Tavula Privacy Policy
Last updated: 2026-10-07
The operator of Tavula (the "App") and the official website attavula.app (the "Site") ("we") respects your privacy and establishes this Privacy Policy as follows.
1. Information the App Collects
The App does not send your board images, memos, or arrangement data off your device.
Data the App stores (captured images, text memos, card layout, workspace configuration, view state, your Pro purchase record and today's OCR usage count, an identifier generated on the device, and the locations of files you link by drag and drop) is kept only on your device:
macOS (Mac App Store version): ~/Library/Containers/app.tavula.mac/Data/Library/Application Support/Tavula/ Windows (Microsoft Store version): %AppData%\Tavula\
In the Windows version, activity logs are also stored in the Logs\ folder inside that directory. If you choose "Enable text recognition", a copy of the Windows text recognition library is stored in %LOCALAPPDATA%\Tavula\oneocr\ (making this copy does not connect to the internet).
Because of how Windows runs Store apps, if these folders (%AppData%\Tavula\ and%LOCALAPPDATA%\Tavula\) did not exist on the PC yet, the actual files are kept inRoaming\Tavula\ and Local\Tavula\ inside %LOCALAPPDATA%\Packages\336YuyaMiyanogawa.Tavula_7jdm0t12v4y0m\LocalCache\. The App still sees them at the locations above (Microsoft’s explanation).
These files exist only on your local file system. Neither we nor any third party can access them through the App.
The only network request the App itself makes is an HTTP GET forhttps://tavula.app/version.json when you choose "Check for Updates"in the Help / About screen. It contains no board data or images. By the nature of the connection, your device's IP address and similar connection data reach the Site's hosting provider, Cloudflare, Inc. In the Mac App Store version, purchasing or restoring Pro and rating prompts go through Apple's StoreKit and are handled by Apple; that information does not reach us. In the Microsoft Store version, purchasing or restoring Pro goes through the Microsoft Store and that information is handled by Microsoft (Microsoft Privacy Statement). There are no automatic update checks, no telemetry, and no analytics.
2. OS Permissions Used by the App
| Permission | Purpose | OS |
|---|---|---|
| Screen capture | Capture the screen when you invoke Window / Monitor / Region capture | macOS / Windows |
| File access (on export) | Save images to the location you choose via Export | macOS / Windows |
| File read (on drag and drop) | Read image files you drop; for linked cards, remember their location | macOS / Windows |
| Clipboard read (on paste) | Read clipboard images when you paste | macOS / Windows |
| File write (when enabling OCR) | When you choose "Enable text recognition", copy the Windows text recognition library to %LOCALAPPDATA%\Tavula\oneocr\ | Windows |
These permissions are exercised only when you explicitly invoke the corresponding feature.
3. The Website
The Site is a static information page. We do not use advertising SDKs, tracking cookies, or embedded tracking pixels on the Site.
The Site is hosted on Cloudflare Pages by Cloudflare, Inc. When you access the Site, Cloudflare processes connection data such as IP addresses (Cloudflare Privacy Policy). We do not use such logs to identify individuals.
Analytics (Cloudflare Web Analytics)
To understand page views and page performance, the Site uses Cloudflare Web Analytics, provided by Cloudflare, Inc. When you open a page on the Site, Cloudflare's measurement script (static.cloudflareinsights.com) is loaded and your browser sends the following to Cloudflare:
- Information sent: the URL of the page viewed, the referrer, and page performance measurements such as load time (values from the browser's Performance API, including Core Web Vitals)
- Recipient: Cloudflare, Inc.
- Purpose: to understand the Site's page views, referrers, and loading speed, and to improve the Site
In the Cloudflare Web Analytics dashboard we can see only page view and visit counts, aggregated by country, device type, browser, operating system, referrer, and page. We do not receive individual visitors' IP addresses through this measurement.
According to Cloudflare's documentation, the measurement script does not use browser storage such as cookies, localStorage, sessionStorage, or IndexedDB, and does not fingerprint individuals via their IP address, User Agent string, or other data. Cloudflare also states that the IP address received with the measurement data is discarded at the nearest Cloudflare data center and is not stored (Cloudflare RUM beacon,Core Web Vitals).
If you block scripts from static.cloudflareinsights.com (for example, with a browser extension), this data is not sent. The Site remains fully viewable.
The Site offers no user accounts or contact form. We accept inquiries by email at[email protected].
4. Disclosure to Third Parties
We do not provide your images, memos, or arrangement data to third parties; we have no means of receiving them.
5. Information We Receive Through Inquiries
When you contact us by email, we receive your email address, your name (if provided), and the content of your inquiry, and use them only to reply to you and to investigate problems. Requests for disclosure, correction, suspension of use, and similar requests are accepted at[email protected].
6. Cookies and Tracking
The App does not use cookies, tracking pixels, advertising identifiers, or other tracking technologies. The Site has Cloudflare Bot Fight Mode enabled to counter abusive automated traffic. As a result, a Cloudflare check script is inserted into the Site’s pages, and Cloudflare sets security cookies (such as cf_clearance) in your browser. According to Cloudflare, cf_clearance records that a check was passed so that the same check is not repeated, and these cookies are strictly necessary to provide the service (Cloudflare Cookies). We do not receive the contents of these cookies. The measurement script described in Section 3 does not use cookies.
7. Analytics and Telemetry
The App does not send crash reports, usage analytics, or telemetry. No third-party SDKs such as Google Analytics, Firebase, Sentry, or Mixpanel are embedded. The Site uses Cloudflare Web Analytics as described in Section 3 and includes no other analytics tags.
8. Children's Privacy
The App is not directed at children under 13. Because the App transmits no personal information, we cannot collect personal information from any user, including children, via the App.
9. Data Deletion
Quit the App, then delete the following directory to erase the data described in Section 1:
macOS (Mac App Store version): ~/Library/Containers/app.tavula.mac/Data/Library/Application Support/Tavula/ Windows (Microsoft Store version): %AppData%\Tavula\ and %LOCALAPPDATA%\Tavula\ (if they are kept inside %LOCALAPPDATA%\Packages\336YuyaMiyanogawa.Tavula_7jdm0t12v4y0m\LocalCache\ as described in Section 1, Roaming\Tavula\ and Local\Tavula\ there)
On Windows, files kept under LocalCache are deleted by Windows when you uninstall Tavula (Microsoft’s explanation).
10. Changes to This Policy
If we change this Policy, we will post the new version on this page and update the "Last updated" date. Significant changes may also be noted in store release notes.
11. Contact
- Email: [email protected]
- Operator: Inspiration Life (trade name of a sole proprietor)
- Address: Dai-2 Kyoto Bldg. 402, 227 Daikoku-cho, Higashi-iri Aburakoji, Shichijo-dori, Shimogyo-ku, Kyoto 600-8223, Japan
- Our name, the purposes of use of personal data we hold, and the procedure for requests for disclosure and other requests will be provided without delay upon request to the email address above (Article 32(1) of Japan's Act on the Protection of Personal Information).