Privacy Policy

1. About this policy

This policy explains what data Margent processes, why it is needed, where it is stored, and what controls are available to you. Margent is an app for a private library of thoughts, quotes, and notes.

The service and data processing are operated by Oleg Aleksandrovich Tuaev. Postal address: 13 Konstantina Fedina Street, Moscow, 105215, Russia. For privacy questions, email hello@tuaev-dev.ru.

2. Local mode

You can use the main library features without an account. In this mode, quotes, notes, sources, tags, settings, and return history are stored on the device; on iOS, widget data is also available in the shared app-and-widget group. Margent does not receive this data on its server until you sign in and use a feature that requires server processing.

Local data is removed through the app, when you delete the relevant entries, or when you delete the app from the device. System backups depend on your platform and settings: device and iCloud settings on iOS, and Android backup settings on Android. They are not a substitute for exporting your data from Margent.

3. Account data

After sign-in, Margent may process:

• your email address for sign-in with a one-time code;
• the version and language of accepted terms, document fingerprint, and acceptance date; these records are erased with your account;
• your name, username, bio, selected profile symbol and color, and visibility settings;
• quotes, thoughts, notes, sources, tags, favorites, and archive for synchronization;
• return history and technical synchronization state;
• device type, time zone, app version, and last-active time;
• Circle names, descriptions, symbols, access modes, memberships, invitations, and join requests;
• thoughts you explicitly share in a Circle, thought replies, Resonated reactions, and private saves from the feed;
• reports, blocks, and minimum references to related content for safety review;
• feedback category, platform, message and, only when you provide them, contact email, device details, and one screenshot;
• minimal technical logs and a request ID for security and diagnostics;
• the status and audit history of optional email, profile-search, and Circle-directory consents.

Early TestFlight builds could link an account to a Sign in with Apple identifier. The current public version does not offer that sign-in method. A legacy link may be retained temporarily only to migrate an existing beta account or until it is deleted.

4. How data is used

• to create an account, sign you in, and protect the session;
• to synchronize your private library between your device and the server;
• to operate profile, returns, export, and account deletion;
• to operate Circles only after your explicit action;
• to prevent abuse, review reports, investigate errors, and provide support;
• to process voluntary feedback and improve the product;
• to comply with mandatory legal requirements.

A Circle can be private, request-to-join, or open. Only circles deliberately enabled by their owner can appear in the directory. Your private library, personal notes, and thoughts you did not share never appear there or in the shared feed. Saving another person’s thought creates a separate private copy in your library.

Margent does not sell personal data, show advertising, use third-party advertising identifiers, or track you across other companies’ apps and websites.

5. Profile search and Circle directory

Profile search and Circle directory listing require separate consents. Both are off by default and are not required for sign-in, synchronization, the private library, or a private Circle. You can withdraw either choice in settings.

The exact data made visible, its recipients, and the effect of withdrawal are described on the Profile search and Circle directory page.

6. Optional email

Margent may send product news and useful materials only after your separate, explicit consent. The option is off by default, and refusing does not affect registration, sign-in, or app features. Requesting or receiving a one-time sign-in code does not constitute marketing consent.

To record your choice, we store the current subscription status, the consent-text version, its source, and the time it was given or withdrawn. You can withdraw consent in app settings or through the unsubscribe link in a marketing email. After withdrawal, new marketing emails stop; service emails such as a requested sign-in code may continue.

Your email address is not shared with advertising networks or data brokers and is not used to track you across other companies’ apps or websites. In Apple terminology, direct developer email falls under “Developer’s Advertising or Marketing,” even though Margent shows no third-party advertising and does not use tracking.

7. Providers and processing location

Some features use:

• Apple — the App Store, TestFlight, and system backups under your settings;
• SamOtpravil / Mailganer — delivery of sign-in-code emails and, with separate consent, Margent emails;
• rented server infrastructure in the Russian Federation — the Margent API, database, backups, and protected support inbox;
• the operator’s Yandex Disk — storage of encrypted database backups; the decryption key is kept separately and is not uploaded to Disk;
• the mail provider for tuaev-dev.ru — voluntary support and legal email.

Russian users’ account data is initially recorded, organized, stored, updated, and retrieved in the Russian Federation. SamOtpravil publicly states that it stores and processes data in Russia; contractual terms govern its specific role.

Margent does not use foreign infrastructure for its API, database, Circles, reports, or feedback form. Delivering email to an address chosen by a user can involve that recipient’s mail provider, including a foreign provider, and is assessed separately for cross-border-transfer requirements. Apple independently processes App Store, TestFlight, and system-backup data under its terms; the current Margent release does not use Sign in with Apple or a third-party analytics SDK.

8. Retention and deletion

• account data is retained while the account is active or needed to operate the service;
• plaintext email codes are not stored; hashes and security signals are used for a limited period;
• operational logs are retained only as long as needed for security and diagnostics;
• feedback-form records are deleted by default within 180 days unless a documented legal or safety need requires longer retention;
• after account deletion, data is removed from the production database;
• deleted data may remain in protected backups for up to 30 days and is then removed by rotation;
• some information may be retained longer only where required by law or necessary to prevent abuse.

Detailed instructions are available on the Account deletion and data export page.

9. Your controls

In app settings, you can:

• edit profile and visibility settings;
• download a copy of server-side data;
• sign out;
• delete the account and associated data;
• enable or disable optional email;
• give or withdraw separate profile-search and Circle-directory consents.

You can also request access, correction, or deletion through support. We may ask you to verify account ownership, but we will not ask for your email password, sign-in code, or tokens.

10. Local notifications, security, and changes

If you choose, Margent can schedule a quiet local reminder on your device when a thought returns. The schedule is not sent to the server, no push token is created, and the private thought text is not included in the notification.

Margent uses encrypted connections, server-side session validation, hashed refresh tokens, and sign-in attempt limits. Absolute security cannot be guaranteed for any internet service.

If data-processing practices change materially, this page and its version date will be updated. New features such as analytics, advertising, payments, or push notifications require a separate review of this policy.

11. Contact

Questions about data and privacy: