BoltType: Privacy & support

BoltType privacy policy

1. Local files and settings

BoltType for macOS requires no account and contains no analytics, advertising or tracking services. It reads and writes original TXT and Markdown files in your selected folder. A local SQLite index, bounded cache, settings and cursor/window state support search and editing. Labels and bookmarks are also stored in a metadata file within the notes folder. Folder access is retained through macOS sandbox permission.

This data is not sent to us. On-device processing serves the features you request; insofar as it is processing under our responsibility, the legal basis is Art. 6(1)(b) GDPR. Notes remain until you delete them via macOS Trash. Settings and index remain locally until removed. Uninstalling BoltType does not automatically delete original notes, metadata or backups.

2. Cloud folders and links

The macOS app integrates no direct Dropbox or iCloud file API. If you select a Dropbox, iCloud Drive or other synced folder, the provider software you configured handles synchronization, including the metadata file. That provider's terms and privacy policy govern storage, retention and possible international transfers. BoltType does not control those systems.

External links are handed to an application or browser only upon your action. DEVONthink links use the configured DEVONthink app. Opening our support website is covered by its separate website privacy policy.

2a. Optional Dropbox access on iPhone and iPad

The mobile version of BoltType is in development. When you choose “Connect to Dropbox”, you sign in to Dropbox with your own account and approve the access shown. BoltType does not require a separate user account. Your Dropbox plan and storage allowance apply to your files.

Sign-in uses OAuth with PKCE through the Dropbox SDK. You do not enter your Dropbox password in BoltType. The SDK manages access and refresh tokens in your device keychain. The app locally stores the Dropbox account identifier and the selected folder association. Permissions cover basic account information, reading file metadata, and reading and writing files. Dropbox calls access to existing folders “Full Dropbox”: this technical permission extends beyond the selected folder. BoltType uses it for folder selection and synchronization of the selected library.

The mobile app transfers file contents, names, paths, revision identifiers and library metadata directly between your device and Dropbox. This may include TXT/Markdown notes, images, PDFs, labels, bookmarks, projects and internal references. A local working copy, pending edits, comparison versions and conflict versions support offline editing and later synchronization. We operate no intermediary synchronization server and do not receive these contents or access tokens. Dropbox also receives technical connection data, such as your IP address.

Synchronization you request provides the app functionality (Art. 6(1)(b) GDPR insofar as processing is under our responsibility). Dropbox processes data under its own terms and privacy policy, including in the United States and other countries. That policy explains the applicable transfer mechanisms. Your OAuth approval is a technical access authorization and does not replace the provider’s privacy terms.

You may revoke the connection in your Dropbox account settings under connected apps. This does not automatically delete local copies or your Dropbox files. Local working copies, search indexes, history and conflict versions remain until the associated app data is removed; keychain entries may survive uninstalling the app. Delete or export your files separately as needed. Dropbox retention, deleted files, versions and backups depend on its service and your plan. iOS controls background execution; immediate or continuously running background synchronization is not guaranteed.

Alternatively, the mobile app can edit a folder you select in Files. In that case, the file provider handles cloud synchronization. The search index, image/PDF text recognition and note history are processed locally on the device. Using the Dropbox API is not AI text processing; BoltType does not send note contents to an AI service.

3. Support

We process information you voluntarily send to answer your enquiry, under Art. 6(1)(b) GDPR for contractual enquiries or Art. 6(1)(f) for our legitimate interest in effective communication. Email drafts created by BoltType include only app version, build number and macOS version as technical information; you can remove this before sending. Notes, filenames and folder paths are not automatically attached.

The form and mailbox use ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, as processor. No third-country transfer is intended for this support route; external email providers you use may process data differently. Enquiries are deleted after resolution unless statutory obligations or legal claims require longer retention. Read the form privacy information for recipients, necessary cookies, safeguards and retention.

4. Apple and optional diagnostics

Apple provides App Store distribution and, where applicable, TestFlight under its own terms. If you allow Apple to share crash reports or TestFlight feedback, we may receive technical diagnostics or your voluntary feedback for troubleshooting. BoltType has no additional analytics SDK. We use relevant support diagnostics only for troubleshooting (Art. 6(1)(f) GDPR) and delete them when no longer needed. Apple is separately responsible for its store and platform processing: Apple Privacy.

Optional Pro features are unlocked through Apple in-app purchases. The app checks purchase entitlements using StoreKit; payment details are processed by Apple and are not stored by BoltType. There is no developer-operated purchase or AI-consent server.

5. Your rights

Subject to GDPR conditions, you may request access, correction, deletion, restriction and portability, and object on grounds relating to your situation to processing under Art. 6(1)(f). Contact the controller above. You may complain to a supervisory authority, including LfDI Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany, poststelle@lfdi.bwl.de. You need not share notes or support data with us; insufficient information may prevent us from answering an enquiry. We do not perform automated decision-making or profiling.