Margent · legal information
Privacy Policy
Contents
1. About this policy
This policy explains what data Margent processes, why it is needed, where it is stored, and what controls are available to you. Margent is an app for a private library of thoughts, quotes, and notes.
The service and data processing are operated by Oleg Aleksandrovich Tuaev. For privacy questions, email hello@tuaev-dev.ru.
2. Local mode
You can use the main library features without an account. In this mode, quotes, notes, sources, tags, settings, and return history are stored on the device and in the shared app-and-widget group. Margent does not receive this data on its server until you sign in and use a feature that requires server processing.
Local data is removed through the app, when you delete the relevant entries, or when you delete the app from the device. Device and iCloud backups are controlled by you and Apple through their own settings.
3. Account data
After sign-in, Margent may process:
- your email address for sign-in with a one-time code;
- your Sign in with Apple identifier and email address, if Apple provides it;
- your name, username, bio, avatar option, and profile visibility settings;
- quotes, thoughts, notes, sources, tags, favorites, and archive for synchronization;
- return history and technical synchronization state;
- device type, time zone, app version, and last-active time;
- private Reading Circle data if the feature is available and you choose to use it;
- minimal technical logs and a request ID for security and diagnostics;
- the status of optional email subscriptions, the consent version, source, and time consent was given or withdrawn.
Margent does not receive your Apple ID password and does not store plaintext one-time codes, access tokens, or refresh tokens in logs. A one-time code remains valid for 10 minutes.
4. How data is used
- to create an account, sign you in, and protect the session;
- to synchronize your private library between your device and the server;
- to operate the profile, returns, export, and account deletion;
- to operate Reading Circle only after your explicit action;
- to prevent abuse, investigate errors, and provide support;
- to comply with mandatory legal requirements.
Margent does not sell personal data, show advertising, use third-party advertising identifiers, or track you across other companies’ apps and websites.
5. Optional email
Margent may send product news and useful materials only after your separate, explicit consent. The option is off by default, and refusing does not affect registration, sign-in, or app features. Requesting or receiving a one-time sign-in code does not constitute marketing consent.
To record your choice, we store the current subscription status, the consent-text version, its source, and the time it was given or withdrawn. You can withdraw consent in app settings or through the unsubscribe link in a marketing email. After withdrawal, new marketing emails stop; service emails such as a requested sign-in code may continue.
Your email address is not shared with advertising networks or data brokers and is not used to track you across other companies’ apps or websites. In Apple terminology, direct developer email falls under “Developer’s Advertising or Marketing,” even though Margent shows no third-party advertising and does not use tracking.
6. Providers
Some features use:
- Apple — the App Store, TestFlight, Sign in with Apple, and system backups under your settings;
- SamOtpravil / Mailganer — delivery of transactional sign-in-code emails and, with separate consent, Margent emails;
- rented server infrastructure — the Margent API and database.
As of this version, server infrastructure for account features is located in the Russian Federation. External providers may process the data they need outside your country. Each provider receives only the information required for the relevant function.
7. Retention and deletion
- account data is retained while the account is active or while it is needed to operate the service;
- plaintext email codes are not stored; hashes and security signals are used for a limited period;
- operational logs are retained only as long as needed for security and diagnostics;
- after account deletion, data is removed from the production database;
- deleted data may remain in protected backups for up to 30 days and is then removed by rotation;
- some information may be retained longer only where required by law or necessary to prevent abuse.
Detailed instructions are available on the Account deletion and data export page.
8. Your controls
In app settings, you can:
- edit profile and visibility settings;
- download a copy of server-side data;
- sign out;
- delete the account and associated data;
- enable or disable optional email.
You can also request access, correction, or deletion through support. We may ask you to verify ownership of the account, but we will not ask for your Apple ID password, sign-in code, or tokens.
9. Security and changes
Margent uses encrypted connections, server-side session validation, hashed refresh tokens, and sign-in attempt limits. Absolute security cannot be guaranteed for any internet service.
If data-processing practices change materially, this page and its version date will be updated. New features such as analytics, advertising, payments, or push notifications require a separate review of this policy.
10. Contact
Questions about data and privacy:
hello@tuaev-dev.ru