Privacy policy

Sajilo is a menu-bar app with no account. What you write stays on your computer. This page is the whole policy.

Last updated 26 September 2026: the daily count now includes which features were used (see below).

On your device

Day plans, Keeper reminders and documents, photos you attach, watchlists, settings, and backups you export live in a database on your computer. Sajilo does not upload them. There is no sign-in and no cloud copy of that data.

Anonymous daily count

To know how many people use the app, and which parts of it are worth improving, Sajilo can send at most one count per UTC day. It is on by default. Switching it off in Settings › System › Privacy stops it; nothing is sent after that.

Each count includes:

Features are counted by name only, from a fixed list in the app’s source code. The count never includes what you type or search for, which story you read, which station you play, which rashi you picked, what you save, dates, places, amounts, or anything else you enter. While the count is switched off, nothing is counted even on your computer, and switching it off deletes any counts not yet sent.

That id is a random number. It is not derived from your device, your name, your network or anything else about you, and it is not shared with anyone. Switching the count off in Settings › System › Privacy stops anything being sent at all; the id stays on your computer unused, so turning the count back on later does not make you look like a new person. Restoring a backup onto another computer generates a new id rather than reusing the one from the computer the backup came from.

Alongside the id, the service records the day each count was for and the time it arrived, so it can tell an install still in use from one that stopped. The count is sent by Sajilo’s hourly background refresh, not by anything you do, so that time says the app was running — not when you opened a screen. Feature counts are totals since the last count, with no times attached. There is at most one record per day.

Cloudflare derives an approximate country from the connection. The service does not store an account, your name, an email address, an IP address, or anything identifying your device. What you search for, read, play and save is never sent anywhere.

Public sources

News, weather, markets, forex, rashifal, radio and similar screens fetch public pages and keyless APIs. Weather uses the city you picked, not GPS. Those requests go to the publisher, not to Sajilo. Failed or stale fetches stay on the device and are labelled as such.

Notifications

Festival, holiday, IPO and Keeper reminders use the operating system’s notification permission. Sajilo asks for it when you turn those reminders on. The text of a reminder is not sent to Sajilo.

This website

Download links on sajilo.fyi go through a counted redirect, then to GitHub. The count is a total per hour, platform, approximate country, and referring site. There is no row per person: no address, user agent, or identifier.

Contact

Questions about this policy: contact@sajilo.fyi. The app is open source at GitHub.