Draft: this policy has not yet been reviewed by a lawyer.
Privacy Policy
Version 1.0 (draft). Applies to Letmark 1.0 for iPhone, iPad and Mac, and to this website.
In short: what you enter in Letmark is stored on your own devices. The developer has no server, no account system and no access to your data. The app collects nothing, and it does not track you.
Who this policy is from
“We” means the developer of Letmark. “The app” means Letmark on iPhone, iPad and Mac.
What the app stores
The app stores only what you enter or attach:
- Deals: deal names and addresses, prices, financing, rents, costs, assumptions, scenarios and notes.
- Leases: properties, units, leases, rents, deposits, renewal cases, letter templates, batch rent changes, and your tenants’ names, email addresses and phone numbers.
- Renewals: businesses and locations, obligations (such as licences, permits and policies) with their issuers, reference numbers, due dates, costs and notes, the documents you scan or import, renewal records, and the names, email addresses and phone numbers of the people responsible.
- Settings: your business name and currency, which modules are shown, the module you last used, your lease reminder lead times, and whether App Lock is on.
When you enter details about other people, such as tenants or the people responsible for an obligation, you are responsible for having their permission to keep those details.
Where it is stored
Your records are stored in the app’s own storage on your device.
- On iPhone and iPad, the app’s records and documents use the strongest file protection the system offers. They cannot be read while your device is locked.
- On Mac, they stay inside the app’s sandboxed container.
- Photos and scans you attach are reduced in size before they are saved.
iCloud
Letmark 1.0 keeps your records on the device where you entered them. Settings shows the notice “Stored on this device only”.
If a version of the app syncs through iCloud, that notice no longer appears, and this policy applies as follows. Your records are then also stored in the private database of your own iCloud account, so they appear on your other devices signed in to the same account. Apple stores that data under Apple’s privacy policy. We have no access to your iCloud account or its contents. Tenants’ and responsible people’s contact details, reference numbers and documents use iCloud’s encrypted fields. The app never uses iCloud’s public or shared databases. If you sign out of iCloud or turn it off for Letmark, the app keeps working with the records on the device.
What the app does not do
- It has no developer server and no account. There is no sign-in, password or token.
- It collects no data. There are no analytics, no crash reporting, no advertising and no advertising identifier.
- It does not track you across apps or websites, and it shares nothing with data brokers.
- It makes no network connections of its own. The only network traffic comes from Apple’s services: the App Store, for your subscription, and iCloud if a version of the app syncs through it.
- It does not sell or rent your data, because we never receive it.
In the App Store, the app’s privacy label is “Data Not Collected”.
Your subscription
Purchases are made and managed by Apple through the App Store. The app reads the state of your subscription from Apple, on your device, to decide whether editing is available. It does not store your subscription state itself. Apple shares sales and trial figures with developers as reports; those reports do not identify you to us. Apple’s handling of purchases is covered by Apple’s own terms and privacy policy.
Things that leave the app only when you send them
The app never sends anything by itself. Letters, reminder messages to responsible people, PDFs, reports and exports are shown to you first. They leave the app only when you send or save them through the system share sheet, Mail, Messages or a save panel. After that, the app you chose and the people you sent it to handle the data.
Files made for sharing are written to a protected temporary folder. They are deleted when the share sheet closes, or the next time the app opens.
Notifications, Spotlight and Calendar
- Notifications. Lease notifications show only a count, such as how many leases reach their act-by date. Renewals notifications show only the obligation’s title. Reference numbers and documents never appear in notifications.
- Spotlight. The app adds obligation titles to the search on your device so you can find them. It never adds reference numbers or documents.
- Calendar (optional). If you choose to add a due date to your calendar, the app writes an all-day event with the obligation’s title. It asks for write-only access, so it cannot read your calendar, and it cannot delete the events later. Delete them in Calendar if you no longer want them.
Permissions
The app asks for each permission only when you first use the feature that needs it. Every feature still works, or tells you why it cannot, if you say no.
| Permission | Used for |
|---|---|
| Notifications | Reminders at the act-by dates and lead times you set (Leases) and the reminder days you choose (Renewals). |
| Camera (iPhone and iPad) | Scanning a document to attach to an obligation. |
| Calendars, write-only | Adding an obligation’s due date to your calendar, if you choose to. |
| Face ID or Touch ID | App Lock, if you turn it on. Your device passcode works too. |
Photos and files are chosen in the system picker, which gives the app only the items you pick.
On-device suggestions
On devices with Apple Intelligence, Renewals can suggest an expiry date and reference number from a document you scanned. This uses only Apple’s on-device model; the document is not sent to any cloud service, Apple’s included. A suggestion is never saved until you have checked it on screen and confirmed it. When the model is not available, you enter the details yourself.
Export and erase
- Export. In Settings, you can export everything: one ZIP file with every record of every module, as CSV files, and all attached documents.
- Erase. In Settings, you can erase all data. After you type the confirmation, the app deletes every record and document of every module on the device, and in your iCloud private database if the app syncs there. It also removes every pending notification and every Spotlight item. Calendar events the app added must be deleted in Calendar.
- Deleting the app also deletes its data on that device.
This website
- It sets no cookies and uses no analytics, advertising, fonts, scripts or images from other sites. Its scripts, which only animate the pages, are served from this site.
- It has no forms, asks you for nothing and stores nothing in your browser.
- It is hosted by Vercel Inc. Like any web host, Vercel receives the technical details of each request, such as your IP address, the page asked for and your browser’s user agent, to deliver the page and protect the service. We use these details only to keep the site running and secure, and do not combine them with anything else.
- Links to Apple’s sites open those sites, which have their own privacy policies.
Children
Letmark is a business tool and is not directed at children.
Changes to this policy
If the way the app handles data changes, we will update this page before the version with that change is released, and change the version line at the top.
Contact
Questions about privacy can be sent through the contact details on the support page.