Yes, Todoist is legit. It is used by some of the world's largest corporations, like Apple, Facebook, Netflix, and NASA. All data entered into Todoist is encrypted, and your data is never sold or shared with third parties. If you choose to delete your account, all of your personal data will be removed from Todoist's systems.
Mentioned in this answer
Todoist
Organize your life. Then go enjoy it.