Privacy policy

Your account

To run your account we store your username, a hashed password (we cannot read the original), your preferences — language, currency, time zone, theme — and, if you add them, email addresses or phone numbers for account recovery, plus an optional profile picture.

Your records

Everything you keep in DataWasi — tables, fields, records, comments, and their change history — lives in a database of its own, one per account, on our servers hosted with Hetzner in the European Union.

People you explicitly share tables with can see them, with the permission level you chose. Nobody else looks inside your account: we only do so to help you when you ask, or if the law requires it.

Files and photos

Files you attach to records — including photos sent from the apps — are stored in Hetzner Object Storage, also in the European Union. Uploads and downloads use expiring signed links, so files are never publicly reachable.

AI reading, only when you ask

Some features read a photo or document for you — for example, creating a record from a photo. When you use one, the file you chose is sent to Anthropic (the maker of Claude) to be read, and the extracted values are saved into your table. Nothing is ever sent in the background or without you asking.

Under Anthropic's commercial terms, your files are not used to train their models. We keep a usage log — token counts and cost, not the content — to enforce the monthly AI allowance.

Keeping the service running

Our servers keep standard technical logs (IP address, page requested, time), used only to operate and protect the service. When something breaks, a technical error report goes to our error-monitoring service (Honeybadger), and performance timings go to Skylight — neither receives a copy of your tables.

We keep backups of the databases and files so we can recover from failures: one with Hetzner, like the data, and a second copy with Cloudflare, also in the European Union. Backups rotate, so old copies expire on their own.

Paying for a plan

Card payments go through Paddle, the merchant of record that sells our plans (see the terms of service). To start a checkout we give Paddle the email address the payment is for; Paddle then collects the card and billing details under its own privacy notice, and we never see the card number. We keep a record of each payment — the plan, the amount, the date and whether it went through — to show it on the account's Billing page. Payments by bank transfer we record ourselves, with their transfer reference.

The app for iPhone, iPad, Mac and Apple Vision Pro

The app talks to the same service over an encrypted connection. When you sign in, its access credentials are kept in the device Keychain — Apple's secure storage — never in plain files. The camera is used only when you choose to take a photo for a record.

The app contains no ads, no analytics, and no third-party SDKs.

Cookies

The web app uses a session cookie to keep you signed in and small preference cookies (language, theme). There are no advertising or tracking cookies.

What we never do

We do not sell your data, show ads, build profiles, or track you across other apps and sites. There are no analytics scripts on the site or in the apps.

Deleting your data

You can export your tables yourself at any time, delete records — Trash holds them until you restore them or delete them permanently — and remove files whenever you want. To close your account entirely, write to us and we will delete the account, its database, and its files. Copies inside backups expire as backups rotate.

Changes to this policy

If this policy changes, we will update this page and the date at the top. We will never quietly turn on ads or tracking — that is not what DataWasi is.

Contact

Questions about your data? Write to hola@datawasi.com.