Effective date: 18 October 2026
Do Instead (“the product”) is a distraction blocker by Groei B.V. (“we”, “us”). It is available as an iOS app, with Chrome and Safari desktop extensions being prepared for publication, blocks the sites and apps you choose, and shows your own tasks instead.
| Data | Where it lives | Retention | Why |
|---|---|---|---|
| Blocklist, snooze length, hobby projects | Browser extension storage (incl. your browser vendor’s built-in extension sync, e.g. your Google or Firefox account); on iOS, app storage shared with the Safari extension | Until you change or remove them / uninstall | The blocking itself |
| Todoist API token (optional) | Local browser extension storage (not browser-account sync); on iOS, the device Keychain | Until you disconnect Todoist | Fetching and completing your Todoist tasks |
| Task cache | Device-local storage only | Refreshed about every 15 minutes; may remain offline; cleared by Disconnect Todoist or Reset saved data on desktop | The block screen must render instantly |
| Screen Time selections (iOS strict mode) | Your device, as opaque system tokens — Apple’s design means we cannot see which apps or sites you picked | Until you change them | System-wide shields |
| Snooze timers, intervention state | Device-local storage only | Minutes | “Let me in for 5 minutes” |
api.todoist.com directly
to read and complete your tasks. Your token and your task data go to Todoist and nowhere
else. This traffic is governed by the
Todoist (Doist) Privacy Policy.The product loads no remote code, calls no analytics service, and pings no server of ours in normal operation.
Transfer codes (default): you can export your settings — including the Todoist token, if connected — as a QR code or a text code and import it on another device. The code is generated locally and shown only to you; it travels however you choose to carry it. Treat it like a password if your token is in it.
The iOS app offers an optional auto-renewable Pro subscription. Current pricing and trial eligibility are shown before purchase. All payments are processed by Apple through the App Store; we never see your name, payment details, or Apple Account. Apple’s handling of purchase data is described in the Apple Privacy Policy. The browser extension is free and has no purchases.
An iPhone transfer code can include explicit website domains, group names, allowed weekdays and hours, the phone’s time zone and known future schedule changes. The receiving desktop stores this snapshot locally until you replace or reset it. It excludes Apple’s opaque Screen Time selections, program progress, access history and temporary grants. It is not a live connection to the phone. Basic preferences may sync through your browser account; desktop schedules and Todoist tokens do not.
The extension checks current tab and navigation addresses on your device to enforce your chosen rules, including already-open tabs when an allowed window ends. It does not read page content, use the browser history API or store a browsing log. The original address is carried locally in the pause-page URL so you can return when allowed; your browser may keep that URL in its own history. Website addresses are not sent to Groei or Todoist.
Codes are base64-encoded, not encrypted. They may include a Todoist token. Anyone you share a code with can read it; clipboard managers and device clipboard sync follow your system settings. Do not send codes to support.
On desktop, Disconnect Todoist removes its local token and task cache. Help & privacy → Reset saved data deletes imported schedules, tokens, caches and saved preferences and restores the default website list. Browser-synced preferences are reset on other signed-in browsers too. Removing the extension stops protection. In Safari, reset first, then disable the extension and remove the containing Mac app. Revoke a leaked token in Todoist. Provider-held data follows the provider’s retention and deletion controls.
When you import a website library, only unique domains are retained; page paths, titles and visit times are not stored. Explicit domains you select for blocking remain until you change them, even if you clear the library. Optional detox programs, protection checks, focus state, temporary-access reasons and notes remain in local app storage. Task-growth records use one-way identifiers, not task titles. These records are not in desktop transfer codes. Optional voice access uses on-device speech recognition; audio and transcripts are not saved or uploaded by Do Instead.
Do Instead uses data only for the website protection and task alternatives described here, in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not sell data, use it for advertising, profiling or creditworthiness, or allow people to read browser/task data. Transfers are limited to your connected task service, browser-managed preference sync and codes you explicitly share. Support staff see only what you choose to send them.
Website visits and optional support messages are separate from extension operation. Netlify hosts this site and processes submitted forms and ordinary request metadata, such as IP addresses. Your email, topic and message reach Groei B.V. so we can reply; email is handled by our email provider. We retain support information while needed for your request or applicable obligations. Contact a@groei.dev to request deletion. We do not automatically attach your extension settings, visited addresses, tasks or credentials to support messages.
Extension settings and task caches are held on your devices. You can access, correct or delete them there: edit or clear the settings, disconnect Todoist, or uninstall. For any privacy question, contact us and we will respond within 30 days.
If we ever change what the product does with data, we will update this policy, change the effective date above, and describe the change in the release notes before it takes effect.
Groei B.V. · Wielewaal 56, Nieuwegein, the Netherlands · KVK 99753030
Email: a@groei.dev