privacy.md

Privacy

Version 2026-09-27

MarkitoBar works fully on your Mac without an account. This page explains what data we handle when you use sync, the beta or the waiting list, and how to use your rights under Chile's personal data protection law (Ley 21.719).

Who is responsible

Jorge Epuñan, of Shipibo Studio (Chile), is responsible for the data MarkitoBar handles. For any question or request, write to ping@markitobar.cc.

Without an account

If you use MarkitoBar without signing in, your notes, photos and recordings stay on your Mac only. We receive nothing.

With a Google account

To sync we keep your email, your Google account identifier, the address of your profile picture, the date you accepted the terms and, for each Mac or browser signed in, its name, the app version and when it last connected. We never receive your Google password.

We keep a copy of the notes and attachments you sync only to bring them to your other Macs. We do not read, analyse or share them. A public link to a note exists only if you make it, and you can revoke it at any time.

During the beta

We keep which invitation group you came from, when you confirmed your place and, if you agree, your Google picture on the testers' wall.

The beta's telemetry is required and used for analysis only: app and macOS version, Mac model, language, which features are used, how long they take and errors. It is tied to a random identifier, not to your name or email, and never includes the contents of your notes, attachments, recordings, transcriptions, keys, or what you send to an AI provider. It is kept for up to 12 months.

Waiting list

If you leave us your email, we keep only the email, the language and the date, to write when a place opens. We delete it whenever you ask.

On the website

We use no advertising or tracking cookies. We only use the cookies needed to sign in, remember your language and finish signing up for the beta. We count visits and sign-ups from our server, without your IP address or anything that identifies you.

AI with your own key

If you set up an outside AI provider, what you choose to send goes straight from your Mac to that provider, with your key. We do not see it. Your key stays in your Mac's keychain.

Who helps us, and where

We use these providers, which process data on our behalf and outside Chile (mainly in the United States): Cloudflare (server, database and files), Google (sign-in), Resend (email) and PostHog (analysis of the beta and the website). They get only what they need for their job.

How long

Your account data and synced notes, for as long as you keep the account. Telemetry, up to 12 months. The waiting list, until we invite you or you ask to be removed. Deleting your account from the app erases what the server holds for it at once.

Your rights

You can ask to access your data, correct it, delete it, object to its processing, take it with you, or have it blocked. Delete your account from the app (Account & settings → Delete my account) or write to ping@markitobar.cc; we answer within the time the law sets. If you are not satisfied, you can complain to Chile's Personal Data Protection Agency.

Security

Everything travels encrypted (HTTPS). We store only cryptographic digests of sessions and invite codes, and files stay private, reachable only by your account.

Changes

If this policy changes, its version changes, and we tell you in the app or by email when the change affects you.

← MarkitoBar