Privacy Policy

Last Updated: October 8, 2026

Introduction

MDash, formerly published as “MarkdownEditor” (“we,” “us,” “our,” or “Developer”), is committed to protecting your privacy. MDash is a local-first Markdown notes app — your notes are stored on your device, and nothing is sent to any server we operate. The only information that reaches us is anonymous crash and hang reports, which never contain your notes (see Section 1.6). If you purchase MDash Pro and enable iCloud sync, your notes are additionally synchronized to your own private iCloud database, operated by Apple. This Privacy Policy explains what information is involved when you use our application for Apple devices — iPhone, iPad, Mac, Apple Vision Pro, Apple Watch, and Apple TV (the “Application”).

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use the Application.

1. Information We Collect

1.1 Information You Create and Store

Notes: All notes you create in MDash are stored on your device in a local database inside the Application’s app group container. Notes are not stored as user-visible files and are not accessible through the Files app. We have no access to this content, and it does not leave your device unless you explicitly export or share it, or you enable iCloud sync (see Section 1.3).

Photo Attachments: Photos you add to notes (from the camera or your photo library) are stored as files in the same app group container. MDash only accesses the specific photos you pick; it does not scan your photo library.

Sketches: A sketch you draw in a note is saved as an image file in the same app group container, with the strokes needed to edit it again stored inside that file. Like photos, sketches are read by on-device text recognition so you can search your handwriting (see below).

Note Reminders: If you set a reminder on a note, its schedule (time, date, repeat, snooze and when you last marked it done) is stored with that note in the local database. The reminder is delivered as a notification scheduled on your device.

Library Organization: Folders (with their colours and icons), smart folders, tags, pins, note creation and modification dates and your chosen sort order are stored in the same local database.

Version History: Earlier versions of your notes are kept in the local database on your device so you can restore them. Version history is never synchronized and never leaves your device.

Text Recognized in Photos and Scans: To let you search the text inside photos and scanned documents, MDash runs Apple’s on-device text recognition (the Vision framework) on the photos you attach. Recognition happens entirely on your device; the recognized text is stored alongside the photo in the local database. Document scanning uses the camera only while the scanner is open, and only the pages you keep are saved.

Locked Notes: If you lock a note, MDash asks iOS, iPadOS, macOS or visionOS to confirm it is you (Face ID, Touch ID, Optic ID, or your device passcode or password) before showing it. Authentication is performed by Apple’s operating system; MDash never receives or stores your face, fingerprint, iris data or passcode. On your device a locked note is hidden behind that check, protected by the operating system’s standard app sandbox and data protection rather than by a separate MDash encryption key. Locked notes are left out of widgets and of the Apple Watch and Apple TV readers.

Widgets: Home Screen widgets read note titles, short excerpts, checklist items, folder and tag names and note counts directly from the local database on your device. Locked and trashed notes are never shown. Ticking a checklist item in a widget saves the change to that note like any other edit. The Reminders widget shows upcoming reminders, and tapping Done in it records that reminder as done in the local database.

Siri, Shortcuts and Quick Capture: When you use MDash’s Siri and Shortcuts actions (such as Create Note or Capture to Inbox), the text you provide is written as a new note into the local database. Apple processes your Siri requests under its own privacy policy.

Importing Notes: When you import files, folders, Obsidian vaults, Apple Notes exports, TextBundle/TextPack packages or Bear backups, MDash reads only the files you choose, on your device. Nothing is uploaded during import.

Notifications: Note reminders, optional weekly reminders and feature tips, and the optional Deals & sales notification about MDash Pro sales are all scheduled locally on your device; no server of ours sends them. You can turn each kind off in the Application’s Notification settings or in your device’s Settings. If you use Pro iCloud sync, Apple’s push service may send the Application silent notifications that tell it your iCloud data has changed; they contain no note content and are never shown to you.

Language Preference and Settings: Your preferred display language and other app settings are stored locally on your device.

Share Extension Data: When you share content into MDash from another app, the share extension writes that content directly into the local note database in the Application’s app group container. It also creates a temporary pointer containing only the new note’s identifier so the Application can open that note. The pointer is removed after the Application confirms the open; if automatic opening is unavailable, it remains until the Application next processes it. The pointer does not contain your note text.

1.2 Information We Do Not Collect

We do not require or create user accounts
We do not collect behavioral or product-usage analytics, apart from one onboarding progress value stored with RevenueCat (see Section 1.4); RevenueCat processes purchase history for entitlement functionality and purchase analytics as described below
We do not collect performance metrics or usage statistics; the only diagnostics we receive are the anonymous crash and hang reports described in Section 1.6
We do not operate any server of our own, and we never receive your note content
We do not collect your name, email address, or any other personal identifier

1.3 iCloud Sync (MDash Pro, Optional)

If you have purchased MDash Pro, are signed in to an iCloud account, and leave the per-device Settings → Sync → iCloud Sync toggle on, the Application synchronizes your note library across your devices using Apple’s CloudKit service. Synchronized data goes to your private iCloud database, associated with your Apple Account — not to us. We cannot read, access, or retrieve it.

The following data categories are synchronized:

Note content and titles, creation and modification dates, and the name of the device that last edited the note
Photo attachments and sketches embedded in notes, together with the text recognized in them
Note reminder schedules, including snooze and done status, so a reminder you finish on one device clears on the others
Folders, smart folders and tags, including their names, colours and icons, and which folder each note belongs to
Pinned status, lock status and Trash status
Your library sort order
Conflict records — when the same note is edited on two devices, the losing version is kept so you can resolve the conflict

Locked notes in iCloud: For a locked note, the title, body and recognized photo text are stored in CloudKit’s encrypted fields, which CloudKit encrypts on your device before they are saved to iCloud; the ordinary fields carry only a placeholder. Version history is not synchronized.

Apple, Inc. processes this data as the operator of iCloud, under Apple’s iCloud terms and Apple’s Privacy Policy. Sync never happens without all three of: a Pro purchase, an iCloud account on the device, and the iCloud Sync toggle on. Turning the toggle off stops all synchronization from that device.

Read-Only Devices (Apple Watch and Apple TV): On Apple Watch and Apple TV, MDash is a read-only reader. These devices download your notes from your private iCloud database solely for display and never upload note content. On Apple TV, the local copy is kept in the system’s cache storage and may be cleared by tvOS at any time; purchase verification happens on the device itself via RevenueCat (see Section 1.4). On Apple Watch, your Pro status is forwarded from the paired iPhone. Apple Vision Pro runs the full Application, with the same storage and sync behavior as iPhone and iPad.

1.4 Automatically Collected Information via Third Parties

Purchase Data (RevenueCat): To verify whether you have purchased MDash Pro, we use RevenueCat, a third-party purchase verification service. MDash does not provide RevenueCat with a custom account identifier, name, email address, or advertising identifier. The RevenueCat SDK assigns a random anonymous App User ID and processes your App Store purchase history, including receipt and transaction information, to determine your entitlement status and provide purchase reporting and analytics. When you go through the first-run introduction, MDash also stores one value with that same anonymous App User ID, recording how far you got (for example “slide 3”, “skipped at slide 2”, or “reached the Pro screen and started a trial”); it contains nothing you wrote and is used only to improve the introduction. RevenueCat also tells the Application about current Pro prices and any sale. This data is handled according to RevenueCat’s Privacy Policy.

Remote Images: If a note contains links to remote images (e.g., ![image](https://example.com/photo.jpg)), the Application will fetch those images from their source URLs in order to render them in the editor, the preview and exports. Standard network metadata (such as your IP address) may be visible to the servers hosting those images. We have no control over or access to those servers.

1.5 MCP Server for AI Assistants (Mac, MDash Pro, Optional)

On Mac, MDash Pro includes a local Model Context Protocol (MCP) server that lets an AI assistant you choose — such as Claude Code, Codex or Visual Studio Code — work with your notes. It is off by default and runs only after you turn it on in Settings → MCP.

Local only: the assistant connects to MDash through a helper program and a local connection on your Mac. MDash itself sends nothing off your Mac, and no server of ours is involved.
What the assistant can do: search and read notes, attachments, folders and tags, export a note, create new notes, create and rename folders, set tags, set and clear note reminders, move, pin and move notes to the Trash. It cannot change the text of an existing note.
Locked notes are hidden from the assistant unless you turn on Allow locked notes, which requires authentication.
Activity log: MDash keeps a local log of the actions taken through MCP for 30 days so you can review them. Titles of locked notes are removed from it.
Your assistant is a third party: whatever the assistant reads may be sent to its own model provider under that provider’s terms and privacy policy. We have no control over and no relationship with those services. While MCP is on, other apps running under your Mac user account can use the same local connection; turn MCP off when you do not need it.

1.6 Crash and Hang Reports

To find and fix bugs, MDash on iPhone, iPad, Mac and Apple Vision Pro sends us the crash and hang reports that Apple’s MetricKit framework gives the Application. Apple Watch and Apple TV send none.

What a report contains: the type of problem (crash or hang), code addresses inside the app and system libraries, the exception or signal type and name, how long a hang lasted, the MDash version and build, the operating system version, the device model and platform, and when it happened.
What it never contains: your notes, titles, tags, folder names, attachments or file paths, your name, email address or Apple Account details. Before a report leaves your device, MDash removes every free-text message from it, including exception messages and file-path details.
Where it goes: reports are queued on your device and uploaded to the public database of MDash’s own iCloud container, operated by Apple’s CloudKit. Only the developer can read them. Uploading needs an iCloud account on the device; CloudKit attaches an anonymous identifier that Apple assigns to your iCloud account for MDash alone, which does not reveal who you are. We do not combine reports with purchase data or any other information.
On your device: at most 20 crash and 20 hang reports wait to be uploaded; a report that cannot be uploaded within 30 days is deleted.
Your choice: there is no in-app switch. Reports are only uploaded while the device is signed in to iCloud. You can ask us to delete reports from your devices by contacting us (Section 10).

2. How We Use Your Information

The information described above is used only to:

Provide core Application functionality (editing, previewing, organizing, and exporting your notes)
Synchronize your note library between your own devices via your private iCloud database, if you enable Pro iCloud sync
Verify your Pro purchase status via RevenueCat
Render remote images embedded in your notes
Recognize text in your photos and sketches on device so you can search it
Remind you about notes at the times you choose
Find and fix crashes and hangs, using the anonymous reports described in Section 1.6
Improve the first-run introduction, using the single onboarding progress value described in Section 1.4
Let an AI assistant you connect use your notes through the local MCP server, if you turn it on

We do not sell, rent, or trade your personal information.

The parties that receive any data related to your use of MDash are:

Apple (iCloud/CloudKit) — if you enable Pro iCloud sync, your synchronized note data is stored in your private iCloud database operated by Apple. Apple acts as the processor of that data on your behalf; we have no access to it. Anonymous crash and hang reports (Section 1.6) are stored in MDash’s own iCloud container, also operated by Apple, where only the developer can read them.

RevenueCat — to verify your Pro entitlement and provide purchase reporting and analytics. RevenueCat receives a random anonymous App User ID, your App Store purchase history, including receipt and transaction information, and the onboarding progress value; MDash does not send a custom account or advertising identifier. See RevenueCat’s Privacy Policy for details on how they handle this data.

An AI assistant you connect via MCP (Mac) — only if you turn the MCP server on; the assistant and its provider receive what the assistant reads, under their own terms.

We may also disclose information if required by law or in response to valid legal requests by public authorities (e.g., court orders) — noting that we hold no copy of your note content to disclose.

4. Data Security

Your notes are stored within the Application’s iOS app group container, protected by iOS sandboxing and file system protection, and are not accessible to other apps or to us. Data synchronized via iCloud is encrypted by Apple in transit and on Apple’s servers; see Apple’s iCloud security overview for details.

iCloud Backup: Independent of MDash’s sync feature, if iCloud Backup is enabled on your device, iOS may automatically back up the Application’s data (including your notes) to iCloud as part of a standard device backup. This backup behavior is controlled entirely by your device settings, not by us. You can manage or disable iCloud Backup in Settings → [Your Name] → iCloud → iCloud Backup.

However, no technology is entirely risk-free. You are responsible for maintaining the security of your device and your Apple Account.

5. Data Retention

Your Notes: Your notes remain on your device until you delete them or uninstall the Application. Deleting a note moves it to the Trash, where it stays until you restore it or delete it permanently — the Trash is never emptied automatically. We hold no copies.

Synced Data: If Pro iCloud sync is enabled, your notes are also retained in your private iCloud database until you delete them in the Application (deletions sync to your other devices) or remove the data through your iCloud settings. When a sync conflict is resolved, the superseded version is kept for reference and automatically purged 30 days after resolution; unresolved conflict versions are never purged automatically.

Version History: Kept on your device with your notes until you delete the note permanently or uninstall the Application.

MCP Activity Log (Mac): Kept on your Mac for 30 days, then deleted automatically.

Crash and Hang Reports: A report waiting on your device is deleted once it is uploaded, or after 30 days if it cannot be. Uploaded reports are kept only as long as we need them to understand and fix the problem, then deleted.

Note Reminders: A reminder’s schedule is kept with its note until you clear the reminder or delete the note.

Language Preference and Settings: Stored locally until you change them or uninstall the Application.

RevenueCat Purchase Records: RevenueCat retains your purchase history according to their own data retention policy. Contact RevenueCat or review their privacy policy for details.

6. Your Privacy Rights

Because MDash stores data on your device (and, optionally, in your own private iCloud database) and does not operate a user account system, you have full direct control over your data:

Access: All your notes are available inside the Application at any time.
Deletion: Delete any note within the Application (Trash → Delete Permanently for permanent removal). If sync is enabled, the deletion propagates to your private iCloud database and your other devices. Uninstalling the Application removes all locally stored data. You can additionally manage or delete the Application’s iCloud data in Settings → [Your Name] → iCloud → Manage Account Storage.
Sync Control: Turn iCloud sync off at any time per device via Settings → Sync → iCloud Sync inside the Application. Sync also never operates without a Pro purchase and an iCloud account.
Portability: Copy your note contents at any time. Export as Markdown (.md) and plain text (.txt) is free; TextBundle, RTF, PDF, JPG, HTML, Word (DOCX) and ePub export is available with MDash Pro.

If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Because we process minimal data ourselves, these rights primarily relate to RevenueCat’s purchase records, to iCloud data held by Apple under your own Apple Account, and to the anonymous crash and hang reports we hold. You may contact us, RevenueCat, or Apple directly to exercise these rights. You also have the right to lodge a complaint with your local data protection authority. As the Developer is based in Poland, the relevant supervisory authority is the Urząd Ochrony Danych Osobowych (UODO) — Poland’s data protection office — reachable at uodo.gov.pl.

6.2 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to request deletion. We do not sell your personal information.

7. Children’s Privacy

MDash is suitable for users of all ages. We do not collect personal information from any user, including children. Any in-app purchase requires parental consent through Apple’s standard App Store mechanisms.

8. Third-Party Services

Service	Purpose	Privacy Policy
Apple iCloud (CloudKit)	Optional Pro cross-device sync to your private iCloud database	https://www.apple.com/legal/privacy/
RevenueCat	Pro purchase verification	https://www.revenuecat.com/privacy
Apple MetricKit and CloudKit public database	Anonymous crash and hang reports, readable only by the developer	https://www.apple.com/legal/privacy/
Apple Vision framework and LocalAuthentication	On-device text recognition and Face ID / Touch ID / Optic ID checks — processed by your device’s operating system, nothing is sent to us	https://www.apple.com/legal/privacy/

If you connect an AI assistant through the Mac MCP server, that assistant and its model provider are third parties you choose; their own privacy policies apply.

Remote image servers are operated by third parties at the URLs embedded in your notes. We have no relationship with or responsibility for those servers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last Updated” date at the top of this document and posting the updated policy within the Application. Your continued use of MDash after changes become effective constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Artur Gorbaczewski MDash Development Email: contact@nightcodeapps.com Privacy Policy URL: https://nightcodeapps.com/apps/markdown-editor/privacy

Your notes are yours. We’re just the editor.