← Asvalin

Privacy

Last updated 21 September 2026

Asvalin is a desktop app that runs on your own machine. Signed out, the only thing it sends anywhere is a check for a new version. Everything below describes what changes when you sign in, and what this website collects separately.

Who is responsible

Asvalin is made by the FileMap team. For anything in this policy, including requests to see or delete your data, write to yy@filemap.info.

The desktop app

When you are signed out

The app works fully offline. It does not send your files, file names, folder structure or canvas anywhere. The one exception is an update check: roughly every fifteen minutes the app asks GitHub whether a newer release exists. GitHub can see your IP address when that request is made, the same as visiting any website. Nothing else leaves your machine.

Diagnostic logs are written to a local file on your own computer to help you and us debug problems. They stay there. They are not uploaded, and we cannot read them unless you choose to send them.

When you sign in

Signing in is what turns on sync, shared canvases and the AI features. While you are signed in:

• Device presence. About every thirty seconds the app records that this device is running, storing a device identifier, the device name you gave it, the app version, your operating system platform and a timestamp. This is what makes your devices visible to each other.
• Sync. The canvas items and files you choose to sync are stored in our Supabase project so they can reach your other devices. Files you do not sync are not uploaded.
• Shared canvases. When you share a canvas or join someone else's, membership records connect your account to that canvas, and the contents of that canvas are visible to its other members. That is the point of the feature, but it is worth stating plainly.
• AI features. When you use the AI layer, the content you ask about is sent to our backend and on to the underlying model provider so it can answer. Do not put anything into the AI features that you would not want processed by a third-party model.
• Device control. Your signed-in devices can send each other commands, which is how you drive one machine from another. This is restricted at the database level to your own account: no other user can reach your devices. Staff holding administrative database credentials could technically do so, and we do not, but you should know the capability exists.
• Feedback. If you submit feedback from inside the app, the message you write is stored against your account so we can reply and fix things.

Signing out stops all of the above apart from the update check.

This website

• Waitlist. If you give us your email address, we store it in our own database and use it only to tell you when Asvalin is available. We do not sell it, and we do not pass it to any mailing-list company. Ask us and we will delete it.
• Analytics. We use Google Analytics to count visits and see which pages people read. This only runs if you accept it in the banner. Decline and no analytics cookies are set.
• Advertising. If you arrived here from a Google ad, and you accepted the banner, Google Ads records that the visit led to a signup so we can tell which ads work. This is a count, not a profile we build about you.
• Hosting. The site runs on Vercel, which keeps standard server logs including IP addresses for a short period as part of running the service.

Where your data is held

App and waitlist data live in a Supabase project, and the website runs on Vercel. Both mean data may be processed outside your own country, including in the United States. Where the law requires a transfer safeguard, we rely on the standard contractual clauses those providers offer.

How long we keep it

Synced canvas data and account records are kept while your account exists, and are removed when you ask us to delete the account. Waitlist emails are kept until launch or until you ask us to remove yours. Device presence records are overwritten continuously and hold no history beyond the last time each device was seen.

Your rights

If you are in the UK, the European Economic Area or another place with comparable law, you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email yy@filemap.info and we will action it. You also have the right to complain to your national data protection authority, though we would rather you told us first so we can fix whatever went wrong.

For the waitlist and for analytics, our legal basis is your consent, which you can withdraw at any time. For running the app itself when you are signed in, our basis is performing the contract you entered into by using it.

Children

Asvalin is not intended for children under 16, and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will update the date at the top and, for anything significant, tell account holders directly.