1. Summary. Relationship Map is a local-first Windows desktop application. Everything you record stays on your own device. The app has no user account, no cloud service, no telemetry, no advertising and no third-party analytics. The developer never receives your data, and cannot access it.

2. What data the app processes, and why. The app processes only the information you choose to enter, so that it can show it back to you: people (name, alias, company, position, contact details, notes, importance, tags, avatar image), relationships between people (type, direction, strength, start/end dates, notes), events (title, date, description, participants), your own graph layout positions, and application preferences (theme, layout). The app also writes local diagnostic logs (application events and error messages) to help you troubleshoot problems. The app does not derive, buy, enrich or infer any data about you or the people you record, and it does not scan your contacts, calendar, email, files or browsing activity.

3. Where data is stored, and for how long. All data is stored on your device only: a SQLite database, avatar images, backups, exports and log files under %APPDATA%\com.relationshipmap.app\. There is no server-side copy. Data is retained until you delete it: you can delete individual people, relationships and events inside the app, and you can remove all remaining data by deleting the application data folder above. Diagnostic logs rotate daily and only the seven most recent files are kept. Uninstalling the app does not automatically erase the data folder, so that reinstalling does not lose your work; delete the folder manually if you want the data gone.

4. Data transmission. The app makes no network requests. It contains no HTTP client, no telemetry endpoint, no update client, no account system and no AI or cloud service integration. Consequently no personal information is transmitted to the developer, to Microsoft, or to any third party by the app. Two Microsoft platform components may involve the network independently of the app: the Microsoft Store handles purchase, installation and updates under Microsoft’s own privacy statement, and if the Microsoft Edge WebView2 Runtime is missing, the Microsoft-provided installer downloads it. Neither transmits your relationship data.

5. Files you choose to open or save. Import, export, backup, restore and avatar selection always go through the standard Windows file dialog, and act only on the location you pick. Exported CSV/JSON files and backup archives contain your data in readable form; once you place such a file outside the app (for example in a synced folder, on a USB drive or in an email), its protection becomes your responsibility.

6. Security. Data never leaves your device by design, which removes network interception and server breach as risk categories. Access control is provided by your Windows user account and file system permissions. Restore operations validate backup integrity and take a pre-restore snapshot before overwriting existing data. The database is not separately encrypted at rest in v0.1.0; if you need encryption today, use Windows BitLocker or an encrypted volume. Optional database encryption is a planned future feature and is not claimed as present.

7. Third parties. No data is shared with, sold to, or disclosed to any third party. No advertising, attribution, crash-reporting or analytics SDK is embedded in the application.

8. Your control over your data. You can view, edit and delete every record inside the app; export everything to JSON or CSV at any time; create and restore full backups; and remove all data by deleting the application data folder. Because the developer holds no copy of your data, requests to access, correct or delete data must be carried out by you on your own device — the developer has nothing to retrieve or erase.

9. Children’s privacy. The app is a general-purpose personal organiser and is not directed at children. It does not knowingly collect information from children, contains no online community, no user-to-user communication and no in-app purchases. Because all data stays local and nothing is transmitted, the app does not gather any information about who is using it.

10. Third-party runtime. The application interface runs inside the Microsoft Edge WebView2 Runtime, a Microsoft component governed by the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement).

11. Changes to this policy. If a future version adds a feature that transmits data — for example optional cloud sync or an optional AI feature — this policy will be updated before that version ships, the change will be described in the release notes, and any such feature will be off by default and require explicit consent.