BoltType privacy policy

Updated: 3 October 2026

This policy covers BoltType on Mac, iPhone and iPad. Optional features depend on app version, operating system, device and language. The sections below distinguish local processing, cloud storage you choose and Apple system services.

1. Local files and settings

BoltType for macOS requires no account and contains no analytics, advertising or tracking services. It reads and writes original TXT and Markdown files in your selected folder. A local SQLite index, bounded cache, settings and cursor/window state support search and editing. Labels, bookmarks and persistent identifiers for internal links are also stored in a metadata file within the notes folder. Note history, the search index and image/PDF text recognition are processed on device. Local app data may be included in a device backup you enable. Folder access is retained through macOS sandbox permission.

I do not automatically receive this data. Transfers through storage routes you choose and optional Apple services are explained below. On-device processing serves the features you request; insofar as it is processing under my responsibility, the legal basis is Art. 6(1)(b) GDPR. Notes remain until you delete them via macOS Trash. Local settings, index and history remain until removed; the additional iCloud settings backup is described in section 2b. Uninstalling BoltType does not automatically delete original notes, metadata or backups.

2. Cloud folders and links

The macOS app integrates no direct Dropbox or iCloud file API. If you select a Dropbox, iCloud Drive or other synced folder, the provider software you configured handles synchronization, including the metadata file. That provider's terms and privacy policy govern storage, retention and possible international transfers. BoltType does not control those systems.

External links are handed to an application or browser only upon your action. DEVONthink links use the configured DEVONthink app. Opening the SuGreenX support website is covered by its separate website privacy policy.

2a. Optional Dropbox access on iPhone and iPad

BoltType is also available for iPhone and iPad. When you choose “Connect to Dropbox”, you sign in to Dropbox with your own account and approve the access shown. BoltType does not require a separate user account. Your Dropbox plan and storage allowance apply to your files.

Sign-in uses OAuth with PKCE through the Dropbox SDK. You do not enter your Dropbox password in BoltType. The SDK manages access and refresh tokens in your device keychain. The app locally stores the Dropbox account identifier and the selected folder association. Permissions cover basic account information, reading file metadata, and reading and writing files. Dropbox calls access to existing folders “Full Dropbox”: this technical permission extends beyond the selected folder. BoltType uses it for folder selection and synchronization of the selected library.

The mobile app transfers file contents, names, paths, revision identifiers and library metadata directly between your device and Dropbox. This may include TXT/Markdown notes, images, PDFs, labels, bookmarks, projects and internal references. A local working copy, pending edits, comparison versions and conflict versions support offline editing and later synchronization. I operate no intermediary synchronization server and do not receive these contents or access tokens. Dropbox also receives technical connection data, such as your IP address.

According to the Dropbox SDK privacy disclosures, Dropbox also processes the account identifier, interactions with its service and technical API call logs for this connection. Dropbox identifies service functionality, analytics and, for interactions, service personalization as purposes; these data are linked to the Dropbox account. An email address used to sign in to Dropbox is processed there for authentication. The app does not send local search terms to a Dropbox search API or upload dictation audio recordings to Dropbox. This third-party processing is separate from SuGreenX analytics; it does not give me an analysis of your note usage. The App Store privacy details account for the optional Dropbox route.

Synchronization you request provides the app functionality (Art. 6(1)(b) GDPR insofar as processing is under my responsibility). Dropbox processes data under its own terms and privacy policy, including in the United States and other countries. That policy explains the applicable transfer mechanisms. Your OAuth approval is a technical access authorization and does not replace the provider’s privacy terms.

You may revoke the connection in your Dropbox account settings under connected apps. This does not automatically delete local copies or your Dropbox files. Local working copies, search indexes, history and conflict versions remain until the associated app data is removed; keychain entries may survive uninstalling the app. Delete or export your files separately as needed. Dropbox retention, deleted files, versions and backups depend on its service and your plan. iOS controls background execution; immediate or continuously running background synchronization is not guaranteed.

Alternatively, the mobile app can edit a folder you select in Files. In that case, the file provider handles cloud synchronization. The search index, image/PDF text recognition and note history are processed locally on the device. Using the Dropbox API is not AI text processing. BoltType’s own AI writing assistance and the separate Apple system features are described in section 2c.

2b. iCloud backup of settings and device profiles

Independently of your notes folder, BoltType on Mac, iPhone and iPad uses Apple’s iCloud key-value store to back up and restore selected settings when an iCloud account is available. Transferred data includes random profile and installation identifiers, a device type with a short profile identifier suffix (such as “Mac · 12345678”), modification timestamps and revisions, selected writing, appearance, toolbar and history settings, and names and instructions of saved AI actions. Your personal device name or network hostname is not newly queried for this purpose. The locally selected profile UUID is a preference, not an access token; its selection no longer uses the keychain. An old keychain item may remain after an upgrade but is not read for this selection. Older profiles or backup records may contain device names saved previously.

Note text, search history, provisional AI suggestions, file paths, folder permissions and Dropbox access tokens are excluded from this settings backup. Text you enter into a saved AI instruction is, however, backed up as part of that instruction. Do not put passwords or confidential note passages there. “This device only” defines where a setting or action applies and does not turn off iCloud backup. Without an available iCloud account, new settings remain local; the app currently has no separate switch to fully disable this backup.

The purpose is the cross-device use and restoration you request (Art. 6(1)(b) GDPR insofar as processing is under my responsibility). Transfers use Apple’s iCloud infrastructure, not a SuGreenX server. I have no server access to these personal iCloud settings. Apple processes account and service data under its privacy policy and iCloud terms, which also explain international processing and safeguards. This policy does not promise end-to-end encryption for all settings data.

You can delete custom actions in the app. Older synchronization records and local migration copies may remain for restoration and conflict resolution; deleting an action or uninstalling the app is not confirmation that all iCloud copies have been deleted. The app currently has no function to delete all cloud profiles and historical synchronization records completely. Managing or deleting Apple account and iCloud data is governed by Apple’s account tools and privacy procedures. This does not automatically delete original notes or separately configured cloud folders.

2c. Dictionary synonyms and AI writing assistance

The included dictionary data are unpacked locally and searched on device. Neither dictionary providers nor I receive the search words or results of these dictionary searches; there is no online fallback service. Complete source, copyright and license notices, and editable source archives, are available offline in the app under “Dictionaries & Sources”. These notices govern the dictionary data independently of the app license. A source website is opened only when you follow its link.

In the version described here, BoltType’s own AI writing assistance and AI synonyms use only Apple’s local Apple Intelligence language model through Foundation Models. Execution requires macOS, iOS or iPadOS 26 or later, a supported device, Apple Intelligence enabled, the model ready and a supported language. An AI request starts only through your action. It processes the selected passage or word, limited text context and dictionary suggestions where relevant, and the selected or custom instruction. This request is not sent to an AI server for BoltType’s own writing assistance. A direct Private Cloud Compute route and other cloud AI providers are not enabled in this version.

AI suggestions are initially provisional and must be reviewed by you. Only “Replace” applies a change to the note, after which its usual storage route and any cloud folder synchronization apply. Provisional variants are excluded from iCloud settings backup. Instructions saved as actions are instead covered by section 2b. Technical AI diagnostics record request identifiers, lengths, lifecycle and error categories, but not selected note text, instructions or generated responses. Local processing serves the feature you request (Art. 6(1)(b) GDPR insofar as it is under my responsibility).

Apple’s system Writing Tools, Siri and Look Up are separate. Depending on the feature and your system settings, these may use Apple services, Private Cloud Compute, online search results or an AI extension you enable. The local-processing statement for BoltType’s own writing assistance does not apply to all such system features. See Apple’s notices for Apple Intelligence & Privacy and Siri, Dictation & Privacy. Apple Intelligence and extensions can be managed in system settings.

2d. Optional dictation on iPhone and iPad

The microphone is used only after you start dictation and grant system permission. The app’s dictation feature prefers local Apple speech recognition with an available language model. BoltType stores no audio recording; recognized text you apply becomes part of your note. A required model download is distinct from sending your speech for recognition.

Only after your additional approval of “Allow Apple online dictation” may online recognition send audio to Apple when local recognition is unavailable or you explicitly retry online. The app shows the recognition route in use. This permission concerns dictation, not AI writing assistance. You can turn it off in input settings and revoke microphone and speech recognition permissions in iOS/iPadOS privacy settings. Insofar as consent-based processing is under my responsibility, Art. 6(1)(a) GDPR applies; withdrawal does not affect the lawfulness of prior processing. Apple receives online recognition requests; its processing, retention, possible international transfers and your options are also governed by Apple’s speech recognition privacy notice. This permission is not copied to other devices through cross-device settings backup.

2e. Optional reminders, places and maps

On iPhone and iPad you can create time reminders and place notes. The app locally stores note and library identifiers, note titles, time or place name, coordinates, radius and state information for these features. With your location permission, current location is used to match places; background permission enables system-supported arrival and departure detection. BoltType records no movement history and does not send these place matches to me or a developer-operated server. These place data are excluded from iCloud settings backup but may be included in an enabled device backup.

Apple Maps is used for map display and place searches you initiate. Apple processes map requests and search terms under its Apple Maps privacy notice. This is separate from local place monitoring. Reminders use local system notifications after permission, with no developer-operated push server. Note titles and place names may appear on the lock screen depending on your notification settings.

Processing serves the reminder and place features you request (Art. 6(1)(b) GDPR insofar as it is under my responsibility). You can delete entries in the app, disable the place feature and revoke location or notification permissions in system settings. Without background permission, place checks may be limited to foreground use. Revoking a permission does not automatically delete app data or existing device backups.

3. Support

I process information you voluntarily send to answer your enquiry, under Art. 6(1)(b) GDPR for contractual enquiries or Art. 6(1)(f) for my legitimate interest in effective communication. Email drafts created by BoltType include only app version, build number and macOS version as technical information; you can remove this before sending. Notes, filenames and folder paths are not automatically attached to that draft. A runtime log you export separately may, however, contain technical identifiers, file paths or error details. Review it before sharing it voluntarily.

The form and mailbox use ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, as processor. No third-country transfer is intended for this support route; external email providers you use may process data differently. Enquiries are deleted after resolution unless statutory obligations or legal claims require longer retention. Read the form privacy information for recipients, necessary cookies, safeguards and retention.

4. Apple and optional diagnostics

Apple provides App Store distribution and, where applicable, TestFlight under its own terms. If you allow Apple to share crash reports or TestFlight feedback, I may receive technical diagnostics or your voluntary feedback for troubleshooting. BoltType has no additional analytics SDK. I use relevant support diagnostics only for troubleshooting (Art. 6(1)(f) GDPR) and delete them when no longer needed. Apple is separately responsible for its store and platform processing: Apple Privacy.

Optional Pro features are unlocked through Apple in-app purchases. The app checks purchase entitlements using StoreKit; payment details are processed by Apple and are not stored by BoltType. There is no developer-operated purchase or AI-consent server.

5. Your rights

Subject to GDPR conditions, you may request access, correction, deletion, restriction and portability, and object on grounds relating to your situation to processing under Art. 6(1)(f). Contact the controller above. You may complain to a supervisory authority, including LfDI Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany, poststelle@lfdi.bwl.de. Where processing relies on your consent, you may withdraw it at any time for the future without affecting the lawfulness of earlier processing. You need not share notes or support data with me; insufficient information may prevent me from answering an enquiry. I do not perform automated decision-making or profiling.