Privacy promise

Your records stay on-device. The boundary stays visible.

当归 is a fully local Tasks and Notes app. It does not make you hand your life to an account before you can begin.

No account

There is no login, user profile, or application server. Open the app and work offline.

No uploads

Tasks, Past, and Notes stay in the app sandbox and local backup locations you actively choose.

No AI calls

The app sends no text to AI. Only an export you make can be used elsewhere, under your control.

No tracking

There are no ads, analytics, crash telemetry, Firebase, or user-tracking SDKs.

Formal policy

How data stays, moves, and is deleted

Effective date: August 26, 2026

Who provides this policy

This policy is provided by the 当归 project maintainer. For privacy questions or data-boundary concerns, use the support email at the end of this page.

Local data on your device

Tasks, reminders, Past, Notes, and settings live in a local database and the app sandbox on your device. The project maintainer has no application server that can read this content.

Permissions, exports, and deletion

Reminders request system notification permission only when needed. Backups and readable exports are created only when you choose a destination. You can delete records in the app, uninstall the app, and delete exported files yourself.

Processing that does not happen

The app creates no account, stores no content in a project cloud, and includes no advertising, visitor analytics, crash telemetry, remote AI, or automatic record uploads.

Support email

An email address and message you send are used only to understand and answer your request. They are deleted after the request is resolved and any necessary security-retention period ends. Never email real notes, backups, passwords, certificates, or other private content.

Website and external links

This site has no account, forms, or visitor analytics. Cloudflare processes necessary connection metadata, such as IP address, request time, URL, and browser information, to deliver, secure, and operate the site. GitHub applies its own privacy policy after you follow an external GitHub link.

Open source · Public audit

The promise has inspectable evidence

The final Android manifest declares no INTERNET permission. iOS has no push, CloudKit, background-network, or networking capability. Production dependencies and platform settings are publicly audited.