skip to content
LOMETICS Software you own.

Privacy Policy

Last updated: 11 October 2026

This policy covers every app made by Lometics GmbH (Themia, Gloomia, tabls and any app we release later), the websites lometics.com, themia.app, gloomia.app and tabls.app, and the way we handle purchases and support. Where an app does something the others don’t, the section says which app.

Who is responsible

The controller for the processing described here is:

Lometics is a small studio. There is no data protection officer: the scale of processing described below does not require one, and privacy requests are answered personally.

The short version

Our apps run on your computer. Wherever your data can stay on your device, that’s where they keep it: settings, notes, layouts, files and connected-account data are never uploaded to us, and we hold no copy of them. Our apps send no usage analytics or telemetry: we don’t track how you use them. What does leave your device is listed below, in full.

What stays on your device

Stored in your user profile on your own machine, and never transmitted to us:

  • App settings, layouts and views
  • Content you create in our apps: notes, entries, records, countdowns, clipboard history and similar
  • Files and folders an app shows or works with, read from disk when needed (tabls keeps your records as plain files in a folder you choose)
  • Credentials and OAuth tokens for accounts you connect, encrypted at rest with Windows DPAPI (per user and bound to the machine)

Uninstalling an app, or deleting its data folder, removes all of it. We cannot delete it for you, because we never had it.

Accounts and services you connect

Some features talk to a service you choose, for example the Mail, Calendar, Contacts and comparable widgets in Themia (Microsoft, Google, an IMAP/CalDAV server, GitHub). They connect directly from your machine to that provider. Nothing is proxied through us, we are not a recipient of your messages, events, contacts or files, and we cannot read them. Your relationship with those providers is governed by their own privacy policies, not this one.

Weather features request forecasts from Open-Meteo directly from your machine, using the location you entered. Open-Meteo needs no account and receives no data about you beyond that request and your IP address.

What we process, and why

Website analytics

  • What: pages viewed, the site that referred you, any campaign parameters in the link you followed, and a small number of specific actions such as clicking a download or purchase button. Also the country, region and city your IP address resolves to, device type, operating system and browser, and page-performance measurements. No cross-site tracking and no advertising tags. We do not use Google Analytics or Google Ads.
  • What is stored on your device: nothing. Our website analytics sets no cookie, no session storage entry and no local storage entry. So that several pages read in one sitting count as one visit, Vercel derives a short-lived identifier from the request on its own servers and discards it after 24 hours; it is never written to your device, we never see it, and it cannot recognise you on another site or on a later day. (lometics.com remembers your light or dark mode choice in your browser’s local storage. That stays on your device and is never sent anywhere.)
  • Legal basis: our legitimate interest in understanding which pages are useful (Art. 6(1)(f) GDPR).
  • Recipient: Vercel Inc. (USA), acting as our processor. It hosts the sites, measures them and records the page-performance numbers.

Buying a licence

Licences for our apps are sold only through the Microsoft Store. When you buy an app or an add-on in the Microsoft Store, Microsoft takes the payment and handles tax and invoicing as the merchant, under its own privacy statement. We receive aggregated sales reports, not your payment details. The app checks your licence with the Store on your device.

  • Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Updates

Our apps are installed and updated through the Microsoft Store, by Windows and the Store, under Microsoft’s privacy statement. They do not contact us or anyone else to check for updates.

Newsletter

  • What: the email address you enter, which of our newsletters you chose (Lometics, Karpo or Themia), the language of the page, when you signed up and confirmed, and whether our emails were delivered. You are only added once you click the link in the confirmation email we send you.
  • Legal basis: your consent (Art. 6(1)(a) GDPR), given by submitting the signup form. Every email carries an unsubscribe link, and unsubscribing withdraws that consent.
  • Recipient: Amazon Web Services EMEA SARL (Luxembourg), acting as our processor through Amazon SES. It stores the subscriber list in its Stockholm region (EU) and sends the emails.

Support and other email

  • What: whatever you write to us, plus your address and the message metadata.
  • Legal basis: answering a support request is either performance of the contract (Art. 6(1)(b) GDPR) or our legitimate interest in helping users (Art. 6(1)(f) GDPR).
  • Recipient: Microsoft Corporation (USA / Microsoft Ireland), as our email provider.

Who receives data

The full list: Microsoft and Vercel, and Amazon Web Services only if you sign up for a newsletter. Nobody else. We do not sell personal data, and we do not share it for advertising.

  • Vercel Inc., USA: website hosting, website analytics and page-performance measurement (processor)
  • Microsoft Corporation, USA / Ireland: Microsoft Store sales, licences and updates (independent controller), and our support mailbox (processor)
  • Amazon Web Services EMEA SARL, Luxembourg (part of Amazon.com, Inc., USA): newsletter, through Amazon SES (processor)

We may also disclose data where the law requires it.

Transfers outside Switzerland and the EEA

We are based in Switzerland, which the European Commission recognises as providing an adequate level of protection. The providers listed above are based in the USA and are engaged under the European Commission’s Standard Contractual Clauses (with the Swiss amendments) and, where the provider participates, the EU–US and Swiss–US Data Privacy Frameworks.

How long we keep things

  • Website analytics: kept by Vercel and visible to us for up to 12 months. Nothing is kept in your browser.
  • Purchase records: kept by Microsoft as the merchant, under its own retention rules. We keep only aggregated sales reports.
  • Newsletter: until you unsubscribe.
  • Support email: up to 24 months after the conversation ends.

Your rights

You have the right to request access to your personal data, to have it corrected or erased, to have processing restricted, to receive it in a portable format, and to object to processing based on our legitimate interests. Where processing rests on consent, you may withdraw that consent at any time without affecting what was lawful before.

Write to info@lometics.com and we will answer within one month. In practice we hold no records tied to you beyond your emails to us and, if you subscribed, your newsletter entry: Microsoft handles your purchase, and we only receive aggregated sales reports. Our apps send no analytics, so there is no usage data about you to ask for.

You also have the right to lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EEA, the data protection authority of your country of residence.

Swiss law

Because we are established in Switzerland, the Swiss Federal Act on Data Protection (FADP) applies to this processing, and the GDPR applies alongside it where you are in the EEA. The rights described above exist under both, and the same contact address serves both.

Security

Everything our apps send travels over TLS. Credentials and OAuth tokens are encrypted at rest on your machine with Windows DPAPI, so the stored file cannot be read by another Windows account or on another computer.

Children

Our apps are not directed at children under 16, and we do not knowingly collect their personal data.

Changes to this policy

We update this page when the processing changes, and the date at the top always reflects the current version. Material changes to anything that relies on your consent will be asked for again rather than announced quietly.

Contact

Questions about this policy, or a request about your data: info@lometics.com.