FlexiMark

Privacy Policy

Effective October 3, 2026

FlexiMark is a note-taking app for the web (fleximark.fyi), Android and iOS. This policy explains what information FlexiMark keeps, why, and the choices you have. In short: your notes are yours. We use them only to store and sync them for you, we don't sell anything about you, and there are no ads or trackers.

What we store

• Account details: your email address and password. Passwords are stored only as a secure hash by our authentication provider; nobody can read them.
• Profile: the display name and profile picture you choose to add (optional).
• Your content: notes, folders, workspaces, handwriting, PDFs and their annotations, favourites and folder colours, so they sync between your devices. Locked notes are encrypted on your device with a password only you know: we store just the encrypted form (and the note's title), and can't read or recover them.
• Plan: if you buy FlexiMark Plus or Pro, which plan you have, whether it's active and when it renews or ends. Payment details (card numbers, billing address) go to our payment provider, never to us.
• Error reports: when something breaks in the app, the error message, where in the app it happened, the app version and your device and browser type, linked to your account if you're signed in, so we can fix it. Never your notes: text that could be content is blanked out first. Kept for 30 days. Turn them off in Settings → Privacy.
• Sharing: share codes you create, and who has joined them. People you share with see the shared items and your display name; you see the name and email of people who join your codes.
• Comments: comments you write on a note, and who you @mention. Everyone who can see that note sees them with your display name and picture.
• Published notes: a note you choose to publish to the web can be read by anyone who has its link, together with the images, voice notes or PDF in it. Published pages don't show your name or email, and ask search engines not to list them.

Your content is also stored on each device you use (in the app or the browser), so FlexiMark works offline. Signing out removes it from that device.

What we don't do

• No advertising, no analytics or tracking tools, and no selling or renting of your information.
• We don't read your notes. We access them only if you ask us to (for example to fix a problem), or if the law requires it.
• Handwriting recognition runs on your device (Android's on-device ML Kit model, Apple's Vision framework, or a recognizer built into the app); your handwriting isn't sent to us for recognition.

Services we use

• Supabase hosts accounts, the database and file storage (servers in the United States, region us-east-2). Data is encrypted in transit and at rest.
• Hostinger hosts the website and sends account emails (sign-up confirmation, sign-in links, password resets). Like most web hosts it keeps short-lived server logs, such as IP addresses and requested pages, for security and reliability.
• Lemon Squeezy sells FlexiMark Plus and Pro as the merchant of record: it processes payments, calculates tax and sends receipts, under its own privacy policy. It tells us your plan and subscription status, linked to your FlexiMark account.
• Anthropic (Claude) answers “Ask your notes” requests. Only when you use an AI action, the text it needs (the note, the selected text, or the notes that match your question) is sent to Anthropic to produce the answer. Anthropic doesn't use it to train its models. We keep only a count of AI actions per month. Locked notes are never sent.
• Resend sends the daily email about unread mentions and replies: it receives your email address and those comments to deliver it. Turn the email off in Settings → Privacy or with the link in any of them.
• Google Play / Apple deliver the mobile apps and may collect information under their own policies when you download them.

How long we keep it

We keep your account and content until you delete them. Items you move to the trash stay there until you empty it or delete them permanently. When you delete your account, your account and all of its content are deleted right away; copies may remain in our providers' encrypted backups for up to 30 days before they're overwritten.

Deleting your account

In FlexiMark, open Settings → Account & sync → Delete account. This permanently deletes your account, notes, files, workspaces, share codes, published links and comments; people you shared with lose access. See fleximark.fyi/delete-account for step-by-step instructions, including what to do if you can't sign in.

Your choices and rights

• See and edit everything you've stored in the app itself; export a backup any time (the ⋯ menu at the top of the sidebar → Export backup).
• Change your name or picture, or remove the picture, in Settings.
• Stop sharing, remove people from a share, or leave something shared with you, at any time.
• Stop publishing a note at any time; its link stops working straight away.
• Delete your account and data as described above.

Depending on where you live (for example in the EU, UK or California) you may have further rights, such as asking for a copy of your data. Contact us and we'll help.

Children

FlexiMark isn't directed at children under 13, and we don't knowingly collect information from them.

Security

Connections are encrypted (HTTPS). Each account can only reach its own data, enforced by the database itself, shared items are reachable only by the people you shared them with, and a published note only by people with its link. No system is perfectly secure, so please use a strong, unique password.

Changes

If this policy changes, we'll update it here and change the date at the top. Significant changes will be announced in the app.

Contact

Questions or requests: privacy@fleximark.fyi.