diff --git a/TODO.md b/TODO.md
index a2dab7b..12e851b 100644
--- a/TODO.md
+++ b/TODO.md
@@ -34,15 +34,13 @@
 - Add clearer setup diagnostics.
   - Surface `pvesh` access errors, missing storage, bad rclone path, missing remote, and remote path test failures separately.
   - Add a setup “test connection” action before saving completed setup.
-- Add restore/export planning.
-  - Decide whether the app should support downloading remote archives back locally or only manage backup creation/deletion.
-  - If implemented, restore must be explicit and should not auto-overwrite local files.
 
 ## In Progress
 
 
 
 ## Completed
+- Add restore/export planning: global "keep local backups" setting, download a completed backup's archive back into the local dump directory on demand, and delete a locally-retained copy independently of the remote object. Restore itself is still explicit and manual via the Proxmox UI, not automated.
 - Make timezones configureable
 - show a "in xx:xx:xx" counting down to the next backup a bit more
 - when deleting a backup that is already deleted, nuke its metadata row entirely