Privacy policy

Who we are

BookmarkLM is operated by Shiva Kumar Gora, India (“we”, “us”). For anything about your privacy or your data, write to support@bookmarklm.app.

What we collect

Your account

• Email address, if you sign in with email, Google or Facebook.
• Name and profile picture: from Google or Facebook if you sign in with them, or what you set yourself. A picture you upload is stored so the app can show it.
• Which sign-in methods are connected to your account.
• If you tap “Not now”, you get a guest account with no email or name.

What you save

• The links, notes, checklists and text you save, and any note you add.
• Details we fill in for a link: title, description, picture, creator and site, fetched from the public page (see below).
• What we make for each save: its topic, tags, a short summary and a numeric “meaning” fingerprint (an embedding) that makes search by meaning work.
• Collections you create, favorites and settings such as whether AI organization is on.

Usage events

The app sends simple events such as “a save was created”, “a search found something” or “the Vault was set up”, with counts, time buckets, positions, platform names and the app version. Events never include links, titles, notes, topics or the words you search for. For the Private Vault they record only that it was set up, unlocked or given an item, never what. Events are linked to your account and deleted with it.

What stays on your phone

Recent searches, which saves were resurfaced on Home, App Lock settings and, unless you turn on encrypted backup, your Private Vault. We don't receive these.

What we don't collect

No location, contacts, microphone, advertising ID or browsing history. We don't log in to other sites as you and never use your cookies.

How we use it

• To save, sync, organize and search your library across your devices.
• To sign you in and send sign-in codes by email.
• To keep the service working and secure, and to understand in aggregate which features help (from the events above).

We don't sell your data, use it for advertising, or share it with anyone except the service providers below, who process it only to run BookmarkLM.

AI organization

AI organization is on by default and can be turned off at any time in You → Organize with AI.

• On: the text and details of each save, and what you type in Search, are sent to OpenAI's API to choose a topic, write a summary, create the meaning fingerprint and rank search results. OpenAI states that API data is not used for training by default and may be kept for up to 30 days to monitor abuse.
• Off: nothing new is sent to AI. Saves are sorted by keywords and search matches words. Turning it off also deletes the stored meaning fingerprints. It doesn't delete your saves.

Fetching the pages you save

To fill in a link's details, our server visits the public page you saved, without logging in and without your cookies. Some platforms return only limited information; we never bypass restrictions to get more.

Private Vault

• Everything about a Vault item (text, link, title, tags) is encrypted on your phone with AES-256-GCM before it's stored, using a key protected by Android Keystore. It opens only with your PIN, pattern or fingerprint.
• Vault items never appear on Home, in Search, collections, suggestions or exports.
• Encrypted backup is off by default. If you turn it on, only the encrypted data (and your Vault key, encrypted with a recovery code that never leaves your phone) is uploaded. We can see that encrypted items exist, how many, their sizes and when they changed, but not their contents. Without your recovery code we can't restore them.
• AI for the Vault is off unless you turn it on in Vault settings. When on, an unlocked item's text passes through our server to OpenAI to organize it and is not stored by us.
• Moving a save into the Vault removes its readable copy from our servers. Database backups may keep the old copy until they expire.

BookmarkLM for Chrome

The Chrome extension uses the same account, and everything above applies to it. In addition:

• Only what you choose to save. The extension reads a tab's address and title only when you click Save, press its shortcut or use its right-click menu. It doesn't see the other pages you visit, doesn't read page content, and has no access to websites otherwise.
• Selected text is sent only when you choose to save it, together with the address of its page.
• Chrome bookmarks are read only if you give the extension that permission: to import them once (their addresses and titles), or to save pages you star from then on. Turn this off in the extension's settings, or remove the permission in Chrome.
• Search: what you type after bm in the address bar, or in the extension's search box, is used to search your saves, like Search in the app (including OpenAI while AI organization is on).
• On your computer: your sign-in session, the extension's settings and the progress of an import are kept in Chrome's storage for the extension, which websites can't read. Signing out removes the session.
• Google sign-in uses Chrome's own sign-in window. Google shares your name, email address and profile picture with BookmarkLM, nothing else.
• The extension sends no usage events.

BookmarkLM's use of information from the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. It's used only to provide BookmarkLM's features. It's never sold, never used for advertising or to decide creditworthiness, and only passed to the providers below to run the service. People at BookmarkLM don't read it, except to keep the service secure, when the law requires it, or when you ask us to (for example, for support).

Who processes your data

Because these providers are in the USA, your data is transferred to and stored there.

Security

Data is encrypted in transit (TLS) and each account's rows are isolated by database rules. Normal saves are not end-to-end encrypted: the people who operate the service could technically access them in order to run and secure it. Use the Private Vault for things only you should be able to read. App Lock can require your phone's screen lock to open BookmarkLM.

How long we keep it

• Your library and account: until you delete a save, or delete your account.
• Usage events: until you delete your account.
• After deletion, copies can remain in encrypted database backups until those expire on the provider's normal schedule, and in short-lived service logs. We don't restore deleted accounts from backups.

Your choices and rights

• See and export everything: You → Export your data (JSON or CSV).
• Correct a save's topic or tags, or your name and picture, in the app.
• Delete any save from its detail screen, or your whole account.
• Turn AI organization off at any time.
• For any other request (access, correction, deletion, or a complaint) write to support@bookmarklm.app. We answer within 30 days. Depending on where you live, you may also be able to complain to your data protection authority.

Children

BookmarkLM is not directed at children under 13, and we don't knowingly collect their data. If you believe a child has an account, write to us and we'll delete it.

Changes

If this policy changes, we'll update the date above, and for significant changes tell you in the app before they apply.