Privacy Policy

BuenaGames, LLC (“Buena”, “we”, “our”, “us”) operates this website (buenalabs.io), the mrkdwn application (“mrkdwn”), and our games. This policy explains what data we collect, how we use it, who we share it with, and the rights you have over your information. It applies to every product we publish unless a specific product tells you otherwise at the point of collection.

Per-title disclosures. Each app and game also publishes a privacy label on its store listing — Apple’s App Privacy card and Google Play’s Data safety section. Those labels describe that title specifically and are the authoritative summary for it; this policy describes our practices across the portfolio.

Local-first by design. mrkdwn stores your notes as plain Markdown files on your device. We do not have access to your note contents unless you opt into cloud sync, and even then notes are encrypted in transit and at rest by your sync provider.

1. Data We Collect

Account Information

If you create an account or sign in with Apple, we receive an opaque identifier and an optional relay email. We do not receive your real Apple ID email unless you choose to share it.

Anonymized Product Analytics

With your consent, mrkdwn sends anonymized usage events (feature usage, screen views, app version, OS version, language) to our analytics provider. These events do not include note contents, file names, or any personal content. You can disable analytics in Settings → Privacy at any time.

Crash Reports

With your consent, mrkdwn sends crash and error reports (stack traces, OS version, app version, anonymized device identifier) so we can fix bugs. Reports do not include note contents.

Optional Sync Data

If you enable cloud sync, your notes and metadata are transmitted to your chosen sync provider (currently Apple iCloud Drive; Google Drive is planned). Sync data is encrypted in transit. We do not operate our own sync servers and never receive plain-text note contents.

AI Requests

When you use AI features, the text you send to the AI (your prompt and any selected note content) is transmitted to your chosen AI provider (Anthropic by default; OpenAI and others on request). We never store these requests on our servers. The provider’s privacy policy governs their handling.

Device Information

We collect non-identifying device information (model, OS version, app version, language, screen size) along with analytics and crash reports. In mrkdwn and on this website we do not collect persistent device identifiers (IDFA, advertising IDs) and do not fingerprint devices. Where a game does, it is described under Advertising Identifiers below and on that game’s store listing.

Website Visits

When you visit this website, we collect aggregated, anonymized page views and referrers. We do not use tracking cookies or third-party advertising trackers.

Forms You Submit

The support form on /support and the deletion form on /data send what you type — your name, email address, and message — to us by email. That message passes through Cloudflare, which serves this site, and Resend, which delivers the mail. We keep it as support correspondence; see Data Retention below.

Both forms use Cloudflare Turnstile to tell people from bots. Turnstile checks the request rather than profiling you, sets no tracking cookie, and does not follow you across sites.

Game Data

When you play one of our games we collect the data needed to run it and to fix it when it breaks:

Progress and settings — level, score, unlocks, and preferences, so your progress survives a reinstall or a new device
Gameplay events — anonymized events such as level started, level completed, and session length, used to balance difficulty and find where players get stuck
Purchase records — a receipt identifier from the store and what it entitles you to, so purchases can be restored. We never receive your card number or billing address; the store handles payment
Technical diagnostics — device model, OS version, game version, language, and crash traces

We do not collect the contents of your device, your contacts, your photos, your precise location, or your microphone or camera input.

Player Accounts

Where a game offers an account of its own, we store an account identifier, your display name, and the progress tied to it. Where a game uses Game Center or Google Play Games Services instead, the platform holds that identity and we receive only an opaque player identifier. You can delete either at any time — see Data Deletion.

Advertising Identifiers

No Buena game currently serves advertising or reads your device’s advertising identifier. If that changes for a title, we will say so here and on that title’s store listing before it ships.

Where a game does show advertising, the advertising SDK may access your device’s advertising identifier — the IDFA on Apple platforms, the Advertising ID on Android — to limit repeat ads and to measure whether an ad led to an install. On Apple platforms we ask for your permission through the system App Tracking Transparency prompt before any tracking occurs, and we honour your answer. On Android you can reset or delete your Advertising ID in system settings. Declining does not stop you playing; you would still see ads, but they would not be personalised. Games rated for children never serve personalised advertising.

2. How We Use Your Data

Service operation — authenticate accounts, sync notes, deliver AI features you request
Gameplay — save your progress, restore purchases, and run the features you use
Game balance — understand where players get stuck or drop off, and tune difficulty
Fair play — detect cheating, exploits, and automated play, and enforce our Terms of Service
Product improvement — understand which features are used and where users encounter problems
Support — respond to your inquiries and diagnose issues you report
Legal compliance — meet obligations under applicable laws

We never sell your personal information or use it for behavioral profiling. mrkdwn and this website carry no advertising of any kind, and no Buena game currently serves advertising. Should a game ever carry ads, it will be disclosed on that game’s store listing and under Advertising Identifiers above.

3. Third-Party Processors

We use the following service providers to operate Buena. Each is bound by their own privacy policy and our data processing agreements.

Processor	Purpose	Data Handled	Policy
Anthropic	AI writing assistance (Claude)	AI prompts you send	View
Apple	Sign in with Apple, iCloud Drive sync, App Store purchases, Game Center	Account identifier, synced files, receipt identifiers, player identifier	View
Sentry	Crash and error reporting	Stack traces, device info	View
Amplitude	Anonymized product analytics	Event names, device info (no content)	View
OpenAI	Optional AI provider (user choice)	AI prompts you send	View
Google	Optional Google Drive sync (planned), Google Play purchases, Play Games Services	Synced files (you control), receipt identifiers, player identifier	View
Cloudflare	Hosting, and bot protection on our forms (Turnstile)	Request metadata, form submissions in transit	View
Resend	Delivering form submissions and newsletter email	Name, email address, and message you submit	View

We do not sell, rent, or trade your personal information. We share data only:

With the processors listed above, strictly for the purposes described
To comply with a valid legal request, court order, or government investigation
To protect the rights, property, or safety of Buena, our users, or the public
In connection with a merger, acquisition, or asset sale (with notice to you)

5. Your Rights

If you reside in the EEA, UK, or Switzerland, you have the right to:

Access the personal data we hold about you
Rectification of inaccurate or incomplete data
Erasure (“right to be forgotten”) — see our Data Deletion page
Portability — export your data in a machine-readable format
Restriction of processing in certain circumstances
Object to processing based on legitimate interests
Withdraw consent at any time
Lodge a complaint with your local data protection authority

CCPA (California Residents)

If you reside in California, you have the right to:

Know what personal information we collect, use, disclose, and sell
Delete personal information we collect from you
Opt out of the sale of personal information — we do not sell your personal information
Non-discrimination for exercising your CCPA rights

How to Exercise Your Rights

See our Your Choices page for self-serve controls, or email privacy@buenalabs.io. We will respond within 30 days.

6. Data Security

Account credentials are stored in your platform’s secure enclave (Apple Keychain on iOS/macOS, Android Keystore, Credential Manager on Windows)
API keys you provide for AI services never leave your device — they are transmitted only to the AI provider you selected
Synced notes are encrypted in transit and at rest by your sync provider (iCloud Drive uses AES-128)
Web publishing (when launched) will use end-to-end encryption — share links contain the decryption key in the URL fragment, never sent to our servers
We never store or transmit plain-text passwords

7. Data Retention

Data Type	Retention
Account data	Until you delete your account
Anonymized analytics	90 days
Game progress	Until you delete your account or the game’s data
Gameplay analytics	90 days
Crash reports	30 days
Billing records	7 years (tax/legal requirement)
Support correspondence	2 years from last contact
Backups	Purged within 30 days of primary deletion

Detailed deletion procedures are documented on our Data Deletion page.

8. Children’s Privacy

Every title we publish carries an age rating on its store listing — an Apple age rating on the App Store, and an IARC rating (ESRB, PEGI, USK, or your local board) on Google Play. The rating shown on the listing is the authoritative one for that title and region.

This website and mrkdwn are not directed to children under 13 (or 16 in the European Economic Area), and we do not knowingly collect personal information from them.

Our games are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13, and we do not use any player’s data for advertising or profiling. Should we publish a title directed to children, it will collect only what is needed to run the game, serve no personalised advertising, and comply with the Children’s Online Privacy Protection Act (COPPA) and the Google Play Families policy — and this section will be updated before that title ships.

If we learn that we have collected information from a child without parental consent, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with personal information, email privacy@buenalabs.io. We will verify the request and delete the information promptly. See also our Parent’s Guide for the purchase, screen-time, and privacy controls each platform offers.

9. International Data Transfers

BuenaGames, LLC is registered in the United States (Delaware). When you use our services, your data may be processed in the United States and in countries where our processors operate. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) and the processor’s own approved transfer mechanisms.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be announced with at least 30 days’ notice via an in-app banner and, if you have an account, by email. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact Us

For privacy questions, data requests, or to exercise your rights:

Email: privacy@buenalabs.io
Support: /support
Mailing address: BuenaGames, LLC, Delaware, USA (full address available on request)

Our games are covered by this policy. Player support is at /support.

EU/UK representative: Currently not appointed (we will appoint a representative once required by user volume thresholds under GDPR Article 27).