Privacy Policy

Effective date: October 18, 2026
Last updated: October 18, 2026

This Privacy Policy describes how Femi Studio LC ("Tojuri," "we," "us," or "our") collects, uses, and shares personal information when you visit https://tojuri.com (the "Site") or use the Tojuri service (the "Service").

If you do not agree with this policy, please do not use the Site or the Service.

1. Who we are

Femi Studio LC is a Maryland limited liability company.

We are the controller of the limited personal information described in this policy: information about visitors to the Site and people who join the waitlist or write to us, and people who hold a Tojuri account.

Tojuri is local-first software. The App encrypts the files you choose to protect on your own computer before they leave it, and keeps them in cloud storage that belongs to you, under your own provider account. We hold no copy and we do not have your encryption key, so we cannot read your files.

So that your computer never has to keep a permanent storage key, the App asks our service for short-lived storage keys. Each one lasts an hour and works only on that computer’s own backup folder in your storage. It can add encrypted data, read it back, and mark it deleted, but it cannot permanently erase anything, and apart from checking the status of the Tojuri setup itself, it cannot reach anything else in your provider account. Because our service issues these keys, we could in principle obtain the same limited access. We do not, and what it would reach is encrypted with a key we never have. You can end this access at any time by removing the Tojuri setup from your provider account, and closing your Tojuri account stops new keys at once. Your storage also locks each backup for 180 days after it is made. In that time these keys, we, and everyday access to your provider account cannot change or delete it; only your own provider account’s administrator, using a deliberate override, can remove it early.

This policy covers the Site, your Tojuri account, and our communication with you; the files you protect are simply not ours to govern.

2. Information we collect

Information you provide to us:

  • Waitlist and contact information: your email address and whatever you choose to write to us.
  • Purchases: when you buy a plan, you pay Paddle.com, our reseller and Merchant of Record, on a checkout it runs. Paddle.com collects your name, email address, payment details, billing country and address, and your network (IP) address, to take the payment, work out tax, and prevent fraud. We never receive your card details.
  • Communications with us: support requests, emails, and feedback.

Information our service keeps when you use a Tojuri account:

  • Your account: your email address, an internal account number, and records of when you sign in. If you add a passkey, we keep only its public part; the private part stays on your device. Sign-in codes we email you expire within minutes.
  • Invite requests: the email address you enter on the Site, kept for up to 180 days. To limit repeated requests, we also keep a hashed form of your network address for up to two hours.
  • For each computer you pair: a public key the computer makes for itself (the private part never leaves the computer’s secure hardware), your storage provider account number, the names of your Tojuri storage locations, when the computer was paired or removed, and a record of each storage key issued or refused, with its time and outcome.
  • Security logs: the network (IP) address, time, and outcome of each request to our service, kept for 30 days.
  • Your plan: which plan you hold, its status and dates, and the customer, subscription, and transaction numbers Paddle.com gives us, so we can match a payment to your account. We do not keep your name, address, or payment details from a purchase.
  • Payment notifications: a record of each notice Paddle.com sends us about a purchase, renewal, cancellation, or refund, with its time and the result.

Our service never receives the names or contents of your files or folders, your encryption key, or your Recovery Kit.

Information the App keeps on your device and in your own storage (and we never receive):

  • The list of files and folders you choose to protect, your settings, and the record of what has been protected. All of it is stored in your computer's user library and stays there. Your encryption key is held in your device's Keychain, and the Recovery Kit the App gives you is yours to keep offline.
  • Your protected files, encrypted on your computer before they leave it, are written to cloud storage you own under your own provider account. That account, and the charges it carries, are between you and that provider. We are not a party to it. The provider receives only encrypted data that neither it nor we can read.

Information collected automatically:

  • Usage data: pages visited, features used, and interactions with the Site and Service.
  • Device and log data: IP address, browser type, operating system, and error logs.
  • Analytics: we use privacy-respecting analytics configured to operate without advertising cookies. We do not use third-party advertising trackers on the Site.
  • The payment page: when you open https://tojuri.com/checkout/ to pay, it loads the checkout of Paddle.com, which may set its own cookies and collect information about your device to complete the payment and prevent fraud. These are strictly necessary for the purchase. The rest of the Site does not load them.

3. How we use information

We use personal information to:

  • Provide, operate, maintain, and improve the Site and the Service;
  • Run the waitlist and tell you when Tojuri is available or meaningfully updated;
  • Set up and manage accounts, process payments, and send transactional messages;
  • Pair your computers, issue their short-lived storage keys, and stop those keys when you remove a computer or close your account;
  • Provide customer support;
  • Monitor for security, prevent fraud and abuse, and enforce our terms;
  • Comply with legal obligations.

AI processing. We run no AI processing on the files you protect, because we never receive them and the App has no AI feature. We do not sell personal information.

4. How we share information

We share personal information only with:

  • Subprocessors and service providers that help us deliver the Service (hosting, sign-in, email delivery, payments, analytics, error monitoring, and security). Tojuri accounts and the service that issues storage keys run on Amazon Web Services in the United States. Each is bound by contractual obligations to protect the information and use it only to provide services to us. None of them ever receives the files you protect, because we never hold them.
  • Paddle.com, our reseller and Merchant of Record. It sells you the plan, so for your purchase it is an independent controller under its own privacy policy at https://www.paddle.com/legal/privacy, not a service provider acting for us. We tell it which account a checkout is for, using an internal reference, and it tells us whether a payment, renewal, cancellation, or refund happened.
  • Legal and safety recipients, where required by law, subpoena, or to protect rights, safety, or the integrity of the Service.
  • A successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Who we work with, specifically. These are the providers that handle personal information for the Site and the Service:

  • Paddle.com: sells plans as our reseller and Merchant of Record, takes payments, works out tax, handles refunds, and prevents fraud. For your purchase it is an independent controller, as described above.
  • Amazon Web Services: Tojuri accounts, sign-in and its emails, the service that issues storage keys, and plan records, in the United States.
  • Vercel: hosts the Site, in the United States, and counts visits to the Site without cookies.

5. Data retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Waitlist emails are kept until you unsubscribe or ask to be removed, or until launch communications end. Invite requests are deleted after 180 days, and security logs after 30 days. Account, pairing, and storage key records are kept while your account is open and for up to three years after it closes, for security and to answer questions about your account. Plan records are kept while your account is open, and after it closes for as long as tax, accounting, and consumer law requires us to keep records of a sale. Payment notification records are deleted after about 13 months. Paddle.com keeps its own purchase records under its privacy policy. Retention of the files you protect is entirely in your hands: they live on your own device and in storage you own under your own provider account, and you can delete them from either at any time. We keep no copy to delete.

6. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the information, including encryption in transit, encrypted credential storage, access controls, and logging. The App encrypts the files you protect on your own computer before they leave it, and holds your encryption key in your device's Keychain. Files still on your device are covered by your device's own protections, such as FileVault when you enable it. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on where you live, you may have rights to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your information;
  • Receive a portable copy of your information;
  • Object to or restrict certain processing;
  • Opt out of the sale or sharing of personal information (we do not sell or share as those terms are defined under applicable US state laws);
  • Not be discriminated against for exercising these rights.

To exercise any of these rights, email privacy@tojuri.com. We will verify your request and respond within the timeframe required by applicable law. You may also authorize an agent to act on your behalf. If we deny your request, you may appeal by replying to our decision.

Residents of the EEA, UK, or Switzerland may also lodge a complaint with their local supervisory authority.

8. International transfers

We are based in the United States, and information is processed in the United States. Paddle.com processes the information it collects for a purchase in the United Kingdom, the United States, and other countries where it and its payment partners operate, under its own privacy policy and safeguards.

9. Children

The Site and the Service are intended for adults and business use and are not directed to anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact us at privacy@tojuri.com and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a revised "Last updated" date, and for material changes we will provide additional notice (such as email to account holders). Continued use of the Service after changes take effect constitutes acceptance.

11. Contact us

Femi Studio LC
Email: privacy@tojuri.com
Support: https://tojuri.com/start
1190 Winterson Rd, Suite 200 PMB 1049, Linthicum Heights, MD 21090, United States