Privacy Policy

Last updated 3 November 2026

Tabby is an index-card notes app. This policy explains what we collect when you use Tabby, why, and the choices you have. Questions? Email stephanieyeo.designs@gmail.com.

What we collect

• Account details — your name, email address and, if you sign up with email, a password (stored only as a secure hash by our authentication provider).
• Google sign-in — if you choose “Continue with Google”, we receive your name, email address and profile picture URL from Google. We do not access your Gmail, contacts, Drive or any other Google data.
• Your content — the boxes, sections and cards you create, plus display preferences such as card font and interface size.
• Technical data — standard server logs (such as IP address, browser type and time of request) kept by our hosting providers for security and reliability.

How we use it

• To create your account, sign you in and keep you signed in.
• To store your cards and show them to you on any device you sign in from.
• To send account emails you ask for, such as a password reset.
• To keep the service secure and working.

We do not sell your data, show ads, or use your notes to train AI models.

Google user data

Tabby’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google profile data is used only to identify you and display your name in the app.

Who can see your content

Your boxes and cards are private to your account. Database rules ensure each signed-in user can only read and change their own data. We share data only with the service providers that run Tabby:

• Supabase — authentication and database hosting.
• Cloudflare — website hosting and delivery.
• Google — only if you choose Google sign-in.

We may disclose information if required by law.

Storage and security

Data is stored by Supabase and transmitted over encrypted connections (HTTPS). No system is perfectly secure, but we take reasonable steps to protect your information.

Your choices

• Export — download your cards any time from Account → Your data (Markdown or backup file).
• Edit — change your name and password in Account settings.
• Delete — delete your account from Account → Your data. This permanently removes your account and all your boxes and cards.
• Google access — you can remove Tabby’s access at myaccount.google.com/permissions.

Children

Tabby is not directed at children under 13, and we do not knowingly collect their data.

Changes

If we change this policy, we’ll update the date above. Significant changes will be announced in the app.