Privacy policy

Last updated: November 9, 2026

Data controller

Tiziano Gargani, who runs Framentis as a private individual. Contact:

What data we process

• Account data: email address, password (stored only in encrypted form, unreadable even to us) and, if you add them, first name, last name, motto and preferred language.
• Your content: notes, quick thoughts and categories. Titles, texts and category names are end-to-end encrypted: they are encrypted on your device with a key that only your secret phrase (or your recovery key) can open, and we never receive either. They reach our servers only in unreadable form, even to us. Only technical information remains visible, such as dates, the type (note or quick thought) and which category each note belongs to, without its name. Images and attachments (with Pro) are also encrypted on your device before they leave it: for each file we only know its size.
• Pro subscription (if you subscribe): the payment is handled by Link, Stripe's service, which processes the data it needs (card, email, country for VAT) as an independent controller under its own privacy policy. We never see your card details: we only receive the subscription status (active, cancelled, end date), the chosen plan and Stripe's customer and subscription IDs, to turn Pro on or off for your account.
• Two-step verification (optional): if you turn it on, our provider stores the key that generates your 6-digit codes, used only to check the code when you log in.
• Technical data: the minimum information needed to keep you logged in and to protect the service (for example your IP address, used by our providers for security and abuse prevention).
• Usage data: the days on which you use Framentis and from which kind of device (website, phone, computer or phone app). We also count, anonymously, how many times the app is downloaded.

Why, and on what legal basis

We process this data only to provide the service you asked for: creating your account, storing your notes and syncing them across your devices, and sending you the necessary emails (address confirmation, password reset). The legal basis is the performance of a contract, i.e. the Terms you accept when signing up (Art. 6(1)(b) GDPR).

Statistics. Usage data is used only to understand, in aggregate, how many people use Framentis and on which devices, so we can improve it. We never read the content of your notes, we don't build profiles and we don't share this data with anyone. The legal basis is our legitimate interest in running and improving the service (Art. 6(1)(f) GDPR); you can object by writing to us. For website visits we use Cloudflare Web Analytics, which uses no cookies and does not track individuals.

Who helps us provide the service

We rely on trusted providers that process data only on our behalf:

• Supabase — database and authentication. Data is hosted on servers in the European Union (Frankfurt).
• Cloudflare — website delivery, protection against attacks and anonymous visit statistics (Web Analytics, cookie-free).
• Resend — sending service emails, from servers in the European Union (Ireland).
• Stripe and Link — only for Pro subscribers: payment, receipts and VAT. For the sale, Link acts as an independent controller (stripe.com/privacy, link.com/privacy).

Some of these providers are based in the United States: any transfer of data outside the EU takes place with the safeguards required by the GDPR (for example standard contractual clauses).

Cookies and local storage

Framentis does not use profiling, advertising or analytics cookies. It only uses your browser's or the app's local storage to keep you logged in, remember your language and keep a copy of your notes so you can use them offline. These are technical tools required for the service to work, so no consent or banner is needed.

How long we keep data

We keep your data for as long as your account exists. Payment data and receipts are kept by Stripe and Link for as long as tax laws require. When you delete a note or your whole account, the data is removed from our systems; any backup copies held by our providers are overwritten within a limited technical period.

Your rights

At any time you can access, correct and delete your data, restrict or object to its processing, and obtain a copy of it (portability). You can do much of this yourself in the app, under Account settings: edit your profile, export all your notes and delete your account. For anything else, write to us: . You also have the right to lodge a complaint with your data protection authority (in Italy: garanteprivacy.it).

Children

Framentis is not intended for people under 14.

Changes

If we change this policy significantly, we will let you know in the app or by email.