Privacy policy

The Terra Board desktop app keeps your boards on your own computer. Nothing leaves it unless you use a feature that needs the internet, such as Terra Cloud. The Android app and the iPhone and iPad app show your Terra Cloud boards. You can also choose to send error reports and an anonymous install count; both are off until you say yes. This page explains each of those cases.

Last updated: 7 November 2026

Who is responsible

Terra Board is a private project. The controller under the GDPR is Anton Rylin, Vienna, Austria. Email: montiesprache@gmail.com. Full details are in the Impressum.

This website

The website sets no cookies and loads no analytics, tracking scripts, external fonts or embedded content. It is hosted on GitHub Pages by GitHub, Inc. (USA). When you open a page, GitHub's servers process your IP address and technical request data to deliver the page and keep the service secure (Art. 6(1)(f) GDPR). See the GitHub Privacy Statement. GitHub transfers data to the USA under the EU–US Data Privacy Framework and Standard Contractual Clauses.

Links to GitHub, Discord and other sites take you to those services; their own privacy policies apply there.

The app on your computer

Your boards, images and settings are stored on your computer (Windows: %LOCALAPPDATA%\Terra Board\Library; Linux: ~/.local/share/Terra Board/Library). We have no access to them. The app contains no advertising and no analytics. It does write the errors it runs into to a log file on your computer (logs/errors.log in the Library folder), cleaned as described under Error reports and install count; that file stays on your computer unless you choose to send error reports.

The Android app

The Android app works with Terra Cloud: you sign in, and it shows and edits the boards in your account (see Terra Cloud below). It keeps a copy of them in the app's private storage on your phone, so they open without internet; other apps can't read it, and it is not included in Android backups. Signing out or deleting your account deletes that copy, and so does uninstalling the app. The app contains no ads, no analytics and no crash-reporting service, and it sends no error reports or install count (the optional reports below are sent by the desktop app only). It asks for internet access and, for a short vibration when you move a toolbar tool, the vibration permission; nothing else.

The iPhone and iPad app

The iPhone and iPad app works with Terra Cloud in the same way: you sign in, and it shows and edits the boards in your account (see Terra Cloud below). It keeps a copy of them in the app's private storage on your device, so they open without internet; other apps can't read it. Signing out or deleting your account deletes that copy, and so does deleting the app. The key that protects your saved sign-in is kept in the iOS Keychain, readable only by this app and only on this device; it is not included in backups or iCloud.

The app contains no ads, no analytics, no tracking across other apps or websites and no crash-reporting service, and it sends no error reports or install count. It has no AI features and sends nothing to AI services. It asks for the following only when you use the matching feature: the camera (to add a photo or video you take to a board), the microphone (to record a voice message on a board) and permission to save pictures you export to your Photos. Photos and files you pick yourself are added to the board you choose and, like everything else on it, go to Terra Cloud.

When the app goes online

Terra Cloud (sync and sharing)

Terra Cloud is off on your computer until you sign in in Settings → Account; the Android app and the iPhone and iPad app ask you to sign in first. There are no passwords: you sign in with a code we email you, or with your Google or Microsoft account (only test accounts we create ourselves, for example for app-store review, have a password). While you use it, the following is stored on our server:

• Your account: your email address, how you signed in (email code, Google or Microsoft) and when. With Google or Microsoft, we receive your email address and the name on that account; we never see your Google or Microsoft password.
• The boards, folders and objects you sync or share, with their images and files.
• Your display name and, if you add them, a profile picture and an entrance song.
• The computers and phones you are signed in on: each device's name (on an Android phone, its model; on an iPhone or iPad just "iPhone" or "iPad"), the Terra Board version, when it was first added, when it signed in and when it was last used, the IP address the server saw on its latest start and the approximate town looked up from that address (see "Device location" above). The app shows this list only to you, in Settings → Account, so you can spot a device you don't recognise and remove it.
• While others are on a shared board with you: your cursor position and current view, sent live to them and not stored.

People you share a board with can see that board, your display name, profile picture and cursor. They don't see your email address. Basis: Art. 6(1)(b) GDPR, because sync and sharing are the service you asked for.

Inviting people. You can invite someone to a board or folder by typing their exact email address, or give out an invite code. There is no way to search for people or to find out whether an email address has an account: the app answers "Invitation sent" either way. For invitations and codes the server stores:

• An email invitation: the address you typed, the board or folder, what they can do (view or edit), who invited them and when. Only you (and the admins of a team the board belongs to) see the address. It is deleted when they accept or decline, when you cancel it, or after 30 days.
• One email to the invited address, sent once through Brevo, saying who invited them to what (with your display name and the email address you sign in with, so they can tell who it is from) and that they can accept or decline in Terra Board. No reminders, no marketing, no tracking. If they don't answer, the invitation simply expires.
• If someone declines and blocks you, a note that they blocked you, so later invitations from you are dropped. It stays until they unblock you in Settings → Cloud sync.
• Invite codes: what they let people do, how long they work (1, 7 or 30 days), how many people may use them and how many did. Codes are deleted one day after they expire.
• When a code needs your approval: who asked to join, with which code and when. Requests are deleted when you approve or decline them, or after 30 days.
• For each person with access: how they got in (invited by email, joined with a code, or an approved request) and who let them in, shown to the owner in the Share dialog.

The people on a board see each other's display names, not email addresses. An invited person sees your display name, the board's or folder's name and its owner before they accept; the invitation email also shows your email address. The Share dialog says so next to Invite. Basis: Art. 6(1)(b) GDPR for the invitation you asked us to deliver; for the invited person, Art. 6(1)(f) GDPR (our and your legitimate interest in letting you invite them), limited to the one email and the 30 days above.

The server runs on Supabase (Supabase, Inc., USA) in the EU (Ireland). Sign-in codes and invitation emails are sent through Brevo (Sendinblue SAS, France). Both process data on our behalf under data processing agreements; for Supabase these include Standard Contractual Clauses. If you sign in with Google or Microsoft, their own privacy policies apply to that sign-in. Data is sent encrypted (HTTPS).

How long it is kept: until you delete it. "Remove from cloud" deletes a board's content. Delete account in Settings → Account deletes everything at once: your cloud boards with their files, your shares, your list of computers and your sign-in. People you shared with lose those boards; the boards on your computers stay. Signing out or turning sync off keeps your cloud data. Expired invite codes are deleted automatically after one day; unanswered invitations and join requests after 30 days.

If you set up sync before accounts existed (Terra Board 0.1.28 to 0.1.38), your computer has an anonymous sign-in without an email address. Signing in moves its cloud data to your account and deletes the anonymous sign-in. "Delete my cloud data" in Settings → Account deletes it without signing in. You can also email montiesprache@gmail.com and we delete it within 30 days.

If your company runs its own server and the app is set to use it, your company is responsible for that data, not us.

Error reports and install count

The desktop app can send two things to help us fix bugs and see how many people use Terra Board. They are two separate choices, and both are off until you turn them on. Setup asks once, at the end of installing, about error reports, with the box unticked; the install count is only in Settings → Privacy, where you can change either at any time. Until you have answered, nothing is sent. Terra Board Beta, a test copy that only the developer installs on their own computers, starts with both on. The Android, iPhone and iPad apps do not send either.

Error reports. When the app crashes or runs into an error (including a sync failure), it first cleans the error text automatically: file paths are cut down to the app's own file names, and links, email addresses, ids, tokens and text in quotation marks (such as board or file names) are replaced by placeholders. The cleaned error is always written to the log file on your computer. If you ticked "Send error reports", it is also sent, in small batches (and kept for later if you are offline). A report contains:

• a random number that identifies this installation (made on your computer; it is not your account, your email address or the device id used by sync);
• the app version, whether it is the normal app or the Beta, the system (Windows, Mac or Linux) and its version number;
• which part of the app the error came from, the cleaned error message (up to 500 characters), the cleaned technical trace of where in the app it happened (up to 4,000 characters) and how many times it happened.

It never contains your boards, files, names or account, and your IP address is not stored. The cleaning is automatic, so it cannot be guaranteed to catch everything; that is why it is optional.

Install count. If you ticked "Count this install", the app sends once a day: the same random installation number, the app version and edition, the system and its version number, and the country or region your system is set to (two letters, for example AT). It is read from your system's settings, not looked up from your IP address. We use it only to count how many installations are in use, by week, system and country.

Where it goes and how long it is kept. Both go to Terra Cloud's server (Supabase, database in the EU; see Terra Cloud above) and are stored in tables that only we can read; no sign-in is needed to send them and they are not linked to any Terra Cloud account. Error reports are deleted automatically 180 days after the error was last seen, install counts after 400 days. Our server uses your IP address only to limit how often one address may send (kept in memory for 10 minutes, never stored). When a kind of error appears for the first time, we receive an email through Brevo (see Terra Cloud above) with the cleaned error text, the number of installations and times it happened, the systems and versions; the email does not contain the installation number. Basis: your consent (Art. 6(1)(a) GDPR).

Turning it off. Untick the box in Settings → Privacy at any time. Sending stops at once, and error reports still waiting on your computer are discarded. Reports already sent contain nothing that tells us who sent them, so we cannot pick out yours; they are deleted after the periods above. You can also email us if you have questions.

Deleting your account

You can delete your Terra Cloud account and its data yourself:

• Android app: Settings → Account → Delete account.
• iPhone and iPad app: Settings → Account → Delete account.
• Desktop app: Settings → Account → Delete account.

This deletes your account (your email address and sign-in), your cloud boards with their images and files, your shares, your profile picture and song, and your list of devices, at once. People you shared boards with lose access to them. Boards stored on your computers are not touched. Nothing is kept afterwards, except what the law requires us to keep.

If you no longer have the app, email montiesprache@gmail.com from the address you sign in with, with the subject "Delete my Terra Cloud account". We delete the account and all its data within 30 days and confirm by email.

When you contact us

The contact form on the home page sends your email address and message to us by email through FormSubmit (formsubmit.co), a form-to-email service; it processes the data only to deliver it. You can also email us directly instead. We use your messages and contact details only to answer you, and delete them once the matter is closed unless the law requires us to keep them (Art. 6(1)(b) and (f) GDPR).

Your rights

You have the right to access, correct and delete your data, to restrict or object to processing, and to receive your data in a portable format (Art. 15–21 GDPR). Write to montiesprache@gmail.com. You can also complain to the Austrian data protection authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, www.dsb.gv.at.

We don't sell data, show ads or make automated decisions about you.