Draft — needs review by a legal professional before publishing. Items in [brackets] are set by the owner.

Privacy Policy — Yalmio

Last updated: 16 October 2026 · Version 2026-10-16

Who we are

Yalmio is an app to organize lists, tasks, appointments and files for one person or a group. It is run by paymentery.com; contact [email protected].

What we collect

• Account data: name, email, a one-way hashed password (or your account identifier at Apple, Google or Facebook if you sign in with them), language and time zone.
• Content you add: lists, items, comments, appointments, files and their notes.
• Device data: device name, type and last use, so you can see "Devices & sessions" and end any session.
• What we do not collect: no ads, no cross-app or web tracking, no advertising ID, no location, no contacts, and no AI reading your content. Smart add and list search run on your device.

Why we use it

To run your account, sync your content across your devices and with the people you share with, send verification codes, prevent abuse and handle reports. We do not sell your data or use it for advertising.

Who it is shared with

• People you choose: members of your spaces and people you share a file or folder with, according to their roles. The app shows "who sees this" before you share.
• Service providers working only for us: hosting and file storage with netcup [country], email delivery [provider], and sign-in services (Apple, Google, Facebook, Google Firebase) when you use them.
• Authorities when the law requires it.

Reminders and notifications

Reminders are scheduled on your device. The lock screen shows "Yalmio" without details.

Retention

• Content stays while your account exists.
• Deleted items stay in the trash for 30 days, then are deleted for good with their files.
• When you delete your account: your private space, your files and the files you uploaded to shared spaces are deleted immediately; your items and comments in shared spaces stay as "deleted user"; spaces you own are offered to a member or deleted after 14 days.
• [Retention of internal server backups after deletion — to be set with hosting.]

Your rights

In the app you can change your language, export your lists, tasks, appointments and files, end device sessions, and delete your account permanently (in the app or on the web page https://yalmio.paymentery.com/delete-account). For anything else, email [email protected].

Security

Connections are encrypted in transit (TLS) and every request is checked against your permissions on the server. Encryption is not end-to-end: our servers can technically read content to run the service; we only look at it to handle a report, at your request, or when legally required.

Children

The app is not directed at children under [13] and we do not knowingly collect their data.

Applicable law

We follow the laws that apply to personal data processing in [country], such as [Saudi Arabia's Personal Data Protection Law] where applicable.

Changes

If this policy changes materially, we ask you to accept the new version in the app.