Organizer · last updated 20 August 2026
This policy describes how Organizer, an academic planning application,
handles data on the Android app and on the companion website at
f4rsantos.github.io/organizer. Organizer is a local-first
application. It does not operate a server that stores user content, does
not maintain user accounts, and has no ability to access the content you
create.
The Android app contains no analytics, no advertising software, no crash reporting, and no tracking mechanisms of any kind. It does not upload the content you create, and it does not ask you to create an account.
The app makes one kind of network request of its own, described in Section 3. Aside from that request, and the optional sync described in Section 6, the app does not communicate with any server.
If you choose a ready-made semester preset, such as a university course schedule, the app downloads that preset from a database we operate and checks it for updates when the app opens. If you do not use a preset, the app never contacts this database.
These requests are read-only. The app sends the identifier of the preset being requested; it sends nothing about you, your device, or anything you have created, and it never writes to that database. As with any request over the internet, our database provider receives the network address the request came from. We do not use that address to identify or profile anyone, and we do not combine it with any other information.
The website uses Google Analytics, configured to operate anonymously, to record an aggregate count of page views and the approximate country of origin of visitors. This is the only data collected on the website, and it is not included in the Android app. Specifically:
The resulting data is not linked to any individual and cannot be used to identify a visitor.
Content is stored locally on the user's device and is not transmitted unless the user enables sync as described in Section 6. This content is retained until the user deletes it, clears app data, or uninstalls the app. The user is responsible for exporting a backup before uninstalling if retention of the data is desired.
Sync is disabled by default. If a user enables sync, the user must supply their own Firebase project, using their own Google account, database, and billing arrangement. In this configuration, data is transmitted to infrastructure controlled by the user, not by us. We do not receive this data and have no access to it. The user is the data controller for that Firebase project and is responsible for its security, including the Firestore rules applied to it. The database must not be left publicly readable; the in-app setup guide describes the required configuration.
Organizer offers optional end-to-end encryption. When enabled, data is encrypted on the user's device before it is stored or synced, using a key derived from the user's passphrase. This key is non-extractable and does not leave the device. If a user loses both their passphrase and their recovery code, the corresponding encrypted data cannot be recovered by us or by any other party.
If a user adds a home screen widget, the content it displays, such as task titles and due dates, is copied to standard Android app storage so that it can be shown while the app is closed. Android widgets cannot read encrypted data, so this copy is stored unencrypted on the device regardless of whether encryption is otherwise enabled. This copy is not transmitted and remains on the device. It is deleted when the user locks the app, disables encryption, or removes the widget. A user who does not want an unencrypted copy of their data to exist should not add widgets.
A share link created within the app contains the shared content in encrypted form, encoded into the link itself. Any person in possession of the link is able to decrypt and read that content. Share links should be treated as sensitive and disclosed only to intended recipients.
Because we hold no data about any user, there is no data for us to provide, correct, or delete on a user's behalf. A user may export all of their data from Settings at any time. Clearing app data or uninstalling the app removes all locally stored content completely.
If this policy is revised, the date at the top of this page will be updated. Material changes will be noted in the app's release notes.
Questions regarding this policy may be directed to f4rsantos@gmail.com.