Privacy
Last updated: 19 September 2026
What stays on your device
Your maps — text, images, notes, due dates and stickies — are kept in the app's local storage, on the device itself. Nothing is sent anywhere until you ask for it.
Private maps and their local history are separated by account. The server must confirm your account before they open. Signing out locks them without deleting the local copies. Older local maps without a known owner are preserved separately and are not automatically opened or uploaded. Local storage is not encrypted against access to the device's browser profile.
What leaves the device, and only if you ask
- Cloud sync: if you sign in and have an active Dendra Pro subscription, your maps are saved to our storage on Azure (Europe), in an area tied to your account. Only you can read them.
- Collaborating live: while a room is open, changes to the map travel through the Azure Web PubSub service and are kept for whoever joins later. The list of people allowed into a room stores their email addresses, and notes and stickies store the author's name and email address so collaboration can recognise who wrote them.
- Link with the map inside: the map travels inside the address you copy. Whoever has the link has the map. Authors' email addresses are removed before the map goes into a link or into an exported file — a shared map credits people by name only.
Accounts
Signing in uses Microsoft, Google or Apple. We receive your email address and an identifier to recognise your account, keep your maps separate and check collaboration access.
We keep a minimal account directory, including free accounts. The sole administrator can see account emails, collaboration names and access, subscription status, and totals of known accounts and cloud maps. Test subscriptions are separate from production subscriptions. The admin panel does not expose map contents or purchase receipts.
Purchases
The Dendra Pro subscription enables cloud sync and is processed by Apple as an In-App Purchase. We never see or store payment details.
What we do not do
No advertising, no tracking, no selling or sharing data with third parties. There is no usage activity tracking. Administrative totals come from the account and storage records already needed to run the service.
Deletion
Deleting a map in the app deletes it on the device. If you are signed in, the app also has a delete button for the cloud copy of your maps; it removes what is stored in your account and signs you out. You can still write to the address below if you need help.
Delete account, in More (...) › Sync account, goes further: it erases the maps kept in your account, your directory entry, the record of your subscription, the daily usage counters and your collaboration invites, and signs this device out. The maps on your device stay where they are, and your App Store subscription is managed in Settings › Apple Account › Subscriptions.
A minimal deletion marker and session revocation record remain to prevent old sessions or legacy data from restoring an erased account. Signing in again can create a new account.
Contact
serge.michaux@gmail.com