Untoil Terms of Service
These Terms of Service (the “Terms”) govern your use of Untoil, an app for Mac and iOS published by Enemies of Toil LLC ("we", “us”, “our”). By installing or using Untoil you agree to these Terms. If you don’t agree, don’t use Untoil.
These Terms are a companion to Untoil’s Privacy Policy, which describes what data Untoil handles and where it lives. The Privacy Policy is incorporated into these Terms by reference.
1. The app, and your license to use it
Untoil is provided as software you download and run on your own device. We grant you a personal, non-exclusive, non-transferable, revocable license to use Untoil on devices you own or control, subject to these Terms and to the Apple Media Services Terms (Apple’s “Standard EULA”), which Apple applies to App Store apps unless a custom EULA replaces it. These Terms serve as that custom EULA — where these Terms and Apple’s Standard EULA cover the same topic, these Terms control; where these Terms are silent, Apple’s Standard EULA applies.
You may not: (a) copy, modify, or create derivative works of Untoil except as Apple’s licensed-application terms allow; (b) reverse engineer, decompile, or attempt to derive source code, except to the extent local law permits and you can’t waive; (c) remove or alter any proprietary notices; (d) use Untoil in violation of any law; or (e) use Untoil to abuse, harass, or harm anyone.
2. Your data, and your relationship with us
Untoil stores your tasks, settings, optional activity metrics, and optional log entries on your device, and (when you have iCloud enabled) in your iCloud account. For every integration, your task and content data flows directly between your device and the third-party service — Enemies of Toil LLC has no access to the contents of your tasks, notes, or any third-party data that Untoil reads on your behalf.
The one server we operate is the OAuth broker described in §3. It exists only to complete the OAuth handshake for integrations that use it, and it never sees or stores your task content, your notes, or any provider API responses.
The full list of what Untoil stores and what we do not collect is in the Privacy Policy.
3. Third-party integrations
Untoil can connect to third-party services you already use (Apple Calendar, Apple Reminders, Bugzilla, Day One, Jira, Monday.com, Notion, Todoist). When you connect one, you are authorizing Untoil to act on your behalf with that service, within the scopes you approve, using credentials you provide.
For integrations that use OAuth, you authenticate with the service in your browser and the service redirects back to Untoil with an access token. Your password is never sent to or stored by Untoil. The access token is stored in your device’s Keychain (and synced via iCloud Keychain if you have it enabled) — never transmitted to Enemies of Toil LLC for storage, never shared with anyone else.
The OAuth broker
OAuth requires exchanging an authorization code for an access token using a client secret that, for security reasons, the app can’t hold on-device. Untoil therefore operates a small backend service — the broker — whose only job is that exchange, and the equivalent refresh-token rotation. The broker:
- Receives the authorization code from the third-party service and, on demand from your device, exchanges it for an access token by calling the provider’s token endpoint with our client secret.
- Rotates refresh tokens the same way: the device sends the current refresh token, the broker calls the provider, the rotated tokens are returned to the device. The broker does not refresh autonomously on a schedule.
- Returns the resulting tokens to your device in the response. The exchange is stateless — tokens transit the request and are never written to disk.
- Does not store your access token, refresh token, authorization code, or
code_verifier. It does not store your provider account, email, project names, task content, or anything else identifying you to the integration. - Does not see any provider API responses. Once the token is on your device, every subsequent API call goes directly between your device and the third-party service.
The only data the broker persists is Apple App Attest material — a public key + signature counter generated by your device, used to verify that requests come from a genuine Untoil app on a genuine Apple device. This is opaque cryptographic data; it is not tied to your identity, your provider accounts, or any data you put into Untoil. Across requests, this material lets the broker recognize that a request came from the same device as a previous one — similar to how a TLS client certificate identifies a device, not a person — but it remains unlinked to any user-identifying data, because the broker collects none.
The broker runs on AWS in the United States (us-east-1). It logs only minimal per-request metadata (method, path, HTTP status, latency) for operational debugging; an explicit redaction layer strips any field named access_token, refresh_token, code, code_verifier, client_secret, assertion, attestation, authorization, or id_token before anything is written. Request and response bodies are never logged. Logs are retained for 30 days and then deleted; they are not sent to any third-party log aggregator.
Revoking access
You can revoke an integration’s access at any time by either (a) disconnecting it inside Untoil, or (b) revoking Untoil’s authorization in the third-party service’s account settings. Doing both is the safest path.
The third-party services are not ours
We don’t operate the third-party services, don’t warrant their availability, and are not responsible for their outages, rate limits, terms changes, data practices, or pricing. Your use of those services is governed by their terms and their privacy policies. If a third-party service changes its API in a way that breaks an Untoil integration, we’ll do our best to adapt, but we make no commitment about how quickly.
4. Updates to the app
We update Untoil from time to time. Updates may add features, fix bugs, or change how existing features work. Apple delivers app updates through the App Store; you control when and whether to install them on your device. We don’t guarantee any particular update cadence or that any feature will be supported indefinitely.
5. Paid features (Untoil Pro)
If and when Untoil offers paid features ("Untoil Pro"), purchases are made through Apple’s In-App Purchase system and are subject to Apple’s payment terms. Refunds are handled by Apple per their refund policy — we do not process refunds directly. Subscription billing, auto-renewal, and cancellation are managed in your Apple ID account settings.
We’ll update these Terms with specifics (pricing model, refund policy beyond Apple’s, trial mechanics) before Untoil Pro ships.
6. Termination
You can stop using Untoil at any time by deleting the app. The Privacy Policy explains how to also delete your iCloud data.
We may discontinue Untoil, in whole or in part, at any time. We’ll try to give reasonable notice through the app or our website when we do.
7. Disclaimer of warranties
Untoil is provided “AS IS” and “AS AVAILABLE” without warranty of any kind, express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, reliability, or uninterrupted service. We do not warrant that Untoil will be error-free, that defects will be corrected, or that Untoil will be compatible with any specific device or operating system version. Some jurisdictions don’t allow the exclusion of certain warranties; in those places, the exclusions in this section apply only to the extent permitted by law.
8. Limitation of liability
To the maximum extent permitted by law, Enemies of Toil LLC will not be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages, including but not limited to lost profits, lost data, business interruption, or any other damages arising out of or related to your use of (or inability to use) Untoil — even if we’ve been advised of the possibility of such damages.
Our total cumulative liability arising out of or related to these Terms or Untoil will not exceed the greater of (a) the amount you paid us for Untoil in the twelve (12) months immediately preceding the event giving rise to the claim, or (b) US$50.
9. Indemnification
You agree to defend, indemnify, and hold harmless Enemies of Toil LLC from any claim arising out of (a) your breach of these Terms, (b) your violation of any law or any third party’s rights, or (c) your misuse of any third-party service connected through Untoil.
10. Export
You may not use, export, or re-export Untoil except as authorized by US law and the laws of the jurisdiction where you obtained it.
11. Governing law and disputes
These Terms are governed by the laws of the State of Texas, United States, without regard to its conflict-of-laws principles. Any dispute arising out of or related to these Terms or Untoil will be brought exclusively in the state or federal courts located in Texas, and you consent to personal jurisdiction in those courts. This does not deprive you of any consumer-protection rights mandated by the laws of your country of residence.
12. Severability
If any provision of these Terms is held unenforceable, the remaining provisions stay in effect.
13. Changes to these Terms
We may update these Terms from time to time. When we do, we’ll update the “Last updated” date at the top, and for material changes we’ll note the change in the app’s release notes. Your continued use of Untoil after the effective date constitutes acceptance of the updated Terms.
14. Contact
Questions about these Terms:
Enemies of Toil LLC
Email: support@enemiesoftoil.com