Tidumi Privacy Policy

Updated: October 17, 2026.

This policy covers Tidumi, its widget, focus extensions and server. The service operator and personal data controller is Roametry Ltd, registered in England and Wales, company number 16527098. Registered office: 5 Brayford Square, London, United Kingdom, E1 0SG. For data requests, email info@tidumi.app or use Settings → Help and feedback in the app. Email remains available after account deletion. Do not include passwords, payment details or sensitive information in your message.

You can use Tidumi without Sign in with Apple, but a guest account still has an identifier and server-side activity records. A random identifier does not make those records anonymous. The sections below distinguish data sent to the server and providers from data kept on your device.

Data received by the server

• Account and device. Starting the app creates a guest account associated with an installation identifier. We store account IDs, time zone, settings, session identifiers and app integrity verification data. Sign in with Apple processes an Apple identifier and authorization tokens. If Apple supplies a name or email, the app sends them when linking the account; they may be retained in diagnostic request logs although they are not stored as server profile fields. Registering notifications sends a push token, notification environment and language.
• Use and personalization. Topics, ratings and reactions, viewed, read, skipped and saved facts, reading and activity duration, quiz answers and results, achievements, audio progress and saved collections are linked to the account, including guest accounts. We use them for progress, synchronization and content recommendations. Custom collection names are stored too.
• Search. Searches in saved content and the audio catalog reach the server. URLs and parameters may remain in access and diagnostic logs.
• Feedback. Messages and reports, account ID and any email you provide. With diagnostics enabled, submissions also include app version/build, iOS version, device model, language, region, time zone and appearance. You can turn these additional diagnostics off before sending. This does not disable ordinary server logging. Messages sent by email are also processed by the email services used to deliver and handle correspondence.
• Technical logs. Infrastructure receives IP addresses, request URLs, times and response codes. When diagnostic journaling is active, it also retains account, session and installation IDs, request/response bodies and parameters, client information and processing duration. Secret tokens are redacted; names, emails, searches and feedback text may be retained.

Data that stays on the device

Your locally edited profile name/photo, appearance preferences and image/audio cache stay on your iPhone. Profile photos are not uploaded. The system Photos Picker shares only the image you select.

Focus app/site selections stay in local Screen Time tokens shared with the focus extensions. Selected app/site names and browsing histories are not sent to Tidumi. Reading in focus mode can create ordinary reading and achievement events. The widget uses local settings and requests facts for chosen topics without an account token.

Purchases and RevenueCat

We use RevenueCat, Inc. (USA) to verify purchases, restore access and manage Premium status. Its SDK sends RevenueCat a random guest App User ID and, after sign-in, the stable Tidumi account ID; these identifiers may be aliased to associate purchases with an account. We do not send names, emails, profile photos or Apple sign-in tokens to RevenueCat as customer attributes.

RevenueCat receives store purchase and receipt/transaction information: products, purchase and expiration dates, renewal, cancellation or refund status, Premium entitlements and related identifiers. The SDK also sends technical information such as app/SDK version, platform and OS version; infrastructure receives an IP address on connection. We use this data to provide paid access, restore purchases, support users, prevent errors and analyze purchases and subscriptions. Purchase history is linked to the user; this is not advertising tracking.

Apple handles payment, payment details, cancellation and refunds. Tidumi and RevenueCat do not receive your full card number or security code. Deleting a Tidumi account does not automatically erase purchase records held by Apple or RevenueCat. Deleting the account or app does not cancel an Apple subscription. Cancel it in Apple subscription management. Email us about purchase data even after account deletion.

Purposes and lawful bases

Where the UK GDPR or GDPR applies, we rely on the following bases:

• Contract: creating and operating accounts, authentication, synchronization, chosen topics and progress, search, providing and restoring paid access and service support. Without necessary data, the relevant feature cannot work.
• Legitimate interests: protecting the service and users against abuse, technical diagnostics (including optional information in support messages), handling reports and analyzing purchase operations. Our interests are service reliability and improvement; processing must be necessary and proportionate, taking your rights into account. You can object to this processing.
• Consent: optional notifications you voluntarily enable. For other operations where consent is legally required, we must request it separately. Photo selection and Screen Time use system permissions and stay local. Refusing does not prevent ordinary service use; withdraw consent in the relevant setting. A system permission does not itself supply a lawful basis for all other processing.
• Legal obligation: retaining or disclosing information required by applicable law, lawful authority requests or mandatory record-keeping. This is not a basis for retaining all data indefinitely.

We do not make decisions with legal or similarly significant effects on you solely through automated processing. Educational content recommendations use your chosen topics and activity.

Recipients and international transfers

Authorized Roametry Ltd personnel and providers needed to operate the service can access relevant data: Hetzner hosts the Tidumi server in Germany; RevenueCat processes the purchase and technical information described above using infrastructure and subprocessors in the USA. Apple independently processes information for authentication, payments, notification delivery, App Attest and Screen Time under its own rules. Information may be disclosed to authorities where required by law; access is limited to the processing purpose.

The operator is in the United Kingdom. Processing may therefore occur outside your country, including the UK, Germany and USA. Relevant current adequacy decisions apply to UK/EEA transfers where their conditions are met. For restricted transfers to the USA, RevenueCat’s Data Processing Addendum provides EU Standard Contractual Clauses (SCCs) and a UK Addendum and lists subprocessors. These contractual measures do not mean data never leaves Europe. You can email us for information about applicable safeguards and a copy of the relevant terms.

Advertising, content preparation and external links

The app has no advertising SDKs, IDFA or cross-app/site advertising tracking. We do not sell data or share it with advertising networks.

AI services help prepare editorial text, images and audio. The app does not send user profiles or activity history to them for personalization. This content preparation is separate from the account-based recommendations described above. When you open an external source or an Apple service, that service handles your visit under its own privacy rules.

Retention and deletion

Account and progress data remain for service operation until account deletion. Settings → Delete account supports both guest and Apple accounts; Apple may require identity confirmation. Deletion removes the main activity and progress records, saved content, collections, quiz records, in-app feedback and linked sign-in identity. It revokes active sessions and clears local app state. Restoring a purchase does not restore deleted learning history.

Account deletion does not currently erase every copy of your data. The remaining categories are:

• Technical account and session records. A record marking the account as deleted and records of revoked sessions remain. They are no longer used for normal sign-in or personalization. An automatic erasure deadline for these records has not been established.
• Diagnostic and access logs. Previously recorded identifiers, searches, messages and other request data are not automatically erased with the account. There is no uniform automatic retention period for diagnostic journals. A diagnostic recording session ending does not delete its saved entries.
• Database backups. Older copies can contain deleted records until rotation removes them. Rotation keeps up to ten backup files across scheduled, manual and pre-deployment backups. This is a file-count limit, not a guarantee of deletion within ten days.
• Support correspondence and purchase records. Copies held separately may remain while needed to resolve an open request or dispute, verify purchase access, meet a specific record-keeping obligation or protect legal rights. The applicable purpose and obligation determine the retention period; this does not justify keeping all account data indefinitely.
• Apple and RevenueCat. Account deletion does not automatically delete a RevenueCat customer or Apple's purchase records. Their records are separate from the learning data removed by Tidumi.

For requests about remaining data, email info@tidumi.app, including after account deletion. Include the former account ID or available purchase information if known; do not send a full card number or Apple ID password. We will assess the records covered by your request and explain any applicable retention grounds and period. The response procedure below also applies to these requests.

Your rights and choices

Where the UK GDPR/GDPR applies, you can request access and a copy of personal data, correction, erasure, restriction of processing, portability of data processed automatically under contract or consent, and object to processing based on legitimate interests. These rights are subject to statutory conditions and exceptions. You can withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal.

Email info@tidumi.app, including without access to the app. We may ask for proportionate identity verification to protect your data, never your password or full card number. Under UK GDPR/GDPR we normally respond within one month; if complexity or the number of requests permits a statutory extension, we explain it and the reason within the first month. Ordinary requests are free of charge.

You can complain to the UK Information Commissioner’s Office (ICO) or the relevant supervisory authority in your country, including your place of residence, work or the alleged infringement in the EEA. Contacting us first is not a requirement.

Apple sign-in, profile photos, notifications and focus are optional. Revoke permissions in iOS Settings and clear the media cache in Tidumi Settings. Clearing a local cache does not delete account data held by the server. You can object to processing based on legitimate interests by emailing us; a system permission or acceptance of the Terms is not blanket consent to all processing.

Children and young people

The app is not intended to collect children’s data without parental consent where applicable law requires it. Email us if you believe we have received such data or need to exercise rights concerning a child. The App Store age rating describes content; it does not establish a child’s capacity to agree to a contract or replace applicable data-consent rules.

Policy changes

The revision date appears above. Changes to processing remain subject to applicable notice and consent requirements. Updating this policy does not itself obtain consent for a new purpose. See the Tidumi Terms for service conditions.