Privacy policy
Last updated 15 October 2026
The short version
- Tiver works without an account. Until you turn on sync, your tasks, habits, notes and plans stay on your device, and we never receive them.
- If you turn on sync, your data is encrypted on your device before it is sent. Our sync server stores it but cannot read it.
- We do not use analytics, advertising, trackers or third-party crash reporting, and we do not sell or share your data.
- You can export your data, back it up, and delete your sync account at any time.
1. Who we are
Tiver is made by Ali Fadhel, an individual based in Ontario, Canada ("we", "us"). We are responsible for the personal information described in this policy. You can reach us at support@tiver.ca.
2. What this policy covers
This policy covers the Tiver Android app, the Tiver web app at app.tiver.ca, the optional sync service at sync.tiver.ca (together, "Tiver"), and this website at tiver.ca.
3. Data that stays on your device
Everything you put into Tiver (tasks, projects, habits and their logs, time blocks, notes, journal entries, attachments, tool data such as water, prayer times, groceries and alarms, and your settings) is stored on your device. On Android it is kept in the app's private storage, with an app lock you can turn on. In the web app it is kept in your browser's storage, encrypted. We do not receive any of it unless you turn on sync.
You can export your data or create an encrypted backup from Settings at any time. Backups are written to a place you choose; we never receive them.
Android permissions
Tiver asks for a permission only when you turn on the feature that needs it:
- Notifications and exact alarms, for the reminders and alarms you set.
- Calendar (read), to show your calendar events in your day. Events are read on your device and are never sent to us. A note you attach to an event is part of your notes and syncs like any other note.
- Do Not Disturb access, if you want focus mode to silence your phone. You grant this yourself in Android settings.
- Biometrics, to unlock the app with your fingerprint or face. Your biometric data is handled by Android and never reaches Tiver.
- Internet, used only to talk to the sync service when sync is on.
Prayer times are worked out on your device from the location you enter. Tiver does not use your device's location services.
4. The sync service
Sync is optional. It keeps your phone and your browsers up to date with each other. When you turn it on, your data is encrypted on your device with keys that only your devices hold, and only then sent to our server.
What the sync server stores
| Stored | What it is |
|---|---|
| Your encrypted data | Your records and attachments, encrypted. Attachments are padded to standard sizes. We cannot read the content. |
| Account and device identifiers | A random account ID, an ID and a public key for each phone and browser you connect, and when each device last synced. |
| Device log | A signed record of which devices and passkeys belong to your account and when they were added or removed, so your devices can check each other. |
| Passkey details | If a browser uses a passkey, the passkey's public key and credential ID. Your passkey itself stays with your browser or password manager. |
| Change metadata | For each change: its size, when it arrived, and which device made it. This lets your devices detect missing or altered data. |
From what it stores, the server can tell how much data you have, when you sync and how many devices you use. It cannot see the content of your tasks, habits, notes or anything else you write.
When you create a sync account, Tiver shows you recovery words. They are the key to your account. We never receive them. If you lose them and every device, we cannot recover your data for you.
Network information
When your device connects to the sync service, the web app or this website, our hosting provider (Cloudflare) processes your IP address and basic request information to deliver the connection and protect the service from abuse. We do not use this information to identify you, profile you or track you across sites.
5. This website and the web app
This website sets no cookies and runs no analytics or third-party scripts. The web app uses your browser's storage only to keep your data and keys on your device, and uses no cookies for tracking. If you use a passkey, your browser or password manager handles it under its own privacy terms.
6. How we use information
We use the information described here only to provide Tiver: to store and deliver your encrypted data between your devices, to keep the service secure and working, and to respond if you contact us. We do not use it for advertising, we do not build profiles, and we do not sell, rent or share it, except with the service providers below and where the law requires.
7. Service providers and where data is stored
- Cloudflare, Inc. hosts this website, the web app and the sync service, and stores the encrypted sync data and its backups. Cloudflare may process and store this data in Canada, the United States and other countries where it operates. Information stored outside Canada may be accessible to the courts and authorities of those countries under their laws.
- Google Play distributes the Android app. When you download it, Google handles that under its own privacy policy.
8. How long we keep it
- Encrypted sync data is kept while your sync account exists.
- When a record changes, its previous encrypted version is kept for 30 days, so you can restore it from Settings.
- The service keeps encrypted backups for disaster recovery for up to 90 days.
- You can delete your sync account from the app. With your recovery words it is deleted straight away; from a device, after a 7-day waiting period you can cancel. Deletion removes your data from the live service at once, and it is gone from backups within 90 days.
9. Your rights
You can see, correct, export and delete your data yourself in the app, at any time, without asking us. Under Canadian privacy law you also have the right to ask us what personal information we hold about you and to have it corrected, and to withdraw your consent by turning off sync and deleting your sync account. Write to support@tiver.ca and we will reply within 30 days. Because your synced data is encrypted, the most we can usually show you is the metadata described in section 4.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
10. Security
Your synced data is encrypted on your device with modern, published encryption (XChaCha20-Poly1305 for content, HPKE for keys, Ed25519 signatures), and every device checks the others' changes. Connections use HTTPS. No system is perfectly secure, but with end-to-end encryption a breach of our server would expose encrypted data and the metadata above, not your content. If we learn of a breach that creates a real risk of significant harm, we will notify you and the Privacy Commissioner as the law requires.
11. Children
Tiver is not directed at children under 13, and we do not knowingly collect personal information from them. If you are under the age of majority where you live, use Tiver with a parent or guardian's permission.
12. Changes to this policy
If we change this policy, we will post the new version here and update the date at the top. If a change materially affects how your information is handled, we will tell you in the app before it takes effect.
13. Contact
Questions or requests about privacy: support@tiver.ca.