Privacy Policy
Tamsi was called Last Journal until version 2.7.1. This version of the policy changes the app's name and our contact address to support@tamsijournal.com, lists the portable ZIP export and imports, corrects what Android's own backup copies, and adds a note about this website. What we collect hasn't changed. Our previous contact address still reaches us.
1. About this policy
This policy explains what information the Tamsi app ("the app") and its optional cloud backup service handle, why, and what control you have. It is provided by Aldene Villardo ("we", "us").
The short version: your journal lives on your device. We don't show ads, we don't use analytics or tracking, and we don't sell or share your information. If you choose to back up, your journal and photos are encrypted on your device before they are uploaded.
2. What stays on your device
Everything you create — entries, tags, moods, templates, saved searches, photos and settings — is stored on your device. The app works fully without an account, and none of it reaches us unless you sign in and back up.
One thing to know that isn't us: if Android's own backup is switched on for your device, Android copies the app's settings (not your entries or photos) to your personal Google Drive, the same way it does for your other apps. Versions before 2.3.0 also copied your entries and photos. That happens between your device and Google; we never receive it and can't read it. On Android 9 and later it is end-to-end encrypted with your device's PIN, pattern or password. You can turn it off in your device's system settings, under Google backup.
- Photos you attach are resized and re-saved on your device. This removes location and camera details (such as GPS coordinates) from the copy the app keeps. Your original photo in your gallery is not changed or uploaded. A photo you take inside the app is saved the same way, and the temporary file the camera creates is deleted once the photo has been added to your entry.
- App lock uses your device's own fingerprint, face or PIN check. We never receive it.
- Exports (RTF, PDF and the portable ZIP) are created on your device and go only where you choose to send them.
- Imports (from Day One, Obsidian, Markdown files or a Tamsi export) are read on your device. The files aren't sent to us; the entries they create are treated like any other entry.
3. What we handle if you sign in and back up
Signing in is optional and only needed for cloud backups.
| information | why | where |
|---|---|---|
| Email address | Your account; sign-in; verification and password-reset emails; notices about your stored data | Amazon Cognito (AWS) |
| Account identifiers created by our sign-in provider | Link your account to your backups | Amazon Cognito and Amazon S3 (AWS) |
| Password (email sign-in only) | Sign-in. Managed by Amazon Cognito — we never see it | Amazon Cognito (AWS) |
| Google account identifier and email (Google sign-in only) | Sign-in. We don't store your name or profile photo from Google | Amazon Cognito (AWS) |
| Encrypted backups and photos | Restore your journal | Amazon S3 (AWS), United States |
| Backup details — file sizes, dates, how many backups and photos you have | Show your storage use, apply storage limits, keep a limited number of backups | Amazon S3 (AWS) |
Our cloud provider also processes routine technical data needed to deliver the service, such as IP addresses of requests.
4. Encryption
Backups and photos are encrypted on your device before they are uploaded, and stored only in encrypted form. We don't look at their contents.
- By default, the encryption key is protected by your account, so backups work without anything extra to remember.
- With an optional backup password, the key is protected by your password instead, and only someone with the password can read your backups — including us. We can't recover a forgotten password.
5. Subscriptions and payments
Premium subscriptions are sold and billed by Google Play. We never receive your payment details. The app checks your subscription status with Google Play on your device; we don't keep a record of it on our servers.
6. Services we rely on
We don't share your information with anyone for their own use. These providers process it only to run the app, under their own privacy terms:
| provider | what for |
|---|---|
| Amazon Web Services (Amazon Cognito, Amazon S3) | Accounts, sign-in emails, and storing encrypted backups — in the United States |
| Google Play (Billing) | Subscriptions and payments. The Google Play Billing library sends Google its own diagnostic information about purchases |
| Google (Sign-In) | Only if you choose to sign in with Google |
| Google Play and Android | Crash reports and app statistics that your device shares with developers if you have allowed it in your device settings |
| Android Backup (Google Drive) | If Android's backup is on for your device, your device copies this app's data — including entries and photos — to your own Google Drive, end-to-end encrypted with your screen lock on Android 9 and later. We don't receive it, can't read it, and don't control it; turn it off in your device settings |
We don't use advertising, analytics or tracking tools, and we don't sell your information.
This website. tamsijournal.com uses no cookies, analytics or scripts. GitHub, which hosts it, keeps standard server logs (such as IP addresses) to run and protect its service.
7. Permissions the app asks for
| permission | used for |
|---|---|
| Camera | Taking a photo to attach to an entry |
| Notifications | Reminders, and notices about backups or your subscription |
| Alarms and reminders; run at startup | Delivering reminders on time, and restoring them after your device restarts |
| Network state | Knowing when a backup or restore is possible |
Photos you choose from your gallery are opened through Android's photo picker, which gives the app only the photos you select.
8. How long we keep it
- On your device: until you delete it or uninstall the app.
- Backups: until you delete them, until they're replaced by newer ones under the backup limits, or until you delete your account.
- Photos in cloud storage: until you remove them ("Free up space") or delete your account.
- After a subscription ends, or if an account is inactive, stored data may eventually be removed as described in our Terms of Use, always with at least 30 days' notice by email.
- Your account: until you delete it.
9. Your choices and rights
- Use the app without an account — your entries and photos stay on your device.
- Delete backups in Backup Management.
- Delete your account in Settings. This permanently deletes the backups, photos and encryption keys stored for your account, and then the account. It doesn't touch your device.
- Ask us for a copy of the information we hold, a correction, or deletion by contacting support@tamsijournal.com. We'll respond within 30 days. If a request is unusually complex and needs longer, we'll tell you within those 30 days and take at most 60 days in total.
If you're in the EU, UK or European Economic Area: we process account and backup information to provide the service you asked for (performance of a contract). You have the right to access, correct, delete, restrict or object to processing, to data portability, and to complain to your data protection authority. Your information is stored in the United States.
If you're in California: we don't sell or share personal information, and you have the right to know, delete and correct the personal information we hold.
10. Children
The app isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has created an account, contact us and we'll delete it.
11. Security
We use encryption on your device, secure connections, and access-controlled cloud storage where each account can only reach its own data. No system is completely secure, so we can't guarantee absolute security — which is why the optional backup password exists for anyone who wants their backups readable only by them.
12. Changes to this policy
We may update this policy. For significant changes we'll tell you in the app or by email before they take effect. The date below shows when it last changed.
If we ever add optional usage statistics to help us understand which features are used, they will be off unless you turn them on, will never include anything you write or any photo, can be turned off at any time, and we will update this policy before introducing them.
13. Contact
Questions or requests: support@tamsijournal.com.
Effective: 22 October 2026. It replaces the version effective 15 September 2026.