Privacy policy
Summary
TinyCld is a self-hosted productivity suite. When you use the TinyCld mobile app (iOS or Android), your mail, calendar events, contacts, and files are stored on the PocketBase server that you or your operator control. TinyCld itself (the project) does not receive, store, or process any of that content. The app ships with no advertising SDKs and no third-party trackers.
What the app stores on your device
- The URL of the server you connected to.
- An auth token so you stay signed in.
- A cache of recently viewed data for offline display.
What the app sends to your server
Every action you take in the app - reading mail, creating a calendar event, uploading a file - is sent to the PocketBase server you configured. That server is controlled by you or your administrator, and is covered by their privacy practices, not ours.
Push notifications
If you enable notifications, the app registers a push token with the server you are connected to. The token is used only to deliver notifications for events on that server. It is not shared with third parties.
Diagnostics (Sentry)
To improve reliability, the app reports uncaught exceptions and performance diagnostics to Sentry. Before sending, the app strips any field whose name suggests user content - email, body, subject, name, phone, address, content, filename, title. Crash reports are not linked to user identities and are not used for advertising or tracking.
No third-party tracking
The app does not include analytics SDKs, advertising SDKs, tracking pixels, or device-fingerprinting libraries.
Website analytics
This website (tinycld.org) and tinycld.com count page views and a few button clicks with Umami, an open-source analytics tool that we host ourselves. It sets no cookies and stores no IP address. To tell one visit from another it keeps a salted hash that cannot be traced back to you and that changes every month. The data stays on our server and is not shared with or sold to anyone. This applies to the websites only - the app contains no analytics.
Deleting your account
In the app, open Settings → Personal → Account → Delete my account. This anonymizes your user record on the server and removes you from every shared mailbox, calendar, and board you belong to. The record itself is retained so that audit logs and history referencing it remain valid, but it no longer contains your email, name, or any credentials that would allow sign-in.
Open source
TinyCld is licensed under AGPL-3.0. The full source is available at github.com/tinycld. You can audit every line of code that handles your data.
Contact
Questions about privacy: privacy@tinycld.org.