What we hold, and what we do not.

Marzipan Labs LLC is a limited liability company registered in the State of Wyoming, United States. We are the controller of the personal data described in this policy.

For anything relating to your data — access, correction, deletion, or a complaint — write to hello@marzipanlabs.com. A person reads that address.

Our software is built so that the material that is actually personal to you stays on the hardware you own. Depending on the product, that includes:

• the entries, notes, records and documents you create;
• photographs and audio you capture inside a product;
• search indexes built from that content, including vector indexes used to find it;
• your settings and preferences.

It is held in the product’s own storage on the device, and we cannot read it. If you use your platform’s device backup, it is included there under that platform’s terms rather than ours. Removing the product deletes it.

Some features cannot be computed on the device alone. When you use one, the product sends our gateway the smallest amount of content that feature requires — for example the text you dictated, the photograph you asked us to interpret, or the question you asked — together with the technical data needed to serve the request.

We do not require an account. Our software does not ask for your name, email address, phone number or postal address, and we hold no profile of you. A request arrives authenticated as a genuine copy of our software, not as a named person.

Alongside the content of the request, our systems process:

• an anonymous device attestation issued by the platform, which proves the request comes from an unmodified copy of our software and not from a script;
• your IP address, used to route the response and to stop abuse, and not retained in our logs beyond what is necessary for that;
• the product and version making the request, and the outcome of it.

Request content is processed to produce your answer and is not stored by us afterwards as a record attached to you. We do not sell personal data, we do not share it with data brokers, and we do not use your content to train models of our own.

We keep the list short deliberately. Each of these acts on our instructions, under a contract, for the purpose described:

• Model providers. Requests that require a machine learning model are forwarded through an aggregator to the provider best suited to the task. They process the content of the request in order to return a response. Their handling is governed by their own terms, which is a factor in which providers we are willing to use.
• Infrastructure and network. Our gateway runs on managed hosting and is fronted by a content delivery network, which together process request metadata in order to deliver traffic and absorb attacks.
• Product analytics. See the next section.
• Marketplaces. Where a product is distributed through a marketplace, that operator handles distribution, payment, subscription management and crash reporting under its own privacy policy. We receive aggregate sales and performance reporting from it, never your payment details.

We measure how our software is used so that we can tell which parts work. This is event-level product analytics — screens opened, features used, errors encountered — recorded against a random identifier generated on the device. It is not linked to your name, your email address, or an advertising identifier.

We do not run advertising, we do not operate advertising trackers, and we do not participate in cross-app tracking. Where a product asks your permission before collecting analytics, declining does not reduce what it can do.

This site sets no cookies, runs no analytics, embeds no third-party scripts and has no contact form. Our host records standard server logs, including IP addresses, for security and for keeping the site online. The one external request the site makes is to a font service to load its typeface.

Where the GDPR applies to you, we rely on the following bases:

• Performance of a contract — processing the content of a request in order to deliver the feature you asked for.
• Legitimate interests — keeping our infrastructure secure, preventing abuse and fraud, and understanding in aggregate how our applications are used, balanced against your interests and rights.
• Consent — where an application asks for it before accessing your camera, microphone, photo library, location or analytics. You can withdraw it at any time in iOS Settings.
• Legal obligation — where we are required to retain something by law.

• Content of a request: processed and discarded. It is not retained as a record associated with you.
• Operational and security logs: retained for a short period — normally no more than 30 days — and then deleted.
• Aggregate analytics: retained while it remains useful, in a form that does not identify you.
• Correspondence with us: kept for as long as needed to deal with the matter and any follow-up.

Depending on where you live, you have some or all of the following rights: to know what we hold about you, to obtain a copy of it, to have it corrected, to have it deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent you previously gave.

Write to hello@marzipanlabs.com and we will respond within 30 days. Because we do not operate accounts, we may need you to help us identify what you are asking about; we will not ask you for more identifying information than the request requires.

Most of what our software holds about you is on your own device, and you can delete all of it at any moment by removing the product. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your national data protection authority.

We are a United States company, and our providers operate internationally. Data processed on our behalf may therefore be handled outside your country, including in the United States. Where data leaves the European Economic Area or the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses or an equivalent recognised safeguard in our contracts with those providers.

Our software is not directed at children and we do not knowingly collect personal data from anyone under 16. Age ratings are declared on each product’s marketplace listing. If you believe a child has provided us with personal data, write to us and we will delete it.

Traffic is encrypted in transit. Our gateway accepts requests only from software that has proved its authenticity using the secure element inside the device, and only when it arrives through our own edge network. No credential of ours is ever shipped inside a binary. No system is perfect; if you find a weakness in ours, we would rather hear from you than not — hello@marzipanlabs.com.

If this policy changes materially, we will update the date at the top of this page and, when the change affects how your data is handled, say so inside the affected applications. The current version is always the one published here.