English · Español · Português (Brasil) · Português (Portugal) · Français · Deutsch · Italiano · Русский · 日本語 · 한국어 · 简体中文
Privacy
Last updated: 29 October 2026
What stays on your device
Your maps — text, images, notes, due dates and stickies — are kept in the app's local storage, on the device itself. Nothing is sent anywhere until you ask for it.
Private maps and their local history are separated by account. The server must confirm your account before they open. Signing out locks them without deleting the local copies. Older local maps without a known owner are preserved separately and are not automatically opened or uploaded. Local storage is not encrypted against access to the device's browser profile.
What leaves the device, and only if you ask
- Cloud sync: if you sign in and have an active Dendra Pro subscription, your maps are saved to our storage on Azure (Europe), in an area tied to your account. Only you can read them.
- Collaborating live: while a room is open, changes to the map travel through the Azure Web PubSub service and are kept for whoever joins later. The list of people allowed into a room stores their email addresses, and notes and stickies store the author's name and email address so collaboration can recognise who wrote them.
- Link with the map inside: the map travels inside the address you copy. Whoever has the link has the map. Authors' email addresses are removed before the map goes into a link or into an exported file — a shared map credits people by name only.
Accounts
The directory keeps an account's creation date when recorded and the latest UTC day of authenticated activity per platform (iOS, Android, web or unattributed). This produces aggregate operational statistics; it does not record map contents or a device identifier.
Signing in uses Google, Microsoft or Apple. We receive your email address and an identifier to recognise your account, keep your maps separate and check collaboration access.
We keep a minimal account directory, including free accounts. The sole administrator can see account emails, collaboration names and access, subscription status, totals of known accounts and cloud maps, and aggregate usage counts (for example, how many accounts synced on a given day or use notes in their maps). Test subscriptions are separate from production subscriptions. The admin panel does not expose map contents or purchase receipts.
Visit counts
The website counts visits anonymously so we know how many people come by and try a map. There are no cookies and nothing is stored on your device. For each visit the server keeps only a code made from your IP address and browser with a key that changes every day and is then thrown away, so a code cannot be traced back to you or linked to another day. We record whether you opened the app, edited or created a map, and signed in afterwards, never what the map says. For the first visit of the day we also note how you arrived: the kind of source (for example direct, a search engine, an AI assistant or another website), the name of that site or of a tagged link, the page you opened first, whether it was a phone, tablet or computer, and the country, worked out from your browser's time zone (the time zone itself is not kept). After each day only the daily totals remain. The iPhone and iPad app is not counted, and browsers that send Do Not Track or Global Privacy Control are skipped.
Purchases
The Dendra Pro subscription enables cloud sync and is processed by Apple as an In-App Purchase. We never see or store payment details.
What we do not do
No advertising, no cross-site tracking, no selling or sharing data with third parties. Administrative totals use the account and service activity described above and Apple's aggregated download, installation and estimated sales reports. Apple installation reports cover only people sharing analytics with Apple; privacy thresholds can withhold data.
Deletion
Deleting a map in the app deletes it on the device. If you are signed in, the app also has a delete button for the cloud copy of your maps; it removes what is stored in your account and signs you out. You can still write to the address below if you need help.
Delete account, in More (...) › Sync account, goes further: it erases the maps kept in your account, your directory entry, the record of your subscription, the daily usage counters and your collaboration invites, and signs this device out. The maps on your device stay where they are, and your App Store subscription is managed in Settings › Apple Account › Subscriptions.
A minimal deletion marker and session revocation record remain to prevent old sessions or legacy data from restoring an erased account. Signing in again can create a new account.
Contact
semichcsc@gmail.com