Privacy, in plain language.

What stays on your device

Companies, vouchers, ledgers, inventory, payroll, attachments, credentials, settings, backups, AI conversation history and audit records stay in Total’s local data folder unless you deliberately export or share them.

When data can leave

• AI: only after you enable a provider and approve the visible context for a request. The selected provider receives that request under its own privacy terms.
• Support: only after you submit a case. The preview shows the message and any diagnostics, screenshot or company metadata you chose to include.
• Updates and downloads: the app and website contact the Total website and GitHub release service to check versions and fetch installers. They do not include book contents.
• Optional integrations: connected bank feeds, webhooks or compatible providers receive only the scope shown when you enable them.

Website data

The website receives ordinary server request data needed to deliver pages and prevent abuse. Support and feedback submissions contain the fields you enter. Total does not sell personal information or use third-party advertising trackers.

Retention and control

Active support cases are retained while they are being handled and for 90 days after resolution. Feedback suggestions, follows and related contact details are retained for up to 24 months after the last activity. Anonymous aggregate counts may be kept longer. A legal or security hold can temporarily pause deletion.

Request access or deletion at total@irminflow.com. We verify the case number and submission email, acknowledge the request, and normally complete deletion within 30 days. Deleting a case removes its message, optional diagnostics and screenshot together.

Security and changes

See the security page for safeguards and reporting. Material policy changes will be dated here; continued use after a change means the revised policy applies.