Markki Privacy Policy

1. Overview

Markki ("the App") is developed and published by Kynoss Studios ("we," "us," or "our"). Markki is a photo report app for iPhone (iOS 18 and later) for anyone documenting work with photos: property walk-throughs, project punch lists, compliance audits, equipment audits, before-and-after documentation, classroom critiques, art portfolio markup, training material, damage claims (vehicle / equipment / shipment / property), warehouse inventory checks, or anywhere you snap photos and need to send numbered notes as a clean PDF. Capture photos, drop auto-numbered callouts, optionally stamp them with the date and/or time, and produce a multi-photo PDF report with one cross-image legend.

This Privacy Policy explains what data Markki accesses, how that data is processed, and your rights regarding your information. We are committed to transparency and to protecting your privacy.

Markki operates entirely on your device. We do not operate servers, databases, or cloud services. We do not create user accounts. We have no mechanism to collect, receive, view, or store your personal data. The reports Markki produces exist solely on your iPhone, under your control.

2. Camera Access

• Camera frames are processed only when you explicitly tap the shutter to capture a photo. Live preview frames are not recorded.
• Captured photos are saved into the active report's local storage on your device. Markki does not save captured photos to your iOS Photos library unless you explicitly choose to (planned v1.x feature).
• Camera access is requested via the iOS permission prompt the first time you tap Capture. You can revoke access at any time in Settings > Markki.
• Camera frames are never transmitted off your device, never copied to any server, and never shared with any third party.

3. Photo Library Access

How Library Photos Are Used

• Selected photos are copied into the active report's local storage on your device (so removing the photo from your Photos library doesn't break your report).
• The photo's EXIF metadata (capture timestamp, GPS coordinates) is read and attached to the report for context.
• No photo data is ever transmitted off your device.

The PHPicker pattern means Markki does NOT request full photo library access (PHPhotoLibrary.requestAuthorization); only individual photos you pick are revealed to the app. This is the most privacy-preserving photo-selection pattern Apple offers.

4. Location Services

• Markki uses Apple's CoreLocation framework with "When In Use" authorization. Location is not requested in the background.
• Coordinates and the reverse-geocoded address are stored only inside the report on your device. They are not transmitted to any Markki server (we don't have one) and not shared with any third party.
• Reverse geocoding uses Apple's CLGeocoder, which sends coordinates to Apple's servers per Apple's CoreLocation documentation. Apple's privacy policy governs this lookup; Markki does not see or retain the request beyond the resulting address string.
• You can decline location access. Reports will still work without the address overlay; the cover page will show "Location not available" instead.
• You can revoke location access at any time in Settings > Markki > Location.

5. Data Storage & On-Device Processing

Reports, photos, callouts, and exported PDFs are stored locally on your device using Apple's SwiftData framework. This data is protected by:

• iOS Data Protection (encrypted at rest, tied to your device passcode)
• App sandboxing (only Markki can access its own data store)
• Standard iOS security architecture

What Markki Stores

Markki does not use:

• iCloud or any cloud storage (your reports are device-local; iCloud Backup picks up Markki's data only if you've enabled iCloud Backup at the OS level)
• Any third-party SDKs, frameworks, or libraries (Markki depends only on Apple's first-party frameworks)
• Analytics services (no Firebase, no Mixpanel, no Amplitude, etc.)
• Advertising SDKs or ad networks
• Crash reporting services
• Any form of user tracking or fingerprinting

6. Data Retention & Deletion

Retention Policy

• Reports, photos, and callouts are retained on your device until you delete them or delete the app.
• Generated PDFs that you've shared via iOS share sheet are subject to whichever destination's retention rules apply (your email provider, the recipient's device, etc.) — not Markki's.

Deletion

• Delete a report: Long-press a report in the Reports list and tap Delete. The report and its photos are permanently removed.
• Delete the app: Deleting Markki from your device permanently removes all reports, photos, callouts, and PDFs. There is no server-side data to delete and no account to close.
• If you want to preserve reports before deleting the app, export them as PDFs to Files or iCloud Drive first.

7. Data Sharing & Third Parties

• We do not sell your data.
• We do not share your data with third parties.
• We do not transmit your data off your device, except for two narrow cases described in this policy: (a) Apple's CLGeocoder reverse-geocoding lookup at capture time, and (b) Apple's StoreKit 2 purchase verification when you start a trial or buy a subscription/lifetime product. Both are handled by Apple under Apple's own privacy policy; Markki does not see, store, or share what you do at those endpoints beyond the immediate result (an address string; a purchase entitlement).
• We do not use third-party SDKs that could collect data.
• We do not serve advertisements.
• We do not engage in data mining or user profiling.
• We do not share data with parent companies, subsidiaries, or related entities (Kynoss Studios is an independent sole developer).

When you share a PDF via iOS share sheet, the destination you choose (Mail, Messages, AirDrop, third-party app) handles the file under its own privacy policy. Markki has no involvement in or visibility into what happens after the share.

8. Subscriptions & In-App Purchases

Markki uses Apple's StoreKit 2 framework for all purchases. Available products:

• Markki Pro Monthly — auto-renewable monthly subscription with a 3-day free trial
• Markki Pro Yearly — auto-renewable yearly subscription with a 3-day free trial
• Markki Lifetime — one-time non-consumable purchase, no trial

All three give you the same Pro feature set (unlimited reports, all templates, no watermarks). You can pick whichever payment shape fits how you work.

Privacy of Purchases

• Purchases are processed by Apple, not by Kynoss Studios. Apple's privacy policy and the App Store Review Guidelines govern the transaction.
• Markki receives only an entitlement signal from Apple (whether you have an active Pro subscription or have purchased the lifetime IAP). We do not see your name, email, payment method, or any other personal information.
• If you start a free trial and don't cancel before it ends, Apple will charge your iTunes account at the regular price. Manage subscriptions at iOS Settings > [your name] > Subscriptions.
• To restore a previous purchase, tap Restore Purchases on the paywall or in Settings.

9. Data Security

Markki relies on Apple's built-in security infrastructure to protect your data:

• Encryption at rest: All local data is protected by iOS Data Protection, which encrypts data using keys tied to your device passcode.
• App sandboxing: iOS prevents other apps from accessing Markki's data store.
• Minimal network exposure: Markki makes no Markki-server network requests. The only network calls are Apple's CLGeocoder (reverse-geocoding) and Apple's StoreKit 2 (purchase verification), both governed by Apple.
• No accounts: There are no credentials to steal, no passwords to breach, and no accounts to compromise.

10. Children's Privacy (COPPA)

Markki is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

Because Markki does not collect, transmit, or store personal information on any server, and because all data remains solely on the user's device, Markki does not create the data collection risks that COPPA is designed to address. Nonetheless:

• Markki does not collect personal information from any user, including children.
• Markki does not require or support account creation.
• Markki contains no advertising or social features.
• Markki does not transmit any data to Kynoss Studios or any third party.

If you are a parent or guardian and have questions about this policy, please contact us at kynossstudios@gmail.com.

11. Your Rights Under GDPR (European Economic Area)

If you are located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) provides you with specific rights regarding your personal data. We respect these rights, even though Markki's on-device architecture means we do not act as a data controller or processor of your personal data in the traditional sense — because your data never reaches us.

Legal Basis for Processing

To the extent any on-device processing constitutes "processing" under the GDPR, the legal basis is:

• Consent: You explicitly grant permission for camera, photo library, and location access through the iOS permission prompts. You may withdraw consent at any time via iOS Settings.
• Legitimate interest: Processing your data on your own device to provide the app's functionality directly to you.

Your Rights

• Right of access: All data is stored on your device and accessible to you at all times within the app.
• Right to rectification: You can edit any report, photo, or callout directly in the app.
• Right to erasure: You can delete reports individually or delete the app to remove all data.
• Right to restrict processing: You can revoke camera, photo library, or location permission at any time without affecting other app functionality.
• Right to data portability: Export any report as a PDF and save to Files, iCloud Drive, or share to any destination.
• Right to object: You can stop all data processing by revoking permissions or deleting the app.

Data Transfers

Markki does not transfer personal data outside your device, with the two narrow exceptions under Apple's control disclosed in section 7 (CLGeocoder reverse-geocoding; StoreKit 2 purchases). Apple's privacy policy governs those transfers.

Data Protection Officer

Due to the nature of our data processing (entirely on-device, no data collection), we are not required to appoint a Data Protection Officer. For any privacy-related inquiries, please contact us at kynossstudios@gmail.com.

12. Your Rights Under CCPA/CPRA (California)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights.

Information We Collect

Under CCPA/CPRA definitions, Markki processes the following categories of information on your device only:

• Photos and visual content you capture or import into a report
• Geolocation data attached to photos at capture time (if you grant location permission)

However, because all processing occurs on your device and we never collect, receive, or access this information, Kynoss Studios does not "collect" personal information as defined by the CCPA/CPRA.

Your Rights

• Right to know: This Privacy Policy describes all data the app processes. We do not collect additional data beyond what is described here.
• Right to delete: Delete reports individually or delete the app to remove all data.
• Right to opt out of sale: We do not sell your personal information. We never have and never will.
• Right to opt out of sharing: We do not share your personal information with third parties for cross-context behavioral advertising or any other purpose.
• Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

"Do Not Sell or Share My Personal Information"

Markki does not sell or share personal information. Because no data is transmitted from your device to us, there is no sale or sharing to opt out of. We fully comply with the CCPA/CPRA without requiring any user action.

13. Apple Platform Disclosures

In compliance with Apple's App Store Review Guidelines and platform requirements:

Camera, PhotoKit, and CoreLocation

• Markki uses the camera (AVFoundation) to capture photos directly into reports.
• Markki uses PhotoKit's PHPicker to let you import individual photos from your library — Markki does not request full photo library access.
• Markki uses CoreLocation ("When In Use") to attach GPS coordinates and reverse-geocoded addresses to reports; coordinates are not retained beyond the report.
• None of these inputs are transmitted off your device by Markki.

StoreKit 2

• Markki uses StoreKit 2 to offer subscriptions (with 3-day Introductory Offer trials) and a non-consumable lifetime IAP, all processed by Apple.
• Apple's Standard EULA governs the purchase relationship.

Required Reason APIs

Markki uses only Apple's first-party frameworks and does not access any APIs that require declared reasons beyond those already disclosed in this policy and in the app's App Store privacy nutrition label.

App Tracking Transparency

Markki does not track users across apps or websites owned by other companies. The App Tracking Transparency framework is not used because no tracking occurs.

App Privacy Nutrition Label

Markki's App Store privacy nutrition label accurately reflects that the app does not collect data linked to user identity and does not track users.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in the app's functionality or legal requirements. When we make changes:

• The "Last Updated" date at the top of this page will be revised.
• Material changes will be communicated through the app or its App Store listing.
• Continued use of Markki after changes constitutes acceptance of the updated policy.

We encourage you to review this policy periodically.

15. Contact Us

If you have questions about this Privacy Policy, your privacy rights, or Markki's data practices, please contact us:

• Email: kynossstudios@gmail.com
• Developer: Kynoss Studios
• Support Page: Markki Support

We will respond to privacy inquiries within 30 days.