privacy, in plain words
Last updated 29 September 2026.
The short version: the Katto app doesn't send us anything about you. Everything it keeps lives on your own desktop, and there's no AI inside. This website counts its visits with Google Analytics (more on that below).
the app
- Your list, reminders, notes, focus sessions and settings are stored on your own computer, and only there. We don't have a copy.
- There is no AI in Katto. Nothing reads your screen, your files or your words to learn from them or to send them anywhere.
- Katto doesn't have accounts, ads or tracking, and it doesn't send what you do to us.
- File helpers (tidy, clean-up, find, reading words in screenshots) run entirely on your computer, even with the internet off.
- Katto learns where you file your downloads from your own choices ("file it", "leave it", tidy moves). It keeps only word counts and folder names on your computer, never file names, and you can switch it off or make it forget in the helpers. If you say yes when it offers, Katto also reads the title inside your PDFs and the words in your screenshots, on your computer only, so it can find them and match them to your tasks; the words it reads are kept encrypted, and both can be switched off in the helpers.
- If you choose to connect Microsoft To Do, your list syncs directly between your computer and Microsoft.
- Weather and places: Katto asks a weather service for the forecast near a place you pick (or a rough location). Those requests go through our server only so that no private key has to live inside the app; we don't keep them.
- Updates: Katto checks our server for new versions. That request contains the version you have, nothing about you.
early access
- When you throw a bottle, we keep your email, the name you gave, which computer you use and your note, so we can let you in and write back.
- To stop abuse we keep a one-way scrambled version of your internet address for up to 30 days, then delete it. We can't turn it back into the address.
- The form uses Cloudflare Turnstile to check you're a person and not a bot. It looks at your browser, not at you: no tracking cookies and no puzzles in most cases.
- We never sell or share your details. Ask us, and we'll delete them.
this website
- We use Google Analytics to count visits: which pages are read, roughly where visitors come from, what kind of device they use, and how many people throw a bottle. It helps us see whether anyone finds Katto. It doesn't get your name, your email or your note.
- Google Analytics sets a small cookie to tell one visit from the next. In the EU, the UK and Switzerland it doesn't set that cookie and only sends anonymous counts. Advertising features and Google signals are switched off, so nothing is used for ads.
- Invite links keep their key after the "#". That part is never sent to Google Analytics.
- If you'd rather not be counted, a content blocker or Google's opt-out add-on stops it, and the site works just the same.
- The site is served by Cloudflare, which keeps short technical logs to run it safely.
- The "tonight's sky" box on the home page uses the rough city Cloudflare already works out from your connection, to draw the sky there. It's worked out on the spot and never kept.
questions
Write to hello@thekatto.app.
Katto is made with ♥ by Amazing Man and Toby, his Katto.