Privacy policy

Who is responsible

The controller of your data is Jose Antonio Neto Suárez, Spanish tax ID (NIF) ES29607219D, C/ Manuel Vela 37, 21440 Lepe (Huelva), Spain.

For anything about your data, write to hello@tagaro.app or from the app, in Settings › Help and about › Write to us.

What we keep

Only what Tagaro needs to work:

• Your account: your email, which is how you sign in (no password: you get a code), your name if you give it to us and, if you add it, your date of birth, which is where your thread begins. Also your language, your time zone and your settings.
• Your diary: your moments (the title, the text, the date and time, and whether they matter to you), the places you choose (their name and, if you searched the map, their address and coordinates), the names of the people you were with, your photos, your voice notes and their text, your answers to Tagaro’s questions and what you asked it not to remind you of.
• What Tagaro writes for you, if you use AI: titles, questions, the line for each week, month or year, and short descriptions of your photos so you can find them by searching.
• Your calendar, only if you turn it on: for the events on your iPhone from the last week and the next two months, the title, the place and the time. Never who is going or the notes. That way Tagaro knows what is coming and can ask you later how it went.
• Your iPhone: if you turn notifications on, the identifier Apple and Expo use to deliver them. And the last time you used Tagaro, so it doesn’t notify you while you are using it.
• If you sign up for «Avísame» on tagaro.app: your email, the page’s language and the date. More on this below.
• Technical data: the session of each iPhone you sign in on; if you visit tagaro.app, a browser session, with your IP address and your browser, which expires after two hours; and a log of each AI call (the task, the model, its size and its cost), without what was sent.

Your photos are kept as you upload them. A photo from an iPhone may carry its metadata inside, such as where it was taken; Tagaro doesn’t use it, and the copy that goes to the AI is always sent without it.

Tagaro doesn’t read your location: the places in your moments are the ones you choose.

On your iPhone, the app keeps a copy of your diary so it works offline. It is deleted when you sign out or delete your account.

What for, and on what basis

We use your data only to give you Tagaro: keep your diary, show it to you on your devices, search it, send you the code to sign in, notify you if you ask for it and, if you want, let Tagaro help you with AI. And, if you sign up for «Avísame», write to you the day it’s out. For nothing else. We don’t go into your diary unless it is needed to sort out something you ask us to, or the law requires it.

• The contract (art. 6(1)(b) GDPR): your account and everything needed to keep your diary and show it to you.
• Your explicit consent (arts. 6(1)(a) and 9(2)(a) GDPR), to use AI. What you write may touch on your health or your private life, so AI is only used if you say yes on the «Before you start» screen. You can withdraw it whenever you want in Settings › Privacy and AI.
• Your consent, to read your calendar and for notifications: you turn them on and you can turn them off at any time, in the app or in your iPhone’s settings.
• Your consent (art. 6(1)(a) GDPR), for the «Avísame» list: you sign up yourself, it is only used to write to you the day Tagaro is out and you can leave whenever you like.
• Our legitimate interest (art. 6(1)(f) GDPR): keeping Tagaro secure, preventing abuse, catching errors and knowing what AI costs.

Your diary may contain specially protected data: about your health, your beliefs or your sex life, for example. We keep it because you choose to write it for yourself, and only to show it to you; it only goes to AI with your explicit consent.

AI, only if you want it

Tagaro works without AI. If you choose «No AI for now», nothing of yours goes to the AI providers. You can change it whenever you want in Settings › Privacy and AI; if you turn it off, what Tagaro already wrote stays (you can delete it) and nothing new is sent.

If you use it, each task sends only what it needs, and never your email, your name, your date of birth or the coordinates of your places:

• Giving a moment a title and understanding it (its tone, whether it seems to matter to you, whether it is delicate): its text, what you said in it, your answers, the name of the place, the people and the date and time. It goes to Cerebras.
• Describing a photo so you can find it by searching: the image, reduced and without its metadata, so without where it was taken either. It goes to Cerebras.
• Asking you about a moment or a calendar event: that moment, or the event’s title, place and time. It goes to Cerebras.
• Writing the line for each week, month or year: the moments of that time, without what you asked it not to remind you of. It goes to Cerebras.
• Turning a voice note into text, only when your iPhone couldn’t: the audio. It goes to Groq, which transcribes it with Whisper.

Your voice is turned into text first on your iPhone, with Apple’s speech recognition; if it can’t be done there, Apple does it on its servers, under its own privacy policy. Only if that doesn’t work either, and only if you use AI, does the audio go to Groq.

What is in the bin never goes to AI.

Cerebras and Groq process what we send them only to give us the answer. Under their terms, they don’t use it to train their models and don’t keep it, except for limited technical logs, for a short time, for the security of their service.

Tagaro’s AI makes no decisions about you with legal or similarly significant effects: it writes titles, questions and summaries that you can change or delete. When a moment seems delicate to it (a loss, an illness, a breakup), Tagaro talks less about it for a while. And if it seems to be about hurting yourself, it shows you a help line for your country. The AI decides this and can be wrong; it is not a medical or emergency service, and nobody else is told.

The «Avísame» list

On tagaro.app you can leave your email so we write to you the day Tagaro is out on the App Store. We keep your email, the language of the page you signed up from and the date. You don’t need an account, and the list is kept apart from your diary.

You get two emails at most: one when you sign up, to confirm it, and another the day Tagaro is out. Nothing else: no newsletters, no advertising.

We do it with your consent (art. 6(1)(a) GDPR), which you give by signing up. You can withdraw it at any time with the link in each of those emails, or by writing to us at hello@tagaro.app.

If you leave, your email is off the list within a day. Otherwise, it is deleted 30 days after the launch email. And if Tagaro were never to come out, we would delete the whole list.

Who else is involved

For Tagaro to work, these providers process data on our behalf and only for what we ask of them:

• Laravel Cloud (Laravel Holdings Inc., USA): hosts the server, the database and the files of your diary.
• Cerebras (Cerebras Systems Inc., USA) and Groq (Groq, Inc., USA): the AI, only if you use it, as explained above.
• Resend (USA): sends Tagaro’s emails: the code to sign in and the «Avísame» ones.
• Expo (650 Industries, Inc., USA): carries notifications to Apple. It receives your iPhone’s identifier and the text of the notification, which may be a question from Tagaro about one of your moments.
• Laravel Nightwatch (Laravel Holdings Inc., USA): watches the server for errors and slowness. It receives technical data (which request or task failed and how long it took) and the identifier, name and email of the account involved, not the content of your moments.

Apple also delivers notifications to your iPhone, turns your voice into text when the iPhone can’t do it alone, draws the maps and, when you search for a place, receives what you type to find it. It does so under its own privacy policy.

If you write to us, your message reaches our email with your name, your email and your language, and we keep it as long as we need to help you.

Outside the European Union

Several of these providers are in the United States, so your data may be processed there. We do it with the safeguards the GDPR requires: the provider’s participation in the EU-U.S. Data Privacy Framework when it has it and, otherwise, the European Commission’s standard contractual clauses.

How long

• Your account and your diary, as long as you have the account.
• What you delete goes to a bin and is deleted for good after 30 days, with its photos and voice notes.
• Your calendar events, until 30 days after they end. If you turn the calendar off, Tagaro stops reading it and the ones it had are deleted that way.
• A copy you export, 7 days; then it is deleted.
• A code to sign in is deleted the next day.
• Your email on «Avísame», until 30 days after the launch email. If you leave before, it is off the list within a day.
• The session of an iPhone that doesn’t open Tagaro for six months is forgotten: you will have to sign in again.
• If you delete your account, everything is deleted at once: your moments, those in the bin too, your photos, voice notes, places, people, events and copies. Of the AI log, only what each call cost remains, with nothing that identifies you.

If a server backup still holds something you deleted, it disappears from it when that backup expires.

What you can do

From the app, without asking anyone:

• Take everything with you, in Settings › Your data: a file with your moments, photos and voice notes that opens in any browser and also carries the data as JSON.
• Delete your account and everything in it, in Settings › Your data.
• Correct or delete any moment, photo, voice note, place or person, and your name or date of birth.
• Withdraw your consent to AI (in Settings › Privacy and AI), the calendar or notifications. Withdrawing it doesn’t affect what was done before.
• Ask Tagaro not to remind you of something: a moment, a person, a place or some dates.

And by writing to hello@tagaro.app you can exercise all your rights under the GDPR: access, rectification, erasure, objection, restriction of processing and portability. We answer within one month at the latest.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency, at aepd.es, or to the authority of the country where you live.

Security

Everything travels encrypted between your devices and the server, and access to the server is restricted. You sign in without a password, with a code that expires after 10 minutes, and your iPhone’s session is kept in its keychain. You can lock Tagaro with Face ID, which is checked on your iPhone and never leaves it.

If there were ever a security breach that put your data at risk, we would tell you, and the authority too when required.

Children

Tagaro is not for children under 14. If you are younger, don’t create an account. If we learn that an account belongs to someone under 14, we will delete it.

Changes

If this policy changes in anything important, we will tell you in the app or by email before it applies. The date at the top says since when this version has been in force.