The short version.

Who this covers

This policy covers the Idea Magic Box apps for iPhone and Mac, the optional Magic Sync service, and this website. The controller is the person named in the Impressum.

This website

• No Google Analytics, Plausible, Fathom, or any other analytics tool.
• No tracking pixels, no session recording, no advertising cookies.
• Fonts are bundled with the page — the site makes no runtime request to Google Fonts or any other font CDN.
• The only third-party script is Cloudflare Turnstile, on the signup form, to keep bots out. It is a cookie-less CAPTCHA alternative and does not build an advertising profile of you. It loads from challenges.cloudflare.com.
• The site is hosted on Cloudflare Pages. Cloudflare processes your IP address to serve and protect the site, and keeps its own short-lived edge logs. Cloudflare acts as our processor.

The beta signup form

When you submit the form we store, in a Cloudflare D1 database:

• The email address you provide.
• Your answer to “what note app do you use today?”
• Which “when do ideas usually hit you?” options you ticked.
• A coarse country code (e.g. DE, US) derived by Cloudflare from your IP. We do not store your IP address.
• The browser user-agent string, to debug signup problems.
• The referring campaign tag, if you arrived through a tagged link.
• The timestamp, and whether you have been invited yet.

We use this only to run the beta: to invite you, and to understand which communities early users come from. We never sell it, share it, or use it for advertising. Retention: we delete the signup list no later than three months after the beta programme ends, and earlier on request. Legal basis: your consent, which you can withdraw at any time by emailing us.

The apps

• Voice transcription runs on your device with WhisperKit. The audio is never uploaded for transcription.
• AI analysis runs on your device with llama.cpp. No prompt is sent to a server.
• Your ideas are plain markdown files in a folder you choose. Files the app saves carry a small YAML header (id, created date, rating and similar); files you wrote yourself are adopted and never rewritten.
• No analytics SDK is embedded. The apps send no telemetry to us or to anyone else.
• Notifications and reminders are local, scheduled by the operating system on your device. Nothing is pushed from a server.

When the app does reach the network

Only when you ask it to, and only for these three things:

1. Downloading a model. Transcription and AI models are fetched from huggingface.co when you pick one in Settings. That request goes to Hugging Face, not to us, and carries whatever your network connection normally carries (your IP address, your user agent).
2. Magic Sync, if you switch it on for a box — see below.
3. Links you open from inside an idea.

Magic Sync (optional, off by default)

Sync is off until you create an account and enable it on a specific box. It is end-to-end encrypted: the key is derived from your password on your device (PBKDF2-SHA256), every file and every metadata change is encrypted with AES-256-GCM before upload, and files are stored under names that reveal nothing about them. We cannot read your ideas, and neither can Cloudflare. What the server does see is listed below.

What the sync server does hold

• Your account email address and a password hash.
• A record per device you connect (an identifier, a public key, a name, last-seen time) so devices can authenticate without your password.
• Per box: an identifier, a name you chose, size counters, and a change sequence number.
• The encrypted contents of the boxes you enabled, and an encrypted index of them.
• What that encrypted storage still shows: how many files a box holds and how large each one is, which of them are conflict copies, and when and how often anything is uploaded or changed.
• Standard request metadata at the network layer, including your IP address, for as long as Cloudflare's own logs keep it.

What the server cannot see: the text of your notes, your attachments, recordings and transcripts, the names of your files and folders, the list of files in a box, or what a change contains.

Processors

Sync runs on Cloudflare (Workers, R2 object storage, KV, Durable Objects) as our processor. Cloudflare is a US company with global infrastructure; transfers outside the EU rely on the European Commission's Standard Contractual Clauses. Because your ideas are encrypted on your device first, what crosses that border is ciphertext — apart from the account, device and box details listed above.

Deleting a sync account

Deleting your account removes the account record, the device records and every encrypted object belonging to it. Your local files are untouched — they are yours and they stay on your disk.

If you lose your password

End-to-end encryption cuts both ways. If you lose both your password and your recovery key, nobody — including us — can decrypt what is on the server. Keep the recovery key somewhere safe.

During the beta

• iPhone builds are distributed through Apple TestFlight. Apple collects installation, session and crash information and shows it to us in aggregate, and any feedback or screenshot you send through TestFlight reaches us with your name and email. That processing is governed by Apple's TestFlight privacy notice.
• Mac builds are a direct download from this site — a notarized app, no account, no App Store. Downloading it is an ordinary web request handled by Cloudflare.
• The weekly check-in emails go to the address you gave us and nowhere else.

Your rights

Under the GDPR you can ask us for a copy of the data we hold about you, have it corrected or deleted, restrict or object to how we use it, and receive it in a portable form. You can withdraw consent at any time, which does not affect processing that already happened. You also have the right to complain to a data protection supervisory authority.

In practice, the data we hold about you is a signup row and — if you use sync — an account row. Email privacy@ideamagicbox.app and we will handle it within 30 days.

Children

Idea Magic Box is not directed at children, and we do not knowingly collect data from anyone under 16.

Changes to this policy

If this ever meaningfully changes — a new processor, a new category of data, anything resembling analytics — we will email everyone on the beta list before the change takes effect, and this page will say when it was last updated.

Contact

General: hello@ideamagicbox.app. Data requests and deletions: privacy@ideamagicbox.app. Postal address and provider identification: Impressum.