or check any payment, and never learns whether you paid.

This website

Cloudflare hosts moratodo.app. When you visit, your browser sends your IP address and the usual details of the request, such as the page and your browser type. Cloudflare uses them to deliver the pages and to protect the site from attacks. We set no cookies and use no analytics or tracking, we don’t keep access logs, and every file is served from moratodo.app itself. Cloudflare may set a short-lived security cookie of its own when it needs to check that a visitor isn’t an automated attack; it is strictly necessary for that check and isn’t used to track you.

The web app also stores its own files in your browser, so that it works offline.

We rely on our legitimate interest in running a working, secure website (Article 6(1)(f) of the GDPR).

If you email us

Mail to [email protected] is forwarded by Cloudflare’s email routing to the developer’s Gmail inbox, which Google provides. We use your address and your message only to answer you, and delete them 12 months after our last exchange, or sooner if you ask. We rely on our legitimate interest in answering your message (Article 6(1)(f) of the GDPR).

Data outside the EU

Cloudflare and Google are based in the United States, so the website and email data above may be processed there. Both take part in the EU–US Data Privacy Framework, which the European Commission has found to protect personal data adequately (Article 45 of the GDPR).

Crash reports from the app stores

If you have allowed your phone to share diagnostics with Google or Apple, they may give developers reports of crashes: the device model, the system version and where in the app the crash happened, without your name or contact details. We use these only to fix bugs. You choose whether to share them in your phone’s settings.

Children

Mora isn’t directed at children under 13. The app collects no personal data from anyone, at any age.

Your rights

We hold nothing from the app, so there is nothing of yours on our side to see or delete: the data on your device is in your hands. For anything you send us by email, and for the website, you have the right to access, correct or delete your personal data, to restrict its use, and to receive a copy of it. Write to [email protected].

Your right to object. We use the website and email data on the basis of our legitimate interest, so you can object to that use at any time, for reasons that concern your own situation (Article 21 of the GDPR). We then stop, unless we have compelling grounds that outweigh your interests, or need the data to establish or defend a legal claim.

You can also complain to a data protection authority: in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority where you live.

Changes to this policy

Accounts and sync between your devices are planned. Signing in will be optional, and before it arrives this policy will say exactly what is stored, where, and for how long. Any change is posted on this page with a new date.

Who we are

Riccardo Perana, the developer of Mora, is responsible for the personal data described above. Contact: [email protected].