todofy v1.13.1

Fixed

• A card dropped in the same place over and over stops snapping back. Both the list's manual order and the board's own order place a moved card at the midpoint between its two new neighbours, which keeps a drag from having to renumber everything around it — but each drop into the same gap halves it, and after about fifty the midpoint is no longer a distinct number. The two cards then tied, the order fell back to which was created first, and the card you had just placed jumped somewhere else. Todofy now notices when a gap has run that fine and quietly renumbers the column, which leaves the order you can see untouched and restores the room to keep dropping. Any card the renumber moved is sent back to the window, so the board never shows positions the database has already changed
• Dragging a card out of Done returns it to the column it came from. It used to land in whichever column happens to sit to the left of Done, so a task you had finished while it was Blocked re-opened as In progress. Its stage is still recorded while it is complete, and re-opening it now uses that
• The Linux AppImage starts inside a sandbox again. Its launcher was packaged readable only by the user who owned it, which is invisible when you run the AppImage yourself — the runtime hands you the files as your own — but fatal wherever something else mounts the image on your behalf. firejail --appimage refused to start it, and so did the AppImage catalog, which tests every app that way. The launcher is now readable and runnable by anyone, and a release that packages an owner-only file again fails its build instead of shipping (tauri-apps/tauri#16155)
• todofy is filed under Office in your application menu. The .deb, .rpm and AppImage all shipped a desktop entry with an empty category list, so desktop environments had nowhere to put it and menus that group by category left it out. The entry now also hands a todofy:// link to the app as an argument, the way a scheme handler is supposed to, so a link opened before todofy has ever run still arrives instead of being dropped

Added

• Linux software centres recognise todofy. The Linux packages now carry AppStream metadata, so GNOME Software, Discover and AppImageHub show a proper name, summary, description, screenshots and release history rather than a bare desktop entry

---

Download a bundle below for your platform (.deb/.rpm/.AppImage for Linux, .dmg for macOS, .msi/.exe for Windows).

todofy v1.13.0

Added

• Free, optional local voice input. Enable Voice Mode in Settings after choosing to download the whisper.cpp engine and a multilingual speech model. Dictate tasks in the main composer or global quick capture, or dictate into a journal entry. The spoken language is detected automatically, and the transcript is inserted as editable text; Add and Save remain separate actions. Nothing downloads or requests microphone access until you opt in
• Recording controls inside each editor. The microphone button opens a live, Todofy-colored waveform at the top of the same task or journal composer, with elapsed time and clear Stop and Cancel controls. Transcription shows a simple progress state in that row. The quick-capture window grows to keep the controls and draft visible while voice input is active

Changed

• Voice assets are managed in Settings. Base and Tiny multilingual models are separate optional downloads. Settings shows download progress and installed state, offers updates and removal, and enables Voice Mode only when the engine and selected model are ready. Once installed, speech recognition runs on the device and works offline
• Settings and Journal now load when opened, reducing the initial frontend bundle size

Security

• Voice downloads use a signed catalog and verified file hashes before the downloaded engine can run. Temporary recordings are removed after transcription or cancellation, and audio is never uploaded for recognition

---

Download a bundle below for your platform (.deb/.rpm/.AppImage for Linux, .dmg for macOS, .msi/.exe for Windows).

todofy v1.12.1

Fixed

• Todofy left running no longer stops looking for updates. The daily check only ever ran once, a few seconds after launch, so an install that lives in the tray for days or weeks — which is how todofy is meant to be used — would never notice a new version after the first look. Checks now continue on their daily schedule for as long as the app is open, and switching them off in Settings takes effect straight away instead of at the next restart
• A download no longer disappears when you leave Settings. Progress was only drawn inside the Updates panel, so navigating away hid a transfer that was still running and left no way to tell whether it had stalled. The marker in the top bar now carries it as a progress ring with the percentage, visible from every view, and a finished update keeps its marker until you restart

Added

• Todofy can install its own updates. A new Install automatically switch under Settings → Updates turns the daily check into a complete update: when a new version turns up, todofy asks whether to install it, shows you what's new, and takes care of the rest. It never downloads without asking and never restarts on its own — the two moments that would cost you bandwidth or a half‑typed task are always yours to approve. If the question arrives while todofy is in the tray, it waits until you're actually looking at the window rather than being spent on an empty screen. The switch is off until you turn it on, and is unavailable on .deb and .rpm installs, which your package manager owns

---

Download a bundle below for your platform (.deb/.rpm/.AppImage for Linux, .dmg for macOS, .msi/.exe for Windows).

todofy v1.12.0

Added

• A Kanban board. A new Board view lays your work out as cards across four columns — To do, In progress, Blocked and Done — so you can see what's moving and what's stuck instead of reading it off a list. Drag a card anywhere: down its own column to reorder it, or across to another to change its stage. Dropping a card into Done completes the task properly, so a repeating task still rolls forward to its next occurrence and still earns its confetti; dragging one back out re-opens it. Cards carry the same detail the list rows do — priority, due date, labels, checklist progress, estimate and the live time tracked — and clicking one opens the full task in a dialog over the board. A scope switch narrows the board to Today or This week, search and the label and priority filters apply as they do everywhere else, and your choice of scope is remembered. Keyboard users can nudge the selected card between columns with H and L. The board's arrangement is its own: rearranging cards never disturbs the manual order you've set in the list views, and both travel with account sync

Fixed

• The task details opened from a board card now stay readable at every window size. The schedule, estimate and priority controls fold to fewer columns as the window narrows instead of being cut off, and the priority buttons no longer overflow their box

---

Download a bundle below for your platform (.deb/.rpm/.AppImage for Linux, .dmg for macOS, .msi/.exe for Windows).

todofy v1.11.0

Added

• Todofy Pro — official Cloud Sync is now available for €3.99/month or €39/year, with a calm in-app paywall that explains what stays free and what Pro adds
• Browser checkout and license activation — choose monthly or yearly billing, complete checkout securely in Lemon Squeezy, then return to Todofy and activate the emailed license on the intended account. Existing unclaimed licenses can be activated after signing in
• Subscription status and management — Settings shows the current plan, access state, and paid-through date, with a secure link to the Lemon Squeezy customer portal
• Account-first or purchase-first setup — customers can create an account before checkout or purchase first and connect the license afterwards
• A welcome tour on first run. A fresh install now opens with a short seven-step introduction instead of an empty list: pick a theme and watch the app change behind it, write your first task in plain language and see the date, time, priority and repeat lift out of the sentence as you type, set a focus session length, switch on notifications and start-at-login, and meet the journal, calendar, labels and repeats. Every step does the real thing — the theme, the timer length, the permissions and the first task are all genuinely set by the time you reach the end. An install that already holds tasks is never shown the tour, and it can be replayed anytime from Settings → About
• Todofy updates itself. New versions are checked for quietly once a day. When one turns up you get a notification — the same corner popup or system notification your reminders use, so the news reaches you even with todofy sitting in the tray — and clicking it opens the update controls. A marker also appears in the top bar while an update is waiting. Settings → Updates shows what's available, downloads it with a progress bar, and restarts into it when you're ready; automatic checking can be switched off there, and Check now is always available. You're told about a given version once, not every day, and turning desktop notifications off turns this off too. Every update is cryptographically signed at release time and verified before it is installed, so a tampered or unofficial bundle is refused. A .deb or .rpm install is owned by your package manager, so those are pointed at the release page rather than replaced behind your back — the AppImage, macOS and Windows builds update in place

Changed

• Official hosted Cloud Sync now checks the account's server-verified entitlement before manual and scheduled synchronization. Local tasks, calendars, timers, reminders, and Google Calendar integration remain available without Pro
• Subscription checks stay out of your way. Todofy keeps showing the access it has already confirmed while it quietly re-verifies in the background, folds overlapping checks into a single request, and won't re-ask within half a minute of the last answer — so the Pro window reads steadily instead of blinking each time the app regains focus
• Sign-in and account creation have moved into a focused authentication dialog, while the Account section now presents sync, subscription, activation, and deletion states more clearly
• Cloud pulls use one database RPC snapshot so related tasks, labels, sessions, journal entries, and deletion markers share a consistent server watermark
• Supabase traffic now uses Tauri's native HTTP transport, avoiding unnecessary browser CORS preflights while keeping requests limited to Supabase hosts
• Background sync progressively backs off while no data changes and slows to a quiet tray cadence when Todofy is hidden; local edits and returning to the app still trigger prompt synchronization
• The release pipeline now requires exact production configuration, the live EUR catalog, locked dependency installation, a frontend build, a production dependency audit, and the Rust test suite before packaging can begin

Fixed

• The top bar no longer draws over itself at middling window widths. Across a band of window sizes the page links (Today through Journal) and the buttons on the right were both laid out as though they had the room, so the two groups ended up drawn on top of each other and their labels became an unreadable pile. The labelled bar now appears only at widths that genuinely fit it, and below that it's icons-only — as it already was on narrower windows. If the labels ever outgrow the space anyway, on a system with a larger interface font for instance, the links scroll within their own strip instead of spilling across the buttons beside them
• GitHub CI and release workflows now use the current supported checkout action and locked dependencies, preventing invalid action versions or dependency drift from breaking validation and packaging
• Cancelling, expiring, refunding, or revoking a subscription now pauses Cloud Sync when access ends instead of leaving a previously verified client syncing indefinitely
• Sync rechecks entitlement revisions before advancing its watermark, preventing access changes during a sync from being recorded as a successful authorized cycle
• Account deletion now coordinates subscription cancellation with the private billing service before deleting the Supabase user, and fails closed when cancellation cannot be confirmed

Security

• Pro access is derived from authenticated server responses with bounded cache lifetimes; license keys are submitted only for activation and are not persisted, while Lemon Squeezy credentials and the Supabase service-role key remain server-side
• External URL permissions are limited to Todofy's website, repository, and Lemon Squeezy instead of allowing every HTTP or HTTPS destination

---

Download a bundle below for your platform (.deb/.rpm/.AppImage for Linux, .dmg for macOS, .msi/.exe for Windows).

todofy v1.10.2

Fixed

• Adding a task no longer fires a reminder at you the moment you create it. A task with a due date but no set time is nudged at 9:00 on the day it's due — but that hour is todofy's own default, not a time you chose, so a task created after it had already passed was treated as instantly overdue. In practice that meant every task added from Today after 9 in the morning notified you within seconds of typing it. A task now only gets that default nudge if it existed when the hour came round; genuinely overdue tasks from earlier days still nudge you when you reopen todofy, and a time you set yourself is always honoured
• Reminder sounds were silent on any install that never touched the volume slider. An unset volume was being read as 0 rather than the intended 70%, so both the Play button in Settings and every reminder sound played at zero — indistinguishable from the feature not existing. Setting the volume to 0 deliberately still mutes, as it should
• The date picker no longer closes the moment you click a day. When the picker also carries a time, repeat, or snooze row, choosing a date used to dismiss the whole thing before you could reach any of them. It now stays open so a date, a time, and a recurrence can be set in one pass, and closes on Done, Escape, or a click outside. Pickers that only choose a date still close immediately as before
• A sound that can't play now says why. Audio failures were swallowed silently, so a blocked or unsupported audio system looked exactly like an unfinished feature. Settings now reports the reason; a failing sound still never interferes with the reminder itself
• Clock and calendar conventions are detected more reliably. A session that exports an empty LC_ALL no longer hides a perfectly good LANG, and todofy now falls back to the system's own locale configuration when a session passes none through — a common case when it's started by a display manager or at login. On macOS and Windows, where no locale variables are set at all, the week now starts on the right day instead of always Monday

Changed

• Repeating reminders explain themselves. Under a heading that read "Keep reminding until answered", options labelled "2 min" and "10 min" looked like how long the nagging would last rather than how often it repeats. They now read Every 2 min, Every 5 min, and Every 10 min, and the description says plainly that a repeating reminder never gives up on its own and lists exactly what stops it
• The date picker's time field has its own full-width row instead of being squeezed in beside the one-tap quick times. AM/PM is now a proper two-option switch rather than a single button showing the current value, and the hour and minute placeholders read HH and MM consistently
• Settings shows where "Auto" gets your clock and calendar settings from, so a wrong result says whether the system reported nothing or reported something unexpected
• The "get louder each time a reminder repeats" checkbox now uses todofy's own themed control, matching the rest of the app instead of the unstyled system one

---

Download a bundle below for your platform (.deb/.rpm/.AppImage for Linux, .dmg for macOS, .msi/.exe for Windows).

todofy v1.10.1

Fixed

• Tracking a task's time no longer pops open a "Focus" panel with an unrelated, unstarted Pomodoro countdown inside it. The floating timer now only shows the Pomodoro clock once it's actually driving the current session, and reads Tracking rather than Focus for a plain task session
• The floating timer no longer disappears just because you clicked elsewhere to switch pages. It stays pinned on screen for the whole time a task or Pomodoro session is running, and only closes on an outside click once nothing is active
• Pausing or stopping a task's timer from the task itself (rather than the tray menu) now updates the tray right away, instead of leaving it stuck on "Paused" until the app was restarted
• The date & time picker no longer gets clipped when opened from a task's details. It now opens upward from its button instead of down, and stays fully visible instead of being cut off by the card around it
• The task estimate popover no longer opens misplaced inside a task's details — it's positioned the same reliable way as the date picker now
• The date and estimate pickers now appear above other windows, such as the Calendar's event editor, instead of opening hidden behind them
• Hardened the Upcoming view so an overdue task can't end up grouped under a plain-looking date header there

---

Download a bundle below for your platform (.deb/.rpm/.AppImage for Linux, .dmg for macOS, .msi/.exe for Windows).

todofy v1.10.0

Added

• Task estimates — give a task an expected length and see it on the task row and in its details. Pick a common length (15m up to 2h) or type your own — "90", "1h30", "1.5h", and "1:30" all mean the same thing. Estimates can be set while capturing a task in the quick-add bar, and they sync with your account. Self‑hosters apply the new task_estimate migration
• Estimate vs. actual — once a task passes the time you estimated for it, its tracked time turns red and shows how far over it has gone, on the task row, in the task's details, and in the focus card. The tray clock shows the overrun too (12:30 +2:30), so it's visible with the window closed. The overrun counts every session the task has had, so it survives a pause and stays visible after you stop
• Pause a task timer — timing a task now has start, pause, and stop. Pausing holds the clock without ending the session, so a break, a phone call, or a meeting doesn't get recorded as work; resuming picks up from where the clock stopped. The controls sit on the task row, in the task's details, in the focus card, and in the tray menu, and they stay visible on the task being timed instead of appearing only on hover
• Choose what a task's play button does — Settings → Task timer now offers Stopwatch (the default: it times how long the task takes) or Pomodoro (it also starts a focus countdown for that task, so the two clocks start, pause, resume, and stop together). Previously the button started a stopwatch while the focus window counted down a separate, unrelated Pomodoro, which was impossible to make sense of
• Reminders can keep asking — Settings → Notifications can now repeat an unanswered reminder every 2, 5, or 10 minutes instead of showing it once. It stops as soon as you answer it: opening, dismissing, or snoozing the notification, completing the task, or starting to time it. A notification that simply times out on screen doesn't count — that's a reminder you never saw. Off by default
• Reminder sounds — reminders can play a sound: Chime, Ping, Bell, or your own audio file, with a volume slider. The built-in tones are generated rather than recorded, so they add nothing to the download. A custom sound is stored inside todofy, so it keeps working if you later move or delete the file you picked (up to 1 MB). There's also get louder each time a reminder repeats, which starts a repeating reminder quiet and builds to your set volume over four rounds. New installs default to Chime; set the sound to Silent if you'd rather todofy stayed quiet
• Date & time preferences — a new section in Settings to choose a 12- or 24-hour clock and which day your week starts on. Both default to Auto, which follows your system, and the setting shows you what Auto currently resolves to
• Editable quick times — the one-tap times in the date picker were fixed at 9:00, 12:00 and 18:00 with no way to change them. Settings → Date & time now lists them: click one to remove it, add your own with the time field, up to four. Remove them all and the picker just shows the time field

Changed

• todofy now follows your system's clock and calendar conventions. Times appear in your locale's 12- or 24-hour format, and the calendar, the date picker, and the day rail all start the week on the right day — Monday across most of the world, Sunday or Saturday where that's the convention. Previously the week always started on Sunday, and the clock followed the app window rather than your desktop's regional settings
• Reworked time entry — the date picker's time control is no longer the system time box. It's now a themed HH:MM field that follows your locale's 12- or 24-hour convention: arrow keys nudge the hour and minutes, typing : jumps to the minutes, and the hour moves on by itself once it can't take another digit. The same field replaces the start and end time boxes when editing a calendar event, where the old control also ignored the light theme
• Repeat now lives in the date picker, next to the date and time it applies to, instead of in a separate dropdown beside it. Pick Never, Daily, Weekdays, Weekly, Monthly or Yearly while you're already choosing when the task is due. A repeating task shows its rule in the task's details as well as on the task row
• Tracked time counts up while you work — a task being tracked now shows its time climbing on the task row and in its details, highlighted while it runs, instead of showing the old total until you stopped the timer
• The task timer button says what it does. It used to read "Begin 15 min" while actually starting an open-ended stopwatch, with the 25-minute Pomodoro running separately and unrelated. It now reads Track time (or Start focus in Pomodoro mode), then Pause or Resume, and a stop button appears beside it while a session is open
• Reminder notifications stay put — todofy's own notification card no longer vanishes on a fixed timer while you're reading it. Hovering the card holds it open as intended, and it now waits ten seconds rather than six

Fixed

• A task whose reminder time has passed now reads as overdue instead of sitting quietly as "Today". The due date and the reminder both turn red once the time is behind you, and views keep up with the clock on their own — a task turns overdue while you're looking at it, and todofy left open overnight no longer shows yesterday's "Today"
• A time typed into the date picker is no longer lost. It's kept the moment it's complete, so dismissing the picker keeps it, and pressing Enter sets the time instead of saving the whole task
• Reminders can now be snoozed straight from the notification — 15m, 30m, or 1h — instead of only from the in-app toast, which the default notification style never showed
• An empty task list caused by a failed load. If one part of your data couldn't be read at startup, todofy showed an empty list in every view — including tasks you added afterwards — with no indication anything had gone wrong. Each part now loads on its own, so a problem with one never hides the rest, and todofy tells you what failed and offers to retry
• todofy.db is now a complete database on its own. Recent changes were held in a companion todofy.db-wal file and only folded into the main file occasionally, so copying todofy.db for a backup could produce a file that looked empty. todofy now folds it in when you close the window to the tray and when you quit

---

Download a bundle below for your platform (.deb/.rpm/.AppImage for Linux, .dmg for macOS, .msi/.exe for Windows).

todofy v1.9.0

Added

• Sign in with Google — sign in or sign up with your Google account straight from the Account modal, alongside the existing email and password. Authentication opens in your system browser and returns through a PKCE-protected loopback callback on 127.0.0.1; the browser shows a clear success or error page only after Todofy finishes creating the session, with a button to return to the app. Self-hosters enable it by adding a Google OAuth provider in Supabase (see the README)
• Delete your account — a new option in Settings → Account permanently deletes your account and all of its cloud data, with a clear type‑to‑confirm step and an optional checkbox to also wipe the copy stored on this device. Deleting the account cascades to every synced table, so nothing is left behind. Self‑hosters deploy the new delete-account edge function
• Local calendar — a new Calendar workspace brings month, week, and day views to todofy. Tasks appear on their due dates, and standalone all-day or timed events can be created, edited, and deleted directly in the calendar. Standalone events stay private to this device and are not included in account sync or pushed to Google
• Google Calendar sync — connect Google Calendar in Settings → Calendar to push your tasks one‑way to a dedicated todofy calendar, so dated tasks show up next to your meetings. Tasks with a due date become all‑day events and tasks with a reminder become timed events; recurring tasks move as they roll forward, and deleting or un‑dating a task removes its event. By default completing a task clears its event, with a toggle to keep finished tasks (marked with a ✓) and another to push only tasks that have a set time. Disconnecting can optionally delete the todofy calendar and its events. Sign‑in uses Google's desktop loopback flow with PKCE and the narrow calendar.app.created scope, so todofy only ever touches the calendar it creates; tokens live in your OS secret store. It's opt‑in and gated behind account sign‑in. Self‑hosters enable the Google Calendar API and add a Desktop app OAuth client (see the README)

Changed

• Safe account switching — Todofy now records which account owns the local sync data. When a different account signs in on the same installation, sync pauses and asks whether to load that account's cloud data or copy the current device data into it. Copying generates new UUIDs for the local sync graph so row-level security remains intact and records owned by the previous account are never overwritten

Fixed

• Google account sign-in no longer gets stuck after a successful browser authorization in packaged builds. Todofy now owns the fixed http://127.0.0.1:3369/auth-callback listener, exchanges the returned code with Supabase, reports the real result in the browser, and reliably clears the in-app loading state
• Account sync no longer uploads active label assignments or focus sessions whose parent task or label has been deleted. Task and label deletion now tombstones dependent rows atomically, legacy orphaned rows are repaired at startup, and a final upload filter prevents foreign-key failures
• Signing in with another account no longer attempts to upsert local UUIDs already owned by the previous Supabase user, preventing the resulting labels row-level-security error without weakening RLS policies
• Wipe local data now removes standalone calendar events along with tasks, labels, focus sessions, and journal entries
• Timed standalone events now require their end time to be later than their start time

---

Download a bundle below for your platform (.deb/.rpm/.AppImage for Linux, .dmg for macOS, .msi/.exe for Windows).

todofy v1.8.0

Added

• Journal — a new top-level view for writing free-form entries. Each entry has an optional title, a body with Markdown support (rendered and sanitized), and an optional 1–5 mood. Write as many entries per day as you like; they group under day headings, newest first
• Day summary — the composer offers a one-tap chip that inserts what you actually did that day (tasks completed and minutes focused), drawn from your tasks and focus history, as a low-friction writing prompt
• Calendar rail markers — days that have a journal entry are now dotted in the week rail, so it doubles as a way to see which days you've written
• Journal shortcuts — press Shift+J to jump into the Journal and start an entry; n now opens a new entry when you're already in the Journal (and a new task everywhere else). Both are listed in the ? cheat-sheet
• New journal — added to the app context menu, right under New task
• Journal account sync — journal entries sync across devices on the same offline-first path as tasks: a per-user journal_entries table with row-level security, last-write-wins by updated_at, and deletion markers so removals propagate. Self-hosters apply the new journal and sync-tombstone migrations

Changed

• New design — rebuilt the app as a calmer daily canvas with top navigation, a calendar-and-day rail, clearer task rows and detail views, and refreshed Focus, Settings, quick-capture, and notification surfaces

Fixed

• Deleting a task, label, label assignment, focus session, or journal entry now records a content-free sync marker and physically removes the corresponding row from Supabase. Previously sync only uploaded deleted_at, leaving deleted content in the remote content table indefinitely

---

Download a bundle below for your platform (.deb/.rpm/.AppImage for Linux, .dmg for macOS, .msi/.exe for Windows).