Privacy Policy

Version 2026-09-29 · Effective 2026-09-29

Data we process

For official accounts we process your email address, password verifier, verification and session records, subscription status, order summaries, storage usage and deletion requests. The website uses a secure browser identifier for abuse prevention, retained in your browser for up to 180 days. We do not need to read your encrypted project, task or note content.

Storage and providers

Official sync data is stored in Cloudflare R2 under an account-specific prefix. Account and billing facts are stored in Cloudflare D1. Email delivery uses Resend; website payments use Paddle; Android purchases use Google Play.

Retention and deletion

After the last valid subscription ends, official cloud data is retained for 90 days. Account deletion stops new sync authorization immediately and queues cloud data and nonessential account records for deletion within 30 days, after already-issued short-lived storage credentials expire. Payment platforms may retain legally required records.

Your choices

You can use local features without an account, request account deletion in the app or on this website, and contact support for access requests. Support contact and operator details must be completed before public launch.