← Back to home
Legal

Privacy Policy

Last updated: April 19, 2026

Remarkify is built to respect user choice. We only activate optional analytics after you consent, and you can update those preferences whenever you want.

Manage your cookie settings anytime

We remember essential preferences needed to run the service, while analytics remain optional. If your browser sends a Global Privacy Control signal, we keep analytics off by default until you actively enable them.

Data controller

Remarkify is operated by Esmanur Kuru, a Norwegian sole proprietorship (enkeltpersonforetak) registered in the Brønnøysund Register Centre under organisation number 936768687.

Taha Yasin Kucuk acts as an authorised signatory and manages day-to-day operations on behalf of the business.

For any privacy-related question, data subject request, or complaint, please contact us at privacy@remarkify.app. We respond to verified requests within 30 days.

We have not appointed a Data Protection Officer because we are not required to do so under GDPR Art. 37, but the contact above is monitored by the person legally responsible for data protection.

Introduction

This Privacy Policy explains what information we collect, why we use it, when we rely on optional cookies or similar storage technologies, and how you can manage your choices. It applies to everyone who uses Remarkify, regardless of country.

Information we collect

Account information

When you create an account, we collect your email address and authentication details through Firebase Authentication.

reMarkable device token

To deliver content to your tablet, you provide a reMarkable device registration token. See the dedicated section below for the exact scope of access this token grants and how we limit our use of it.

Content you convert

We temporarily process text that you send for conversion so we can generate handwritten strokes and deliver the result to your device. That content is not stored permanently after successful delivery.

Billing information

If you purchase a paid plan, Stripe processes your payment on our behalf. We receive limited billing metadata (plan, status, amount, country, last four digits of the card) but do not store your full card number or CVC on our systems.

Usage and diagnostics

We collect service usage information such as conversion counts, timestamps, device preferences, IP address, user agent, and operational logs so we can secure the service, prevent abuse, troubleshoot errors, and improve product quality.

reMarkable device token and scope of access

Important: what you are granting

The reMarkable device registration token you paste into Remarkify is a bearer credential. Technically, anyone holding that token could fully access your reMarkable Cloud account. We limit our use of it strictly to uploading converted documents.

  • The token is a bearer credential that technically grants full access to your reMarkable Cloud account, including the ability to read, list, upload, modify, and delete notebooks and files.
  • Remarkify only uses the token to upload converted documents to your device. We do not read, list, download, modify, or delete any existing notebooks, folders, or files in your reMarkable Cloud.
  • The token is stored encrypted at rest and transmitted only over TLS to the reMarkable Cloud API.
  • You can revoke the token at any time from your reMarkable account (my.remarkable.com → devices). Revocation is immediate and disables any further uploads from Remarkify.
  • When you disconnect your device in Remarkify or delete your account, we delete the stored token.

You remain the data controller of the content stored in your reMarkable Cloud. reMarkable AS is the provider of that cloud and processes your data under its own terms and privacy notice. Remarkify is not affiliated with reMarkable AS.

Legal basis for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

Performance of a contract (GDPR Art. 6(1)(b))

Processing necessary to provide the service you signed up for, including account management, converting text, delivering content to your reMarkable device, and handling payments.

Legitimate interests (GDPR Art. 6(1)(f))

Securing the service, preventing abuse and fraud, keeping operational logs, and improving the product. We balance these interests against your rights.

Consent (GDPR Art. 6(1)(a))

Used for optional analytics cookies and similar storage technologies. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Legal obligation (GDPR Art. 6(1)(c))

Retention of billing records, tax documents, and responding to lawful requests from competent authorities.

Cookie and storage categories

Essential

Always active

Required for authentication, security, fraud prevention, storing your privacy preferences, and keeping the product working correctly.

Analytics

Optional

Used only when you enable them. These signals help us understand feature adoption, measure performance, and improve the user experience.

Your consent preference is stored in local storage and mirrored in a first-party cookie so we can remember your choice consistently across the product.

How we use your information

  • Provide and maintain the Remarkify service
  • Process handwriting conversion requests and deliver results to your reMarkable device
  • Manage your account, subscription, and credit usage
  • Detect abuse, secure the platform, and troubleshoot technical issues
  • Understand product performance and usage trends when optional analytics are enabled
  • Send essential product, billing, or service communications
  • Comply with legal obligations, including tax, accounting, and consumer protection rules

Data security

We use industry-standard security controls, including HTTPS, secure storage practices, limited internal access, and encryption at rest for sensitive integration tokens such as your reMarkable device token. We review access regularly and apply security updates promptly.

No service can guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours and, when required by law, notify affected users without undue delay, as required by GDPR Art. 33 and 34.

Third-party services and sub-processors

Firebase Authentication (Google LLC, United States)

Used for account sign-in and user management.

Firebase Analytics (Google LLC, United States)

Used only when you consent to optional analytics cookies or similar storage technologies.

Stripe (Stripe Payments Europe Ltd., Ireland / Stripe Inc., United States)

Used for payment processing when you purchase a paid plan.

reMarkable Cloud (reMarkable AS, Norway)

Used to deliver converted content to your reMarkable device. reMarkable AS is the controller of the data stored in your reMarkable Cloud account. We are not affiliated with reMarkable AS.

Hosting and infrastructure providers

We host the service on cloud infrastructure located in the European Economic Area. Our providers act as processors under written data processing agreements.

Our sub-processors process data on our behalf under written data processing agreements. They process data according to their own terms and privacy notices.

International data transfers

Some of our sub-processors (notably Google and Stripe) are located in or may transfer data to the United States or other countries outside the European Economic Area. When this happens, we rely on lawful transfer mechanisms, including:

  • The European Commission's Standard Contractual Clauses (2021/914)
  • The EU-U.S. Data Privacy Framework where the recipient is certified
  • Adequacy decisions, where applicable

You can request a copy of the relevant transfer safeguards by contacting us at the privacy email above.

Your rights and choices

  • Access your personal data (GDPR Art. 15)
  • Correct inaccurate information (Art. 16)
  • Request deletion of your data (Art. 17)
  • Restrict or object to processing (Art. 18, 21)
  • Port your data where applicable (Art. 20)
  • Withdraw analytics consent at any time (Art. 7(3))
  • Lodge a complaint with a supervisory authority, including the Norwegian Data Protection Authority (Datatilsynet) or the authority in your country of residence (Art. 77)

You can revisit cookie choices at any time using the cookie settings button across the site or the control at the top of this page. To exercise any other right, contact us at the privacy email in the “Data controller” section above. We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

Data retention

  • Consent preferences: 180 days unless you update them sooner
  • Account data: for as long as your account remains active, plus up to 12 months after closure for dispute resolution and legal defense
  • reMarkable device token: stored encrypted at rest for as long as your account is active; deleted immediately when you remove it or close your account
  • Converted content and generated artifacts: removed after successful delivery; failed conversions are kept for up to 30 days for retry and diagnostics
  • Operational logs (IP, user agent, error traces): up to 90 days
  • Billing records: up to 5 years, as required by Norwegian bookkeeping law (Bokføringsloven)

Children's privacy

Remarkify is not intended for children. You must be at least 16 years old to use the service if you are located in the European Economic Area or the United Kingdom, or at least 13 years old elsewhere. We do not knowingly collect personal information from children below these ages. If you believe a child has provided us personal information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date above and, for material changes, notify you by email or through the service before they take effect.

Contact us

If you have questions about privacy or want to exercise your rights, please contact us at privacy@remarkify.app. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) or with the supervisory authority in your country of residence.