Data

Where your plans live

You choose where each plan is saved. Start free in your browser or the app. Read your own files and calendars for free and add a one-time purchase to write to them. Choose Business for shared plans stored with us, or Server on your organisation’s own network.

Free in the browser or the app

A roadmap in the web app at app.tidigar.com stays in that browser's own storage on your device. In the apps for iPhone, iPad and Mac, it stays in your own iCloud Drive, or on the device when iCloud is not available. Tidigar stores nothing: there is no account, and we never receive your plans.

A share link or an embed carries the plan in the part of the address that browsers never send to a server. Anyone who has the link can read the plan, so share it the way you would share the plan itself.

Files and calendars in the Apple apps

The optional Files and calendars purchase lets you write a roadmap in a calendar or in a roadmap file where it lies, for example in iCloud Drive, OneDrive or Dropbox. The calendar or file stays with the service you chose, under that service's terms, and the app reads and writes it from your device. Tidigar stores nothing: we never receive your plans. Apple handles the purchase, and we do not learn who you are.

Tidigar Business

Business keeps your organisation's plans on our servers, so they open in browsers and the native apps and colleagues see each other's changes within seconds. Here Hamacher Software stores your data, as processor for your organisation:

• Your account: email address, name and picture, any Gravatar address, the ways you sign in and your sessions. Hamacher Software is the controller for account, sign-in and billing data; the organisation is the controller for its plans and membership data.
• Your organisation: its name, picture, members, invitations and roles.
• Your plans: the current version of each plan, earlier versions for 30 days, deleted plans in the trash for 30 days, and their thumbnails.
• Your subscription: its status and number of seats. Stripe handles payment details, invoices and VAT; we never see card numbers.

Cloudflare, our hosting provider, runs the service. Persistent account and organisation databases are stored in the EU; global request handling, security metadata, email delivery and support may involve other countries. Business plans and pending edits can also be kept on your devices for offline work. Owners can download the organisation's plans, with their earlier versions, at any time, and every member can download their own account data. If a subscription ends, the plans become read-only and can still be downloaded; subscription-end deletion is due after 90 days, with at least 14 days' email notice, and waits if that notice is delayed. Owners can request earlier deletion. Recovery copies expire within 30 days after deletion; exported files and permitted local drafts remain under your control.

A link to a Business plan opens it only for members of its organisation, and to anyone else it says only that it leads to a plan in Tidigar Business. If an owner turns on previews of plan links, anyone who has a link, and the chat app that shows it, such as Slack or Teams, sees the plan's name and picture.

Business uses your Google, Microsoft or GitHub profile picture when available if you have not chosen a picture. Apple does not provide one. Otherwise, Business checks for a public Gravatar picture using a hash of your email address when you first sign in without a chosen picture. You can remove or replace it and stop further lookups in Account and profile.

Signing in with Google, Microsoft or GitHub, where configured, is optional. The provider tells us the account's identifier, email address and, where supported, profile picture, and we never receive your password there.

You can also add a passkey to your account and sign in with it instead of an email code. We keep only its public key and details such as its name and when it was last used; your fingerprint, face or device code never leaves your device. Your account lists your passkeys and the devices where you are signed in, and you can remove a passkey or sign out a single device there.

Tidigar Server

Tidigar Server is the edition for your organisation's own network: plans and accounts stay on your server, with no activation, telemetry or contact with Hamacher Software during operation. You receive a container, Docker Compose, an installation tool for your existing plans and a backup script that you run yourself. See Tidigar Server for the installation, identity-provider requirements and permanent organisation license.

More

The privacy policy describes the personal data we handle on our websites and in the apps. The data processing agreement covers the organisation's Business data, subprocessors, security and deletion. Questions go to privacy@tidigar.com. Prices are on the pricing page.