Your privacy is important to us. It is Vanhux UG (haftungsbeschränkt)'s policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including via our app, Drypoint, and its associated services.
Drypoint is a privacy-first, local-first Markdown note editor for iOS, iPadOS, and macOS. It is built so that your content stays on your own device. There is no Drypoint account, no registration, and no Drypoint server or backend that stores your notes. We do not have a database of users, and we cannot see your notes.
Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name and email address), your devices, and payment details. As explained throughout this policy, the amount of personal information we actually receive is extremely limited — in practice, only what you send us if you choose to contact our support.
In the event our app contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our app.
This policy is effective as of 3 July 2026
Last updated: 3 July 2026
Drypoint is designed to collect as little as possible about you:
Because Drypoint has no account system and no backend, we do not automatically collect information about you or your device, and we do not collect the content you create. The only personal information we ever receive is information you voluntarily and knowingly provide to us — specifically, if you choose to contact our support by email.
The only situation in which we receive personal information is when you contact us — for example, by emailing our support address. In that case, the personal information we receive may include:
We use this information solely to respond to your enquiry and provide support. We do not use it for advertising, profiling, or any unrelated purpose.
The notes, folders, tags, and attachments you create in Drypoint are stored locally on your device. This content is never sent to us, and we have no ability to access, read, or collect it. Drypoint does not host or publish your content anywhere, and we claim no ownership of it.
If you turn on optional iCloud sync (see below), your content is synchronized through your own private Apple iCloud account — still not through us.
Drypoint offers an optional Sync feature, which is off by default and is available as part of a Pro subscription. If you turn it on, your notes and related data are synchronized across your own devices using your personal Apple iCloud account and Apple's CloudKit private database.
With iCloud sync, your data is stored in your own private iCloud, managed by Apple. There is no Drypoint server in the middle: we do not receive, store, or have the ability to read your synced content. Apple's handling of this data is governed by Apple's privacy policy. You can manage or delete this data through your Apple ID and iCloud settings at any time.
Drypoint includes optional AI features that help you work with your notes (for example, summarizing or rewriting text). AI features are opt-in and are off by default. Drypoint offers two modes, and in neither mode does your content pass through a Drypoint server.
On supported devices, Drypoint can use Apple's built-in on-device Foundation Models. When you use on-device AI, processing happens entirely on your device — nothing leaves the device, and nothing is sent to us or to any third party.
As an optional alternative, you may connect a cloud AI provider of your choice by pasting your own API key for that provider (for example, Anthropic Claude, OpenAI, Google Gemini, or xAI Grok). Your API key is stored only in your device's Keychain and is never sent to us.
When you invoke a cloud AI action, the relevant note text is sent directly from your device to the provider you selected, under that provider's own privacy policy and terms. Drypoint has no server in between: we do not proxy, receive, see, or store this data. Because you are using your own key with a provider you chose, that provider's handling of your data is governed by its privacy policy, and we encourage you to review it. You can disable AI features or remove your key at any time in the app.
Drypoint offers optional, on-device security features, including per-note encryption (using AES-GCM) and an optional app lock protected by biometrics or your device passcode. Encryption keys are stored in your device's Keychain and Secure Enclave and never leave your device. These features are off by default, and the associated keys and biometric data are never transmitted to us.
Images and files you add to your notes are stored locally on your device. If you have enabled optional iCloud sync, they are also stored in your own private iCloud account, as described above. Attachments are never sent to us.
Drypoint offers optional subscriptions to unlock certain features. All purchases are processed by Apple through the App Store using StoreKit. Apple handles all payment information; Drypoint never receives your payment details. We only receive Apple's confirmation of whether you currently have an active subscription, so the app can unlock the corresponding features on your device.
Drypoint does not include any analytics SDKs (such as Google Analytics or Firebase), does not use the device advertising identifier (IDFA), and does not include any third-party trackers. We do not track you across other apps or websites, and we do not build profiles about you. Because we do not track you, no App Tracking Transparency prompt is required.
Drypoint does not collect sensitive information or special categories of data. In particular, Drypoint does not collect health data and does not access Apple Health. Anything you write in your notes stays on your device (and, if you enable sync, in your own private iCloud) and is not collected by us.
Because your content stays on your device (and, if you enable sync, in your own iCloud account), the primary protection for your data is the security of your device and your Apple ID. We encourage you to use a device passcode and, where appropriate, Drypoint's optional app lock and per-note encryption.
For the limited personal information we do receive — such as a support email — we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. Although we will do our best to protect information you provide to us, we advise that no method of electronic transmission or storage is 100% secure and no one can guarantee absolute data security.
We keep personal information only for as long as we need it. Because your notes and content are stored on your own device (and, if enabled, your own iCloud), you control how long they are kept: deleting a note deletes it, deleting the app removes its local data, and you manage any iCloud data through Apple. We hold essentially no personal data about you on our side. Where you have contacted our support, we retain your correspondence only as long as necessary to handle your enquiry and for legitimate business or legal purposes, after which we delete or anonymise it.
We do not aim any of our products or services directly at children under the age of 13 and we do not knowingly collect personal information about children under 13.
Your control: Because your data lives on your device and, optionally, in your own iCloud account, you are in control of it. You can view, edit, and delete your notes and attachments directly in the app, and you can remove all local data by deleting the app. You manage any iCloud data through your Apple ID and iCloud settings.
Access, correction, and deletion: Since we hold essentially no personal information about you, most access, correction, and deletion requests can be fulfilled by you directly on your device. If you have contacted our support and would like us to delete your correspondence, you may request that using the details below.
Non-discrimination: We will not discriminate against you for exercising any of your rights over your personal information.
Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.
If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including any limited personal information we hold, among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may, to the extent permitted by applicable law, continue to use your personal information according to this policy, which they will be required to assume as it is the basis for any ownership or use rights we have over such information.
Our app may link to external sites that are not operated by us, and its optional features may connect to services you choose (such as Apple iCloud or an AI provider you configure). Please be aware that we have no control over the content and policies of those sites and services, and cannot accept responsibility or liability for their respective privacy practices.
At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy.
If the changes are significant, or if required by applicable law, we will take reasonable steps to notify you, for example through the app or on our website.
If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal information.
The GDPR distinguishes between organisations that process personal information for their own purposes (known as "data controllers") and organisations that process personal information on behalf of other organisations (known as "data processors"). We, Vanhux UG (haftungsbeschränkt), located at the address provided in our Contact Us section, are the Data Controller with respect to the limited personal information you provide to us directly, such as when you contact our support.
In practice, the only personal information we process is what you send us when you contact us. We do not collect your notes or usage data, we do not sell personal information, we do not use personal information for targeted advertising, and we do not track you. Where you contact us, we process your name and email address on the basis of your consent and our legitimate interest in responding to your enquiry and providing support. Where you make a purchase, Apple processes your payment; we only receive confirmation of your subscription status.
Because your content is stored on your own device and, optionally, in your own iCloud account, you act as the controller of that content. Apple acts as the provider of iCloud, and any cloud AI provider you configure with your own key acts as an independent provider under its own terms.
We do not transfer your notes or usage data, because we do not collect them. Any support correspondence you send us is handled by us as described in this policy. If you choose to enable optional services, such as iCloud sync or a cloud AI provider, any international transfer of that data is governed by Apple's or that provider's own terms and safeguards, respectively.
You have the rights to access, rectify, erase, restrict, and object to the processing of your personal information, as well as the right to data portability, under applicable law. Because we hold essentially no personal information about you beyond any support correspondence, most of these rights can be exercised directly on your device by managing or deleting your own content. For anything we do hold, you may contact us using the details in the Contact Us section, and we will respond in accordance with applicable law.
The following section includes provisions that comply with the privacy laws of these states (California, Colorado, Delaware, Florida, Virginia, and Utah) and is applicable only to the residents of those states. Specific references to a particular state (in a heading or in the text) are only a reference to that state's law and applies only to that state's residents. Non-state specific language applies to all of the states listed above.
We do not collect the content of your notes, we do not collect usage or analytics data, and we do not use the advertising identifier. We do not sell or share personal information, we do not use personal information for targeted advertising, and we do not track you across other apps or websites. Because we do not track you, we do not respond to browser "Do Not Track" signals, and in practice there is no cross-context behavioural data for such a signal to affect.
In the past 12 months, the only category of personal information we have collected is contact information (such as an email address) that you provide when you contact our support. We use this solely to respond to you. We have not sold or shared personal information for cross-context behavioural advertising.
Depending on your state, you may have rights to know, access, correct, and delete the personal information we hold about you, and to not be discriminated against for exercising those rights. Because we hold essentially no personal information beyond any support correspondence, most such requests can be satisfied directly on your device by managing your own content. To exercise any of these rights with respect to information we hold, please contact us using the details provided in this privacy policy.
For any questions or concerns regarding your privacy, you may contact us using the following details:
Vanhux Support
support@vanhux.com