Privacy Policy
Last updated: 19 June 2026
Summary
- Most of your hub content stays on your device — we do not upload your local task, note, calendar, or email database to our servers.
- We collect account and billing data needed to run egocentric.me and process purchases.
- When you sign in or connect Google, Microsoft, or Atlassian, authentication data may pass through our servers briefly; ongoing provider tokens live on your device.
- AI features use your own API keys; content goes directly to the AI provider you choose.
- We do not sell your personal data. We do not use analytics or telemetry at launch.
- We send transactional emails only (such as password reset and important account notices), not marketing newsletters unless you opt in later.
This Privacy Policy explains how Javor Vatchkov (Egocentric) ("we", "us", "our") processes personal data when you use Egocentric software, websites, and related services (the "Service").
Controller: Javor Vatchkov, Wittgensteinlaan 281, 1062 KH Amsterdam, Netherlands, Netherlands. Contact: [email protected].
This policy is published by an individual publisher without a registered company. It is not legal advice. Consider having a qualified lawyer review it before public launch.
1. Scope
This policy applies to personal data we process when you create an Egocentric account, use our websites, download software, purchase a license, or contact support.
It does not apply to third-party services you connect (such as Google, Microsoft, Atlassian, or AI providers). Those services have their own privacy policies.
This policy does not cover information that cannot identify you on its own (aggregated or de-identified data), where permitted by law.
2. What we do not collect
We do not receive or store your local hub database (tasks, notes, calendar entries, and similar content stored in the desktop application's local database) on our servers.
We do not sell your personal information.
At launch we do not use product analytics, advertising trackers, or telemetry.
We do not send your private hub content to our own servers for AI processing. When you enable AI features with your own API key, requests go from your device to the provider you selected.
3. Personal data we collect
Account data: email address, display name, optional avatar, hashed password (if you use email sign-in), account identifiers, and timestamps such as when you accepted these documents.
Authentication and security: sign-in events, session identifiers, IP address and user-agent in server logs, fraud-prevention signals, and records needed to secure the Service.
Purchase data: license status, product purchased, transaction references, and limited billing metadata from Lemon Squeezy or app stores. Payment card details are processed by the payment provider, not stored by us.
Support and feedback: messages you send us, in-app feedback content, and related contact details.
Download events: if you download installers while signed in, we may log that event for security and product operations.
OAuth handoff data: during desktop sign-in or provider connection, we temporarily process OAuth tokens, refresh tokens, and basic profile fields (such as email and display name) so your device can complete authentication. These handoff records are deleted after your device retrieves them or after a short retention window.
Device-side provider data: after connection, provider tokens and synced metadata are stored locally on your device. We do not upload your connected provider content to our servers.
4. Where data comes from
Directly from you when you register, sign in, purchase, or contact support.
Automatically when you use our websites or authentication flows (for example cookies, logs, and device/browser information).
From payment processors and app stores to confirm purchases and entitlements.
From identity providers when you choose Google, Microsoft, Apple, or similar sign-in options, limited to what those flows disclose.
5. How we use personal data
Provide and operate the Service, including accounts, authentication, license verification, and downloads.
Process purchases, invoices, and entitlements.
Secure the Service, prevent abuse, and troubleshoot issues.
Communicate with you about the Service, including transactional messages and important changes to terms or this policy where required.
Comply with legal obligations and respond to lawful requests.
6. Legal bases (EEA/UK)
If you are in the European Economic Area or the United Kingdom, we process personal data on the following bases:
Contract: to provide the Service you request, including account management and purchases.
Legitimate interests: to secure and improve the Service, prevent fraud, and operate our business, balanced against your rights.
Legal obligation: where we must retain or disclose data under law.
Consent: where required, such as optional marketing communications if we offer them in the future.
8. International transfers
We and our subprocessors may process data in countries outside your own, including outside the European Economic Area.
Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.
9. Retention
We keep account data while your account is active and for a reasonable period afterward for security, dispute resolution, and legal compliance.
Billing and tax records may be kept longer where required by law.
OAuth handoff records are kept only briefly unless needed for security investigation.
Server logs are kept for rolling periods appropriate to security and operations, then deleted or aggregated.
Local data on your device remains until you delete it or uninstall the application.
10. Security
We use technical and organizational measures appropriate to the risk, including encryption in transit (TLS), hashed credentials, and access controls.
No method of transmission or storage is completely secure. You are responsible for protecting your device, credentials, and API keys.
11. Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, or object to certain processing, and to data portability.
You may withdraw consent where processing is based on consent, without affecting prior lawful processing.
To exercise rights, contact [email protected]. We may need to verify your identity.
You may lodge a complaint with your local supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (AP).
13. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from children under 16.
If you believe a child has provided us personal data, contact [email protected] and we will take appropriate steps to delete it.
14. Changes to this Policy
We may update this Privacy Policy from time to time. The current version is available at https://egocentric.me/privacy with a "Last updated" date.
Non-material changes. We may make non-material changes by posting the updated policy on our website. Unless applicable law requires otherwise, such changes take effect on the date posted. We are not required to email you about non-material changes.
Material changes. If we make a material change to how we collect, use, or share personal data, we will provide reasonable notice through the Service, on our website, and/or by email where appropriate. Where required by law, we may ask you to accept the updated policy before continuing to use the Service.
15. Contact
Privacy questions and requests: [email protected]
Postal address: Javor Vatchkov, Wittgensteinlaan 281, 1062 KH Amsterdam, Netherlands, Netherlands