Privacy Notice
Last updated: 11 October 2026
In short
lodos runs on your device. Your vault, wiki, tasks and chats are stored on your device and never reach our server in readable form. Below is exactly what our server sees, for how long, and why.
Account and billing
If you sign in for Cloud Sync, our server sees your email, your GitHub identity and your Stripe billing identity. The desktop app does not require an account.
Encryption and sync
Zero-knowledge architecture: your encryption key never leaves your device. With sync on, your content is encrypted on your device and reaches storage (Cloudflare R2) only as an opaque encrypted blob. Those blobs are meaningless bytes to us; we cannot see your content.
Connected accounts
When you connect an account in the app (Google, GitHub, X, LinkedIn, Facebook, Instagram, YouTube, TikTok and others), its access tokens are stored on your device, encrypted with your vault key, and are never sent to our server. Actions on those accounts go directly from your device to the platform. Our server only provides the lodos app’s own OAuth client identity to signed-in users. For some platforms the sign-in redirect passes through lodos.md/api/oauth/relay: it forwards the one-time authorization code to your app and neither stores nor logs it.
Store and marketplace connections
For some store platforms (Shopify, ikas, Amazon), connecting and renewing the session passes through lodos.md: the one-time authorization code or refresh token is forwarded to the platform together with the app secret the platform issued to lodos, and the returned access token goes only to your device. With WooCommerce, the access key your store creates arrives at lodos.md and is sealed, without being stored, with a key only your device can open. Our server neither stores nor logs these codes and tokens. Store notifications (such as an order changing) and the platform’s privacy requests (to delete or view a customer’s data) arrive at lodos.md, their signature is verified, and they are sealed with a key only your device can open; the sealed envelope is kept for at most 30 days. To know which account a notification belongs to, a non-reversible digest (HMAC) of the store name or the store ID issued by the platform is kept linked to your account; the name or ID itself is not stored. This link is deleted when you disconnect or when the store uninstalls the lodos app. Customers’ personal details are kept only on your device, encrypted with your vault key.
Publishing media
Some platforms (Instagram, Facebook, Threads, Pinterest, TikTok photos, Google Business Profile, Slack) fetch images and videos only from a public URL. When you publish there, the file is uploaded to an unlisted, random address on lodos.md, is closed to search engines, and is deleted when publishing finishes and at the latest within 24 hours. These files are stored unencrypted, which is why you are asked to approve this once before first use. Post text and access tokens are never stored there.
Incoming messages
If you connect an inbox (Instagram or Facebook Messenger), Meta delivers new messages to lodos.md. Our server holds a message in memory only long enough to seal it with a key that only your device can open; the sealed envelope is kept for at most 30 days until your app collects it. We cannot read your messages.
AI
When you use the assistant, the content you include in a request is sent to the AI provider you chose (for example Anthropic or OpenAI) under your own account, only to answer you. lodos does not add it to any training data.
Google user data
lodos’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from the Google services you connect (Gmail, Drive, Calendar, Analytics, YouTube, Search Console and others) is used only to provide the features you request in the app and is processed on your device. It is not sold, not used for advertising, not used to develop, improve or train generalized AI or machine learning models, and is not read by humans.
Processors
Payments: Stripe (email and payment details). Storage and network: Cloudflare (encrypted sync blobs, publishing media for at most 24 hours, sealed message envelopes). Sign-in: GitHub. AI providers and social platforms act under your own accounts, on your instructions.
Telemetry
The app contains no telemetry, tracking or analytics. We do not monitor your usage.
Site counters
This website keeps two anonymous counters: how many people downloaded, and which channel visitors arrived from (one label from a fixed list such as a search engine, an AI assistant or a social network). Only that label is stored; the referring address itself, your search query, your IP address, your browser details and cookies are not stored.
Deleting your data
App data: it stays on your device; remove the app and its data folder (on macOS ~/Library/Application Support/lodos) to delete it completely. Connected accounts: Disconnect on the Integrations page deletes the access tokens from your device; you can also remove lodos’s access in the platform’s own settings (for example Facebook Settings > Apps and Websites, Google Account > Third-party access). When you remove lodos in your Facebook or Instagram settings, the deletion request reaches us automatically; any message inboxes registered for you are closed and their sealed envelopes are deleted immediately. Cloud Sync account: write to us to delete it; your email and billing record and your encrypted blobs are deleted within 30 days (except records Stripe must keep by law). Publishing media deletes itself within 24 hours at the latest.
Your rights
Under KVKK and GDPR you may access, correct and request deletion of your data. Write to us to exercise these rights.
Contact
ruzgarsamet@gmail.com