Privacy Policy
Arlume · Last updated 12 October 2026
Arlume is published by Roman Platforms ("we"). This policy explains what Arlume collects, why, where it is kept, and the choices you have. Contact: support@romanplatforms.com.
1. The short version
- What you write in Arlume (notes, chats, reminders, settings, files, AI keys) is encrypted on your own device with a code only you know, before it is stored anywhere. We cannot read it.
- We keep only what is needed to give you an account and sync your devices.
- We never sell your data, never use it for advertising, and never use it to train AI models.
2. What we collect
Your account
When you sign in with Google, we receive your name, email address and profile picture from Google. We use them only to identify your account and show you who is signed in.
Your content
Your notes, chats, reminders, files and settings are stored on our server so your devices can sync, but only in encrypted form. The key that opens them never leaves your devices.
Technical information
To sync, the server keeps the time each item changed and which of your devices changed it, plus a short device name you can see in the app. We do not track you across other apps or websites.
3. Connected accounts (Google, Microsoft, GitHub)
You may choose to connect your own email or work accounts so Arlume can read them for you. When you do:
- Arlume reads that data only to do what you ask (for example "summarise my unread email") or to tell you about new messages you chose to be told about.
- The access permission for each account is stored encrypted with your own code, like the rest of your content.
- Content from connected accounts is processed on your device and is not stored on our server in readable form.
- Anything that would change a connected account (send, delete, publish) is shown to you and needs your approval first.
- You can disconnect any account at any time in Settings, and you can also remove Arlume's access from your Google, Microsoft or GitHub account settings.
Google user data. Arlume's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we do not use Google user data for advertising; we do not sell it; we do not use it to train AI models; and no person reads it unless you ask us to for support, it is needed for security or to comply with the law.
4. AI providers
Arlume uses AI providers you choose, with your own provider key. When you ask the AI something, the text needed for that request (and any note or message you allow it to read) is sent to that provider to produce the answer. Each provider handles that data under its own privacy policy. Arlume asks your permission before the AI reads any note.
5. Where your data is kept
Our server is run by Supabase in Frankfurt, Germany (European Union). Your data may therefore be stored outside your own country; by using Arlume you agree to that. What is stored there is, as described above, encrypted with your own code.
6. How long we keep it
We keep your account and encrypted content for as long as you have an account. When you delete your account, we delete your account information and your encrypted content from our server.
7. Your choices and rights
- See, change or delete your content at any time in the app.
- Ask for your account to be deleted, or for a copy of your account information, by emailing support@romanplatforms.com.
- Disconnect connected accounts at any time.
Lost codes. Because only you hold the code that opens your content, we cannot recover it if you lose every code on every device.
8. Security
Content is encrypted on your device (AES-256-GCM) with a key protected by your code. Connections to our server are encrypted. Only your signed-in account can reach your rows on the server.
9. Children
Arlume is not intended for children under 13.
10. Changes
If this policy changes, we will update the date above and tell you in the app for important changes.