Privacy Policy
Graphoscope is a native application for Mac, iPhone and iPad for viewing and editing Markdown files. This policy explains what data the app handles and how. In short: Graphoscope does not collect, sell, or share your data, and we cannot read your documents. Your files stay on your devices and in your own iCloud account. The one server we run is an optional relay for documents you send from Claude Code — encrypted end to end, so it cannot read them either.
Information we do not collect
Graphoscope does not include analytics, advertising, tracking, or accounts. Your documents are read from and written to your own devices (and, if you choose, your own iCloud account or remote servers via SSH that you configure). We have no access to any of it. The only exception is the optional Claude Code relay described below, which handles documents only in encrypted form.
iCloud sync (optional)
Notes you pin are synchronized between your devices through your own iCloud account (Apple's CloudKit private database and iCloud Drive). This data is stored by Apple under your Apple Account; we have no access to it. You can turn sync off in the app's Settings.
Receiving documents from Claude Code (optional)
If you turn on Receive from Claude Code in Settings, your app creates an inbox on our relay
server (inbox.graphoscope.app, hosted by Hetzner in the European Union). No account, name
or e-mail is involved. The tool you install for Claude Code encrypts each document on your Mac
(HPKE, RFC 9180) for a key that only your devices hold, in your iCloud Keychain. Your iPhone, iPad
or Mac then downloads it, decrypts it and saves it in iCloud Drive.
- What the relay stores: an anonymous inbox identifier; your inbox's access tokens, only as one-way hashes; each document as an encrypted envelope it cannot open, with its size and dates; and, for each of your devices, a device identifier, its name, platform and the Apple push token used to tell it a document arrived.
- What it never sees: the title or any of the content of your documents.
- The tool that sent a document can see whether it was delivered, and the name of the device that imported it (e.g. “iPhone”).
- How long: an envelope is erased as soon as one of your devices has imported it (at the latest 30 days after it was sent, if no device ever does); the record that it was delivered is kept 7 days; an inbox unused for a year is deleted.
- Deleting it: Turn off and delete the inbox in Settings removes the inbox, everything waiting in it and your registered devices from the relay at once, and removes its keys from your iCloud Keychain.
- Server logs record technical events (an inbox or document identifier, a size, an IP address for rate limiting) and are not used for anything else.
Google Calendar (optional)
Graphoscope can optionally connect to your Google Calendar. This is off by default and is
enabled only if you connect it from the app's Settings. When connected, the app requests the
https://www.googleapis.com/auth/calendar.events scope and uses it solely to:
- read events from your calendar to display them (read-only) alongside your tasks, so you can plan around them; and
- create, update, and delete calendar events that correspond to tasks you schedule in the app
(events prefixed with
[TASK]).
Limited Use disclosure. Graphoscope's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is used only to provide the in-app calendar features described above. It is not transferred to any third party, not used for advertising, and not used to build profiles. No humans read it.
Where your Google data lives
- Your Google authentication tokens are stored locally in the macOS Keychain on your device.
- Calendar events fetched for display are held in memory while the app runs and are not persisted to any server.
- A small local mapping (which task corresponds to which calendar event) is stored on your device only, to keep tasks and events in sync.
- Nothing is sent anywhere except directly between your Mac and Google's own APIs.
Revoking access
You can disconnect Google Calendar at any time from Graphoscope's Settings, which removes the stored tokens. You can also revoke access at myaccount.google.com/permissions.
Children
Graphoscope is a general-audience productivity app and is not directed to children under 13. We do not knowingly collect data from them.
Changes
If this policy changes, the "Last updated" date above will change and the new version will be posted on this page.
Contact
Questions about this policy: styves@graphoscope.app.