The short version
We collect the minimum needed to run the service. We don't profile you or sell your data. Any usage metrics we collect are first-party and self-hosted — never sent to third-party analytics services. Your apps and data are yours.
What we collect
- Account information: email address, username, and display name
- Authentication data: a secure hash of your password (we never store your actual password) and session cookies for login
- Your app data: whatever you put in your apps — music, notes, recipes, audiobooks, and so on
- Server logs: standard access logs that may include IP addresses, request timestamps, and error information, retained for operational and debugging purposes
- Help assistant setting: whether you've turned on the help assistant, and when
- Communications: feedback and emails you send us
What we don't collect
- No third-party analytics or tracking services
- No cookies besides the essential ones that keep you signed in and secure
- No fingerprinting, tracking pixels, or third-party trackers
- We do not sell your personal information
Where your data lives
All infrastructure is in the US West (San Jose, CA) region.
| Service | What it does | What data it has |
|---|---|---|
| Fly.io | Runs your apps on isolated servers | Your app data lives here |
| Tigris | Cloud storage for shared media | Music, audiobooks, and other media files |
| Neon | Database hosting | Account info and app metadata |
| Resend | Email delivery | Your email address, for account emails, and for product update emails if you asked for them |
| Fastmail | Support email | Feedback and emails you send us |
| MusicBrainz, AcoustID,Last.fm, LRCLIB,Genius, and cover-art sources (Cover Art Archive, iTunes, Amazon, AlbumArt.org) | Look up details for music you upload: names, album art, genres, and lyrics | The artist, album, and track names from your music files, and an audio fingerprint of each track. Never the audio itself or your account details. |
| OpenRouter | Passes help assistant questions to the AI model, only if you turn the assistant on | Your questions and a summary of your household (see below) |
| Amazon Bedrock or Google Vertex AI | Run Claude, the AI model behind the help assistant, only if you turn the assistant on | The same as OpenRouter |
No other third-party services have access to your data. We send product update emails, about once or twice a month, only if you ask for them, at signup or in Settings. You can stop them anytime from Settings or the unsubscribe link in each one. Account-related emails (verification, password reset, security notices) can't be unsubscribed from.
The help assistant
The help assistant is off until you turn it on, and each person in a household turns it on for themselves. A member who turns it on sends the summary of the household they're asking about, whether or not its owner has. Turn it off anytime in Settings.
- What it sends: your conversation, and with each question in it a summary of the setup of the household you were looking at when you sent it, such as its apps, whether each is ready or has an update waiting, how much storage it uses, its plan, and whether you own it or are a member
- What it never sends: your email address, username, passwords, or anything inside your apps
- Where it goes: OpenRouter, which passes it to Claude, an AI model made by Anthropic and run by Amazon Bedrock or Google Vertex AI. We only route to providers that have agreed not to keep your messages or train on them. OpenRouter may keep an occasional sample, with nothing that identifies you, to sort questions by topic.
- What we keep: nothing. Terrarium doesn't store or log your conversations. A conversation ends when you reload the page or start a new one.
The help assistant article has more detail.
How we protect your data
- All traffic is encrypted over HTTPS
- Passwords are securely hashed — we never store your actual password
- Each app runs on its own isolated server with its own storage volume
- CSRF protection on all forms
- Rate limiting on authentication endpoints
- Storage credentials are encrypted at rest in our database
- We keep hosted apps updated and apply security patches promptly
Your rights
You can:
- Access your data anytime through the dashboard and each app's interface
- Export your data through the file manager on your app's card, or each app's built-in export features
- Correct your account information in Settings
- Delete your account and all associated data by contacting us
- Stop product update emails at any time
If you'd like to exercise any of these rights and need help, emailsupport@getterrarium.app.
Data retention
- Active account: your data is kept as long as your account exists
- Uninstalled app: archived for 30 days (restorable), then permanently deleted
- Deleted account: all data removed within 30 days, except server logs, which expire as below
- Server logs: retained for up to 90 days for operational purposes
Children
While we don't collect age information or knowingly target any age group, Terrarium is not designed for children under 13. Please don't create accounts for children under 13.
Changes
If we make material changes to this policy, we'll email you before they take effect. Previous versions are available on request.
Contact
Questions about your privacy? Email us at support@getterrarium.app.