---
title: "Privacy Policy"
slug: "privacy"
weight: 1
translationKey: "legal-privacy"
---


**Version 1.0 — 13 July 2026**

Tane is published by **Asociación Comunes** (Spain) — <https://comunes.org> —
contact: <info@comunes.org>. Tane is free software (AGPL-3.0); its source code is
public, so everything described here can be verified.

## The short version

- Tane works **without an account**. We don't know who you are.
- Everything you record stays **on your device, encrypted**. We run no servers that
  receive it, and we have no way to read it.
- Nothing leaves your device unless **you** choose to share it (an offer, a message,
  your profile). What you share travels through community-run servers we don't control.
- **No analytics, no ads, no trackers.** Tane collects nothing about you.

## 1. No accounts, no collection by us

Tane does not ask for your name, email, or phone number. There is no registration and
no central Tane server. Your identity in the app is a cryptographic key created on your
device and stored in your device's secure keystore. Asociación Comunes does not collect,
receive, or process your personal data through the app.

## 2. Data stored on your device

Your seed inventory (varieties, quantities, notes, photos), your messages, your
contacts' vouches and ratings, and your keys are stored **only on your device**, in an
encrypted database (SQLCipher). The encryption key lives in your device's system
keystore. Backups you create are also encrypted; you choose where to keep them, and
they never pass through us.

## 3. Data that leaves your device — only when you choose

Nothing is published automatically. Each of these happens only by your explicit action:

- **Offers.** When you offer seeds, the app publishes the offer's title, description,
  optional photo, optional price, and an **approximate area** (a zone of roughly 2–80 km,
  as you configure it — never your address or precise location). Offers are public.
- **Profile.** If you fill it in, your chosen name, bio, and avatar are public.
- **Messages.** Direct messages are **end-to-end encrypted**: only you and the person
  you write to can read them. The servers that carry them see only encrypted envelopes.
- **Vouches and ratings.** If you vouch for or rate someone, that statement is public
  and signed by your key.
- **Sync between your devices.** If you link a second device, your data travels between
  them encrypted so that only your devices can read it.

## 4. Where shared data goes: community relays

Tane's social features use open, community-run servers ("relays"). By default the app
uses a small set that includes `relay.comunes.org` (operated by Asociación Comunes) and
well-known public relays; you can change this list, or empty it to turn the network off
entirely. Relays other than `relay.comunes.org` are **third-party infrastructure**:
their operators decide their own retention and policies, and this policy does not cover
them.

## 5. Deletion — an honest note

You can delete anything local instantly, and you can withdraw an offer at any time.
When you withdraw or delete something you had published, the app asks the relays to
delete it too. Relays we don't operate may keep copies despite that request, and public
posts may have been copied elsewhere while they were visible. **Treat anything you
publish as potentially permanent.** On `relay.comunes.org` we honour deletion requests.

## 6. Device permissions

- **Photos / camera** — only when you attach a picture to a variety, offer, or profile.
- **Approximate location** (optional) — only if you use "set my area from where I am",
  to pick your coarse sharing zone. Tane never requests precise location.
- **Notifications** (optional) — to tell you about new messages.

## 7. Your rights

Because your data lives on your device under your control, you exercise most rights
yourself: read, correct, export, or delete everything from within the app. For data on
`relay.comunes.org`, or any question about this policy, write to <info@comunes.org>.
If you are in the EU, you also have the right to complain to your data protection
authority (in Spain, the AEPD).

## 8. Children

The seed inventory can be used by anyone. The market and messaging features are not
directed at children; by using them you confirm you are old enough to use social
features under the laws of your country.

## 9. Changes

We will update this policy if Tane's behaviour changes, and note the changes in the
app's release notes. The current version always lives at
<https://tane.comunes.org/legal/privacy>, with history in the public repository.
