Privacy Policy

This policy explains what personal information Tomrade handles, where it goes, and what you can do about it. It covers the Tomrade desktop app, your Tomrade account and its online services, and the website at tomrade.com.

Tomrade is made by Haoyuan Tang, an individual developer in Victoria, Australia (“we”, “us”). We are responsible for the personal information described here. Contact us at support@tomrade.com.

The short version

• Tomrade is local-first. Your projects, tickets, notes, files, code and agent conversations stay in folders on your computer. We never receive them.
• Your account holds your email address, your preferences, and the list of your projects and repositories, so they follow you between computers.
• The app sends anonymous usage statistics (which features are used and for how long, under a random identifier, never your content) unless you turn them off. It has no crash reporting. The website sets no cookies and runs no tracking scripts.
• When you connect a model provider, a coding agent, GitHub or another service, the app talks to it directly from your computer. What you send there is governed by that service’s privacy policy, not ours.
• We don’t sell your information, show you ads, or use your information to train AI models.

1. What we collect

Your account

• Email address and password. You give them to create an account. The password is stored only as a salted hash by our authentication provider; we can’t read it.
• Account records that our authentication provider keeps: your account ID, when the account was created, when your email was confirmed, when you last signed in, and, for each sign-in session, the IP address and the app or browser that started it. It also keeps a security log of sign-ins, sign-outs and password changes.
• Your agreement to these documents: which version of the Terms of Service and this policy you accepted, and when.

What your account syncs

• Your project list. For each project: its name, its ticket key prefix (such as TOM), an internal ID, and where its folder syncs, if anywhere. That is the git host and the repository’s owner, name and branch, or the address of a shared repository with any password removed.
• Your repository list: the address and name of each code repository you’ve added.
• Your preferences: theme, language, custom themes, theme schedule, notification settings, and which tips you’ve already seen. Settings that contain a password or key are never synced.
• A history of changes to these records, so sync can resolve conflicts between your computers.

None of this includes the contents of your projects.

Community plugins

• If you browse or install plugins, the app downloads the plugin directory and packages from our servers. When you install a plugin we add one to its download count, without recording who you are.
• If you publish plugins, you link your GitHub account. We then store your GitHub username, user ID and display name. Your publisher profile (username and display name) and your plugins (the source repository, version details and the plugin’s manifest, which may include the author name and email you put in it) are public.
• If you report a plugin, we store the report and your reason, linked to your account. Only you and we can see it.

Update checks

Unless you turn automatic checks off (Settings › About), the app asks download.tomrade.com for the latest version when it starts and then once an hour. Each request includes:

• your IP address;
• the file it asks for, which shows your operating system and update channel. A download, which starts only when you choose it, also shows your processor type;
• your system language, which the request carries as standard.

A check carries no ID for your installation and nothing linked to your account.

Usage statistics

Unless you turn them off, the app sends us anonymous usage statistics, to learn which features are useful and how much they are used:

• the feature used (such as the board or notes) and a predefined action (such as opening it or creating a ticket), with no details of the item;
• active time and counts, and when events happened;
• a random anonymous identifier, derived from a secret that stays on your computer. It is not linked to your account or email, changes every 365 days, and you can reset it in Settings › Data & privacy;
• the app version, your operating system family, and one broad region (mainland China, Asia Pacific, Europe, North America or other).

They never include project or ticket names or contents, notes, conversations, prompts, code, file names, paths, search terms or settings values, and no email, account ID or hardware fingerprint. Our provider necessarily receives your IP address to deliver each request; the statistics database keeps only the broad region. Turn them off in Settings › Data & privacy › Anonymous usage statistics: collection and sending stop, unsent events are cleared and the local secret is deleted.

Reports you send from the app

When you send a report from the Troubleshooter, or feedback or an idea from the app, it reaches us through your account. It holds what the app shows you before you send it: the app version, your system and language, the checks and errors, recent log lines, and your note. The conversation that went wrong is included only if you tick it.

The website

• tomrade.com sets no cookies and runs no analytics or tracking scripts. It loads nothing from other sites.
• It uses your browser’s storage only on your own device: to remember that you dismissed the language suggestion, and, on the pages that account emails link to, to remember the result for that browser tab.
• The email confirmation and password reset pages use the one-time link from your email to finish that step with our authentication provider. The reset page sends nothing but your new password.
• Our hosting provider handles your IP address and request details to deliver the site, to protect it from attacks and abuse, and to give us aggregate traffic statistics (such as page views, countries and referring sites) from its own request logs. No script on the page collects them, and we see only totals that don’t identify you.

Emails and messages

• We send you only emails about your account: confirming your address and resetting your password. We don’t send marketing emails.
• If you write to us, we keep your message and our reply.

2. What stays on your computer

The app keeps these on your computer, and doesn’t send them to us:

• your projects, in ordinary folders under ~/Tomrade or wherever you put them;
• the app’s data folder: settings, caches, backups, and your sign-in session, which is encrypted with your operating system’s keychain;
• API keys and tokens you enter for model providers, GitHub, web search or MCP servers, encrypted with your operating system’s keychain (the macOS Keychain, Windows DPAPI or the Linux Secret Service). Two exceptions are kept in plain text, in files only your user account can read: the GitHub token that git uses, and, on Linux systems without a keyring, all keys. The app tells you when that’s the case;
• a random device ID, used to tell your computers apart in a project’s history. It is saved in the project folder, so it goes wherever you sync that folder, such as your own git repository. It does not come to us.

3. Services you connect

Tomrade talks to the following services directly from your computer, only when you set them up or use them. We don’t receive what passes between you and them, and their own privacy policies apply.

• Model providers such as DeepSeek, Moonshot (Kimi), Anthropic, OpenAI, Google Gemini, OpenRouter, a custom endpoint, or a model running on your own computer. When the assistant or an agent works, Tomrade sends the provider what it needs: your messages, ticket titles and bodies, file contents and an index of your files, project names and rules, tool results, and the path of the folder on your computer.
• Coding agents on your computer such as Claude Code, Codex, Gemini CLI, OpenCode and others. They run under your own accounts with those companies and follow those companies’ policies, including their own data collection. Tomrade gives them your tickets and instructions and lets them use its tools.
• GitHub and other git hosts. When you sign in to GitHub or connect a project, files folder or code repository to a remote, Tomrade pushes there what you have chosen to sync, and anyone who can read that repository can read it. A project folder includes its tickets and history, and its agent conversations unless you untick them when you connect it. Tomrade never pushes conversations to a GitHub repository that is public, and stops if a repository becomes public later; what was pushed before stays in the repository’s history. For other git hosts Tomrade can’t tell whether a repository is public, so check before you include conversations. Linked code repositories also get branches and pull requests that carry ticket keys, titles and descriptions.
• Web search (Tavily, if you add a key): the searches agents run and the pages they read.
• MCP servers you add: whatever the agent sends their tools.
• Plugins you install. They are written by other people and can do anything the app can, including sending data to the hosts they declare. Install only plugins you trust.
• Images in your notes and tickets that point to other websites are loaded from those websites, which can see your IP address.
• The diagram tool downloads its code from GitHub the first time you use it.

4. Why we use your information

• To run your account and the services you use: sign-in, sync, the plugin directory and update checks.
• To keep Tomrade secure, prevent abuse, and fix problems, including from the reports you send.
• To understand which features of the app are used and how much, from anonymous usage statistics.
• To understand how many people visit the website, in totals only.
• To send you account emails, and to answer you when you write to us.
• To comply with the law and enforce our Terms of Service.

If the EU or UK GDPR applies to you, our legal bases are: performing our contract with you (your account and its services); our legitimate interest in running Tomrade securely and reliably (security logs, update checks, abuse prevention, anonymous usage statistics, website traffic totals); your consent, where we ask for it; and complying with legal obligations.

5. Who processes it for us

We use these providers to run Tomrade. They handle personal information only on our instructions:

We may also disclose information when the law requires it, to protect people’s safety or our rights, or to someone who takes over Tomrade, who must then keep this policy’s promises.

Because of these providers, your information is stored and processed outside Australia and outside your own country, mainly in Japan and the United States. Where the law requires it, we rely on safeguards such as the providers’ data processing agreements and standard contractual clauses.

6. How long we keep it

• Account, synced records and reports: as long as your account exists. When you delete your account, they are deleted straight away, and they disappear from our providers’ backups within 30 days.
• Sign-in sessions, with their IP address and app, are kept until you sign out, the session is revoked, or your account is deleted.
• Security logs of sign-ins, sign-outs and password changes, with the IP address, are deleted after 90 days.
• Usage statistics: unsent events stay on your computer for up to 7 days. Our copies of individual events and daily activity under an anonymous identifier are deleted after about 180 days; totals without any identifier are kept for 25 months.
• Request logs at our providers are kept for the short periods those providers set, typically days to weeks.
• Published plugins stay listed under your GitHub username after you delete your account, because other people may depend on them. Ask us and we’ll take them down. Copies people have already installed stay on their computers.
• Emails you send us: as long as we need them to help you and keep a record, generally no more than two years.

7. Your choices and rights

• See, correct or get a copy of the information we hold about you.
• Delete your account and its records, yourself, in Settings › Hub › Delete account…, after confirming your password. Your projects stay on your computer and in your own git repositories.
• Object to or restrict some uses, and withdraw consent where we relied on it.
• Turn off update checks in Settings › About.
• Turn off usage statistics, or reset their anonymous identifier, in Settings › Data & privacy. To have what was already sent deleted, give us the identifier shown there.
• Disconnect any service you have connected, or sign out at any time.

For anything else, or if you can’t use the app, write to support@tomrade.com from your account’s email address, so we know the request is yours. We’ll answer within 30 days and won’t charge you.

If you’re unhappy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or to the data protection authority where you live.

8. Security

Connections between the app or website and our services are encrypted. Each account can read only its own records, and your sign-in session and keys are encrypted on your computer. No system is perfectly secure, though. Keep your password private, protect your computer account, and tell us at support@tomrade.com if you notice anything wrong. If a breach is likely to cause you serious harm, we’ll tell you and the authorities as the law requires.

9. Children

Tomrade is not meant for children under 13, and we don’t knowingly collect their information. If you believe a child under 13 has given us information, write to us and we’ll delete it.

10. Changes to this policy

We’ll post any new version of this policy on this page with its date. If a change matters to you, we’ll tell you in the app or by email before it takes effect and, where the law requires it, ask for your agreement again.

11. Contact

Haoyuan Tang (Tomrade)
Victoria, Australia
support@tomrade.com