privacy policy

last updated: july 2026

shizumu is built to see as little of you as possible. your writing lives on your device. this policy covers the shizumu app (android, windows, linux), the shizumu.app website, and the hosted sync service. it explains the small amount of data they do handle.

who is responsible

the data controller is khadija el mestar, an individual sole proprietor based in morocco. contact: hello@shizumu.app.

your writing

your pages, pins, and trails are stored locally on your device. if you turn on hosted sync, your writing is end-to-end encrypted before it leaves the device. we store only encrypted blobs. we cannot read, search, or recover the contents. if you self-deploy your own relay, your writing never touches our servers at all.

what we collect

what we do not do

no advertising. no selling or sharing your data. no third-party trackers or cookies on the marketing site. no reading your writing. shizumu is not directed at children under 13.

app permissions

shizumu asks for a permission only when a feature needs it. camera — only to scan a QR code when pairing devices for sync; no images are captured or stored. notifications — only to tell you when an export finishes or sync needs attention. internet — used by sync only when you turn it on.

retention

we keep your account and encrypted sync data while your account is active. when you delete your account, the associated encrypted data is removed from the hosted relay. analytics are aggregate and not tied to you.

your rights

you can ask us to access, correct, or delete the personal data we hold (your account email and plan record), or to export it. email hello@shizumu.app and we will respond.

changes

if this policy changes, we will update the date above.