Tertibo — Privacy Policy

The governing legal text is English. This version is the source of record.

Last updated: 20 October 2026

Tertibo ("the app", "we", "us") is operated by Alavna LLC, 113 Christine Ct, Chapel Hill, NC 27516, United States. This policy explains what we collect, why, and the choices you have. The current version always lives at https://tertibo.com/privacy. Contact: info@tertibo.com.

What we collect

• Account data: your name, email address, and account identifier from Google Sign-In.
• Content you log: everything you type, dictate, or photograph in the app. By the nature of a life logger this can include sensitive information you choose to record — food and calories, medications, injections and other health events, expenses, activities, moods, and notes. Photos you attach (e.g. meals) and files you import (CSV, Excel, PDF) are stored with your account.
• Profile facts: when you state a durable fact about yourself in chat (e.g. weight, height, birth year, sex, city, occupation, family details, smoking/drinking, diet, activity level), the assistant saves it to your profile so estimates improve. Your profile is fully visible, editable, and clearable in Settings → Profile — nothing is kept invisibly.
• Chat history: your conversation with the assistant, and archives created when you clear a chat (deletable).
• Usage and diagnostics: per-day request counts and processing-cost totals (to enforce fair-use limits), and crash reports via Firebase Crashlytics.
• Voice: dictation is transcribed on your device by the system speech recognizer; only the final text you choose to send reaches our servers.
• Waitlist: if you request early access from tertibo.com, we store your email address, language, and which tables you want to start with, only to contact you about Tertibo. Ask info@tertibo.com to delete that request.

We do not show ads, do not sell your personal data, and do not share it for marketing.

How we use it

To provide the app (parse your entries, organize them into tables, show your history and summaries), to secure it and prevent abuse (authentication, app attestation, per-user daily limits), to contact waitlist requesters about Tertibo, and to fix crashes.

AI processing

• Default: your messages and photos are processed by Google Vertex AI (Gemini) on Google Cloud, which contractually does not use customer data to train its models.
• AI providers: Tertibo selects an allowlisted AI provider through its server-managed routing policy. Message text and any supported attachments are sent only to the provider selected for that request, under that provider’s terms.
• Live lookups: to answer questions like "what does a footlong cost", the assistant may run a web search with a short query derived from your message (e.g. "Subway footlong prices"). The query contains only what is needed for the lookup — never your name, email, or account identifier.
• On-device (Labs): some messages can be handled entirely by an on-device model and never leave your phone.

Do not log information you are not comfortable processing this way.

Optional calendar and task connections

You can choose to connect Google Calendar or Google Tasks separately from signing in to Tertibo. When you connect, Tertibo reads the connected account identity and the calendars or task lists needed for you to choose sources. Selected calendar events are used to display your schedule and avoid scheduling over busy time. If you grant event-management permission and select Manage for a writable calendar, Tertibo sends only the event changes you review and save to Google Calendar. Such changes can notify event guests through Google. Google Tasks access is read-only.

When you choose tasks or reminders to import, Tertibo saves the reviewed task content, source information and duplicate-prevention records to your Tertibo account in Firebase/Google Cloud. Imports are independent copies: completing or deleting a Tertibo copy does not complete or delete its Google source. A source date without a time is retained as source information rather than converted into an invented appointment.

Connection choices and unfinished import or calendar-change recovery information may be stored on your device so interrupted actions can be checked safely. Google’s sign-in SDK manages Google authorization credentials; Tertibo uses access tokens in memory for Google requests and does not send those tokens to its task-import backend. Disconnecting Google in Tertibo stops these connections and keeps the tasks you imported. To revoke Google’s authorization itself, use your Google Account’s third-party access controls. Delete imported Tertibo records using the app’s existing deletion controls; disconnecting alone does not delete those records.

Calendar display, reviewed source changes and selected imports do not require an AI call. If you later select imported tasks for AI planning or include their content in an AI request, the selected task information is processed under the AI-processing practices described above. For example, AI replanning can send the selected task title, estimate, priority and deadline information to the configured AI service. Google-derived information is not used for advertising or marketing.

Where your data lives

Google Firebase and Google Cloud (United States). Data is encrypted in transit, and access is restricted to your own account by server-side security rules.

Retention and deletion

Your data is kept until you delete it. You can delete individual entries, tables, chats, and your profile in the app. Settings → Delete account permanently and irreversibly deletes your account and all associated data, usually within minutes. Crash reports expire automatically (90 days). You can also request deletion by email — see https://tertibo.com/delete-account.

Your rights

You can access, correct, export (Settings → export), and delete your data in the app at any time. Depending on your location you may have additional rights (EU/UK GDPR: access, rectification, erasure, portability, objection — our legal bases are performance of contract for providing the service, legitimate interests for security, and consent for optional AI providers; California CPRA: we do not sell or share personal information). To exercise any right, use the in-app controls or contact info@tertibo.com. You may also lodge a complaint with your local data-protection authority.

Children

Tertibo is not directed at children and must not be used by anyone under 13 (or the higher minimum age in your country).

Changes

We may update this policy. The current version, with its date, is always at this URL; material changes will be highlighted in the app.

Contact

info@tertibo.com · Alavna LLC