denderites privacy policy

Last updated: 4 November 2026

denderites is a mind mapper made by AiWindsAdmiral ("we", "us"). This policy explains what the app and our server keep about you, why, who else receives it, how long it is kept, and how to have it deleted. It covers denderites on every platform (Android, the desktop on Linux, Windows and macOS, and the web at denderites.com) and our sync server, server.denderites.com.

In short

• Without a cloud account, your maps stay on your device. We receive nothing from the app.
• With a cloud account, part of the cloud subscription, our server keeps your account and the maps you sync, so that they follow you to your other devices and to the people you share them with. Accounts are not open to everyone yet.
• No ads, no analytics, no tracking. We do not sell your information.
• Your account and its data are deleted when you ask.

On your device

Without an account, everything denderites keeps stays on your device:

• your maps, as files you open and save; on Android, in the app's own storage; on the web, inside the page, until it is closed or reloaded;
• the list of maps you opened recently, your settings, and which commands you use most, so that the command line offers them first;
• the feature requests you write, kept in a file before they are sent.

The app sends none of this to us or to anyone else. It stays until you delete it, clear the app's data or uninstall the app.

With a cloud account

Signing in to a server is optional. On ours it comes with the cloud subscription; until sign-up opens, accounts are made by us on request. When you sign in, our server keeps:

• your account: your user name, which the people you share maps with see; your password, stored only as a salted hash that cannot be turned back into it; and a sign-in token for each app you sign in from, also stored only as a hash;
• the maps you sync, with the history of their changes (who made each change and when), which is how your devices merge their edits;
• who may see each map: the people you share it with, and the labels and rules that decide who sees which branch;
• the messages you write in a map's chat, with your user name and the time;
• the agents you add to work for you (below), and what they do in your maps, under their name;
• the feature requests you send from the app: the text, the app's version, when, and your user name.

Where you are in a shared map, and whether you are editing, is shown to the others in it while you are connected; the server holds it in memory only and never stores it.

On your device, the app keeps your sign-in token (never your password) in your system's keyring, or in a file only you can read where there is no keyring, and a copy of each synced map so that you can work offline.

We use this information only to sign you in, to sync your maps between your devices and with the people you share them with, and to run and protect the service.

Who sees your maps. A map is yours alone until you share it. The people you share it with see it, with your user name on your changes and your messages, and their apps keep a copy of it.

Agents. An agent is a helper, such as an AI assistant or a script, that you add to your account and let into some of your maps. Whatever runs it receives what it reads there, under that service's own terms. Nothing reaches an agent unless you add it and let it in.

Server logs and backups

Our server's logs record connections and errors; we use them to run and protect the service, and delete them after a limited time. Before each update of the server we copy its data, as a backup; backups are deleted after a limited time too.

Who else receives information

• Cloudflare. The site and the sync server are reached through Cloudflare's network, which sees your IP address and passes your connection on to our server, encrypted.
• Google. Google Play delivers the Android app, under Google's privacy policy.
• GitHub. When a feature request cannot reach our server, the app offers to open the project's issue form on GitHub in your browser; nothing is sent unless you send it there yourself, publicly, from your GitHub account. The help also opens the project's pages on GitHub.
• The sites your maps link to. A link in a map opens in your browser, which visits the site it names.

We run our server ourselves. We do not sell or rent your information, we do not use it for advertising, and we do not share it with anyone else unless the law requires us to.

How long we keep it

Without an account: nothing, on our side. With an account: your account and synced data for as long as you have the account, until you ask for them to be deleted. Server logs and backups: for a limited time, after which they are deleted; what you deleted disappears from the backups as they are replaced.

Deleting your account

Write to the contact address on denderites' Google Play listing with your user name. We will confirm that the account is yours, delete it and its data as soon as we can, and tell you when it is done. The account deletion page lists what is deleted and what is kept. Once accounts open to everyone, the app will let you delete yours yourself too.

Your rights

Depending on where you live (for example under the GDPR in the European Union and the United Kingdom, or the CCPA in California) you can ask us to tell you what we hold about you, to correct it, to give you a copy, or to delete it; you can object to how we use it, and you can complain to your data protection authority. Write to the contact address on denderites' Google Play listing.

Where the GDPR applies, we rely on providing the service you signed up for (your account, your synced maps, their sharing and chat), and on our legitimate interest in a secure, working service (server logs, backups, feature requests).

Children

denderites is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has a denderites account, write to us and we will delete it.

Security

Passwords and sign-in tokens are stored on our server only as hashes, your apps keep a token instead of your password, and the app talks to our server only over encrypted connections. No system is perfectly secure, but we keep only what the service needs.

Changes to this policy

When this policy changes, we update the date at the top; for important changes we also tell you in the app.

Contact

Questions about this policy or your information: write to the contact address on denderites' Google Play listing.