Privacy

This website

This site collects no personal information whatsoever. Specifically:

• There are no analytics of any kind: no Google Analytics, no page-view counters, no session recording.
• There are no cookies. The only thing stored in your browser is your light/dark theme preference, which is kept locally and never transmitted anywhere.
• There are no third-party requests. Fonts, images and scripts are all served from this site, so no other company learns that you visited.
• There are no advertising or tracking networks, and no embedded social media widgets.

Whoever hosts this site may keep standard server logs (IP address, page requested, timestamp) as part of normal operation. That's outside the studio's control and isn't used to build any profile of you.

TabiLog

TabiLog stores what you enter, because it can't tell you your balance otherwise.

What it holds

• Your household's sign-in credentials, with the password stored only as a secure hash.
• The people, budgets and currencies you set up.
• Transactions (amount, category, date, description) and any receipt photograph you attach.
• Your household's display preferences, such as theme.

Who can see it

Only people who sign into your household. Households are isolated from one another: another family using the same deployment cannot see, reach or affect your data. The studio does not read household data as a matter of course, and has no feature for browsing it.

Receipt photographs

Receipt images are compressed in your browser before upload and stored with the transaction they belong to. They are visible only to your household, and they are deleted when you delete the transaction or the household.

Feedback you send

Feedback submitted from inside the app goes to the studio and nowhere else. It is not visible to any household, not even the one that sent it. Please don't include passwords or payment details in it; there is no reason to, and it will simply be deleted if you do.

Deleting everything

Account Settings has a self-service Delete Account option. It requires your password and permanently removes the household and everything inside it. Export first if you want to keep a copy: CSV, Excel and PDF are all available at any time.

TabiPace

TabiPace has no server, no accounts and no sync. Everything you enter, including mobility, health and medication details, stays on the device and is never transmitted anywhere, because there is nowhere for it to be transmitted to.

This is a structural property of the app rather than a setting you have to find. It also means the studio cannot recover your data if you lose the device, and there is no cloud backup to restore from. Sharing happens by exporting a PDF and sending it yourself.

TabiPlanner

TabiPlanner has no analytics, no crash reporting and no telemetry. There is no account to create, no server behind it, and no way for the studio to see your trips. Nothing you type into it is transmitted anywhere.

The free Android build does show banner advertisements, which use an advertising identifier. That is the one thing that leaves the device automatically, it is set out in full under Advertising below, and paying once to unlock the app removes it.

Where your trips are stored

Everything you type stays in the app's private storage on your phone, in two places: a local database and a mirror file. The second copy exists so that a crash or a force stop cannot lose your trip. Neither copy is readable by other apps, and neither is uploaded anywhere by TabiPlanner.

Google backup

Android's own backup service may copy the app's files to your personal Google account, in the same way it does for other apps on your phone. That is a feature of Android, controlled by you in your device settings, and the studio has no access to it. You can switch it off in Android's backup settings.

When something does leave the app

There are only three cases, and you start all three:

• Opening a place in Maps. Tapping a location hands that place name to the Google Maps app on your phone. What Maps does with it is covered by Google's own policy, not this one.
• Exporting or printing. Files you export or print go wherever you choose to send them. TabiPlanner does not send them anywhere on its own.
• Sending a trip to another phone. Sync works by producing a file that you share yourself, using whatever app you like. There is no sync server, and nothing passes through the studio.

Internet permission

TabiPlanner makes no network requests to the studio, and never sends your trip anywhere. It is designed to work with no signal at all, and every feature except the ads keeps working offline.

The free build does contact Google's ad network to fetch a banner. That is the only automatic network request the app makes. With no signal it simply shows no ad, and nothing else changes.

Deleting everything

Uninstalling the app, or clearing its data in Android settings, removes everything. Export your trip first if you want to keep it, since there is no copy held anywhere else to restore from.

Advertising in the TabiLog and TabiPlanner Android apps

The Android builds of TabiLog and TabiPlanner display banner advertisements, served by Google AdMob. This is worth stating plainly rather than burying:

• AdMob is a Google service. To serve and measure ads it may collect device-level information such as an advertising identifier, IP address, device model, operating system and coarse location. That collection is governed by Google's own policy, not by this one.
• Nothing you enter into either app is shared with the ad network. Your budgets, transactions, receipt photographs and household details in TabiLog, and your trips, bookings, locations, costs and notes in TabiPlanner, are never passed to AdMob or to any advertiser.
• Ad content is limited to a Teen rating or lower in both apps, because both are available to people aged 13 and over.
• Paying to unlock TabiPlanner removes its ads permanently. It is a single payment, not a subscription.
• You can reset or limit the advertising identifier in your device's own privacy settings, which applies to every app on the device rather than just this one.
• The web version of TabiLog carries no ads, and neither does this website.
• Neither app shows ads on any screen while you are entering personal information.

Ads are what make it possible to give these apps away. If that trade isn't one you want, the web version of TabiLog is the same app without them, and TabiPlanner's one-off unlock removes them for good.

What is never done, in any app

• Your data is never sold or rented, and never shared with data brokers.
• The contents of your household (budgets, transactions, receipts, health and mobility details) and of your trips (bookings, locations, costs and notes) are never shared with advertisers or any third party, in any app.
• There is no analytics or session-recording product embedded in any app.
• Nothing is used to train anything, or shared with anyone for that purpose.

Children

These apps are used by families, and a budget in TabiLog is often about a child even though it is created and operated by an adult. The apps are intended for adults to use on behalf of their household, and are not directed at children as users in their own right.

Your rights

Under Australian privacy law, and equivalents elsewhere, you can ask what is held about you, ask for it to be corrected, and ask for it to be deleted. In practice all three are available to you directly inside the apps: export gives you everything, editing corrects it, and Delete Account removes it. If you'd rather ask a person, use the address on the support page.

Changes to this policy

If this policy changes in a way that affects you, the date at the top changes and the change is noted on the updates page. Substantive changes will not be made quietly.

Contact

Privacy questions, access requests and deletion requests go to minatostudio26@gmail.com. Everything else is on the support page.