Language: EN
فارسی العربية English
Open web app
Open web app Download for Android

Privacy policy

Last updated: Version 1.0 (draft)

This text is pending final legal review. It describes how Barzaman works today; the reviewed version may change wording, not our commitments to you.

On this page

Barzaman is a local-first planner. Most of what you do in it never leaves your device. This policy explains what we process when it does, why, and the choices you have.

1. Who we are

Barzaman (“we”) is operated per region: an IR deployment hosted in Iran and a GLOBAL deployment hosted outside Iran. Your account belongs to exactly one region, and that region’s operator is responsible for your data. Contact us at [email protected].

2. Our commitments

  • No ads, no cross-app tracking, no data sales. We never sell or rent your personal data.
  • Local-first. You can use Barzaman without an account and without an internet connection.
  • Your data is yours. Export, app lock and access to your own data are never paywalled, and you can delete your account at any time.

3. Data that stays on your device

Items, notes, reminders, habits, reports and settings are stored on your device. In the Android app the database is encrypted and its key is kept in the system keystore; in the web app, data lives in your browser’s storage for our site only. We cannot see this data unless you turn on sync.

4. Data we process when you use an account

If you create an account, we process:

  • Account data: your phone number or email address (for sign-in codes), an optional name, your region, language, calendar and time-zone preferences, and your age confirmation.
  • Synced content: the items, notes, attachments and settings you choose to sync, so they can move between your devices. Content in the end-to-end encrypted vault (Pro) is stored as ciphertext only; we cannot read it.
  • Device and session data: device model, app and OS versions, push tokens, sign-in sessions and the last time a device synced — to keep your account secure and deliver sync nudges.
  • Purchases (when paid plans launch): plan, store or payment provider, transaction identifiers and status. We never receive your full card details.
  • Support messages: what you send us through the contact or deletion forms, and how to reach you.

5. Analytics, crash reports and AI

  • Product analytics are collected only with your separate, opt-in consent, on our own servers, without your content. You can withdraw consent at any time in the app’s settings.
  • Crash reports contain technical information (device, versions, stack traces) — never your plans or notes — and are processed on our own servers in your region.
  • AI features, when they launch, are optional, require separate consent, and never process vault content.
  • We do not use advertising identifiers, and we do not show ads.

To provide the service you asked for (contract), to keep it secure and prevent abuse such as SMS fraud (legitimate interest), for analytics and marketing only with your consent, and to meet legal obligations such as keeping financial records.

7. Sharing

We share data only with providers that help us run Barzaman, and only as needed: hosting in your region, SMS and email providers for sign-in codes, payment providers and app stores for purchases. They may use it only on our instructions. We may disclose data when required by law, and we tell you when we are allowed to.

8. Security

Encrypted connections (TLS), on-device database encryption, an optional app lock with PIN or biometrics, short-lived access tokens, rotating refresh tokens, step-up verification before sensitive actions, least-privilege access for staff, and audit logs. Logs never contain your codes, tokens or content.

9. Retention

  • Account and synced data are kept while your account is active.
  • When you delete your account it is deactivated immediately and can be restored for 30 days; then your data is permanently erased, and server backups age out within 35 days after that.
  • Deleted items stay restorable in Trash for 30 days.
  • Security logs are kept for a limited period; financial records are kept as long as the law requires.

10. Your rights

You can access, export, correct and delete your data, object to or restrict certain processing, and withdraw consent — most of it directly in the app (Settings → Account), or by writing to us. Users in the EEA and the UK have these rights under the GDPR and UK GDPR, including the right to complain to a data-protection authority.

11. Children

The minimum age for creating an account is set per region (13 by default in the GLOBAL region). Younger students can use Barzaman without an account, or in spaces managed by a teacher or parent. We do not run behavioral analytics for users identified as minors.

12. Health information

Barzaman is not a medical device. If you record visits, use patient codes, not names. You can hide sensitive reminders on the lock screen and keep sensitive notes in the encrypted vault.

13. This website

barzaman.ir uses no cookies, no analytics, no trackers and no third-party resources. Your theme choice is stored only in your browser. Forms send what you type only to our API. Our servers keep standard access logs (including IP addresses) for a short period for security.

14. Changes and contact

We will announce material changes in the app and on this page before they take effect. Questions or requests: [email protected].

Terms of service