Privacy Policy

Buena Labs Inc. ("we", "our", "us") operates this website (buenalabs.io) and the mrkdwn application ("mrkdwn"). This policy explains what data we collect, how we use it, who we share it with, and the rights you have over your information.

Local-first by design. mrkdwn stores your notes as plain Markdown files on your device. We do not have access to your note contents unless you opt into cloud sync, and even then notes are encrypted in transit and at rest by your sync provider.

1. Data We Collect

Account Information

If you create an account or sign in with Apple, we receive an opaque identifier and an optional relay email. We do not receive your real Apple ID email unless you choose to share it.

Anonymized Product Analytics

With your consent, mrkdwn sends anonymized usage events (feature usage, screen views, app version, OS version, language) to our analytics provider. These events do not include note contents, file names, or any personal content. You can disable analytics in Settings → Privacy at any time.

Crash Reports

With your consent, mrkdwn sends crash and error reports (stack traces, OS version, app version, anonymized device identifier) so we can fix bugs. Reports do not include note contents.

Optional Sync Data

If you enable cloud sync, your notes and metadata are transmitted to your chosen sync provider (currently Apple iCloud Drive; Google Drive is planned). Sync data is encrypted in transit. We do not operate our own sync servers and never receive plain-text note contents.

AI Requests

When you use AI features, the text you send to the AI (your prompt and any selected note content) is transmitted to your chosen AI provider (Anthropic by default; OpenAI and others on request). We never store these requests on our servers. The provider's privacy policy governs their handling.

Device Information

We collect non-identifying device information (model, OS version, app version, language, screen size) along with analytics and crash reports. We do not collect persistent device identifiers (IDFA, advertising IDs) and do not fingerprint devices.

Website Visits

When you visit this website, we collect aggregated, anonymized page views and referrers. We do not use tracking cookies or third-party advertising trackers.

2. How We Use Your Data

• Service operation — authenticate accounts, sync notes, deliver AI features you request
• Product improvement — understand which features are used and where users encounter problems
• Support — respond to your inquiries and diagnose issues you report
• Legal compliance — meet obligations under applicable laws

We never use your data for advertising, behavioral profiling, or sale to third parties.

3. Third-Party Processors

We use the following service providers to operate Buena Labs. Each is bound by their own privacy policy and our data processing agreements.

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only:

• With the processors listed above, strictly for the purposes described
• To comply with a valid legal request, court order, or government investigation
• To protect the rights, property, or safety of Buena Labs, our users, or the public
• In connection with a merger, acquisition, or asset sale (with notice to you)

5. Your Rights

GDPR (European Economic Area, UK, Switzerland)

If you reside in the EEA, UK, or Switzerland, you have the right to:

• Access the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure ("right to be forgotten") — see our Data Deletion page
• Portability — export your data in a machine-readable format
• Restriction of processing in certain circumstances
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

CCPA (California Residents)

If you reside in California, you have the right to:

• Know what personal information we collect, use, disclose, and sell
• Delete personal information we collect from you
• Opt out of the sale of personal information — we do not sell your personal information
• Non-discrimination for exercising your CCPA rights

How to Exercise Your Rights

See our Your Choices page for self-serve controls, or email privacy@buenalabs.io. We will respond within 30 days.

6. Data Security

• Account credentials are stored in your platform's secure enclave (Apple Keychain on iOS/macOS, Android Keystore, Credential Manager on Windows)
• API keys you provide for AI services never leave your device — they are transmitted only to the AI provider you selected
• Synced notes are encrypted in transit and at rest by your sync provider (iCloud Drive uses AES-128)
• Web publishing (when launched) will use end-to-end encryption — share links contain the decryption key in the URL fragment, never sent to our servers
• We never store or transmit plain-text passwords

7. Data Retention

Detailed deletion procedures are documented on our Data Deletion page.

8. Children's Privacy

mrkdwn is not directed to children under 13 (or 16 in the EEA), and we do not knowingly collect personal information from them. If we learn that we have collected information from a child without parental consent, we will delete it promptly. If you believe a child has provided us with personal information, please contact privacy@buenalabs.io.

9. International Data Transfers

Buena Labs Inc. is registered in the United States (Delaware). When you use our services, your data may be processed in the United States and in countries where our processors operate. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) and the processor's own approved transfer mechanisms.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be announced with at least 30 days' notice via an in-app banner and, if you have an account, by email. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

For privacy questions, data requests, or to exercise your rights:

• Email: privacy@buenalabs.io
• Support: /support
• Mailing address: Buena Labs Inc., Delaware, USA (full address available on request)

EU/UK representative: Currently not appointed (we will appoint a representative once required by user volume thresholds under GDPR Article 27).