1. Who is responsible
MANICULE, established in the United States, operates Manicule at manicule.me and the Manicule iPad application. Contact hello@manicule.me for privacy questions, requests and information about the operator. This policy applies to our service; connected third-party services have their own policies.
Effective 23 October 2026. This notice describes the deployed service, including features that remain optional or unavailable until configured. Enabling a feature may involve additional choices explained at that time.
2. Information we handle
Account information includes your email, password hash or connected sign-in identity, name, language, timezone, verification state, preferences and subscription status. We do not store your password in readable form.
Your content includes notes, notebooks, handwriting, PDFs, photos, audio, transcriptions, projects, tasks, comments, calendar events, people records, conversations, editable assistant memories, attachments and revision history. You decide what to capture and which optional features to use. Do not upload information you are not entitled to share.
Operational information includes session identifiers, request/security records, audit events, device or synchronization identifiers, job progress and error information needed to deliver and protect the service. Payment records include product, amount, currency, provider references, credit grants and usage; PayPal handles payment credentials. We do not collect full payment-card numbers.
3. Why we use information
We use information to provide accounts and synchronization, recover drafts, search and organize your content, deliver requested AI results, run payments and credits, verify email addresses, send account/security notices, provide support, prevent abuse and meet applicable legal obligations.
Daily digest email is optional and requires a verified address. You can switch it off in Settings. Necessary account, verification, recovery and payment notices are separate from optional digests. We do not add you to a marketing list simply because you create an account.
Where a law requires a legal basis, we rely on performance of our agreement for requested service functions, legitimate interests for proportionate security/support, legal obligations for required records, and consent for optional features where required. You may withdraw optional choices without losing ordinary notes and capture functions.
4. AI, context and your choices
When you request a remote AI feature, relevant content and context may be sent to the configured provider, currently Anthropic for Claude. This may include your prompt, selected-space notes and tasks, comments, linked source excerpts, chosen intentions and editable memories. It is not necessary to send your entire account for every request.
Personal and Work remain separate content spaces. Retrieval and actions are checked against the selected space. An optional work/personal overview uses aggregates rather than combining note content. You can inspect or edit saved memories and review suggested changes. Direct creation can be enabled for supported actions; check the action mode before submitting.
Manicule does not use your content to train its own general-purpose model or sell it to advertisers. Provider processing and retention also depend on that provider’s terms and the enabled configuration; we do not promise zero retention by every provider. External web search, if used, sends the search query to the configured search service. Avoid including secrets or unnecessary personal information in search requests.
AI output can be wrong, incomplete or misleading. Generated dates, task plans and summaries should be checked. Credit and activity records help track completed operations and retries; they are not proof that an answer is correct.
5. Connections, location and sharing
Google sign-in uses identity information and does not by itself read Gmail. Google or Microsoft calendar access requires a separate connection and event permissions. The current calendar integration requests read and update access so reviewed events can synchronize. Email mailbox import is not part of this release. You can disconnect integrations in the app and revoke provider authorization in the provider’s settings.
If you enable city weather, we store a city label and coordinates rounded to 0.1 degrees. Only coarse coordinates are sent to Open-Meteo for the weather request. Web location is requested explicitly once; we do not continuously track your location. Turning weather off removes the saved location. Weather remains unavailable until its commercial service is configured.
If you pair WhatsApp, the selected-space bot processes the messages and identifiers needed for that channel through Meta’s WhatsApp service. Disconnecting a channel does not delete copies already held by the third-party provider. Sharing or exporting content sends a copy to the destination you select; you control that onward sharing.
6. Service providers and international processing
We use infrastructure, storage, email-delivery and security providers to operate the service, along with the optional providers described above and PayPal for payments. Administrators and support personnel may access information when necessary to operate, troubleshoot or respond to an authorized request. Provider credentials are encrypted and are not returned by the admin settings API.
MANICULE is established in the United States and service infrastructure or connected providers may process information in other countries. Applicable safeguards and your rights depend on the processing and law involved. Contact us for current provider and transfer information. We do not claim that all data stays in your country or that storage is end-to-end encrypted.
We may disclose information when required by valid legal process, to protect users and the service, or in a business transfer subject to applicable safeguards and notice. We do not sell personal information or share it for cross-context behavioral advertising.
7. Retention, drafts and deletion
Account content is retained to provide your service until you delete it or your account. Trash, archived items and version history may retain earlier content for recovery. Archiving is not deletion. Deleting an original may not remove a separate copy you saved elsewhere, exported or sent to another service.
Account deletion has a 30-day recovery period before the service removes the live account and associated workspace content. Some security, audit, billing and legal records may need to be retained for their applicable purposes. Encrypted recovery backups can contain earlier copies after live deletion; their removal is administered separately and we do not promise immediate erasure from every backup. Contact us for a deletion request that requires review of retained copies.
Offline content and drafts are stored on your browser or device. Server deletion does not guarantee that every disconnected device has immediately received the change. Sync before switching devices; export anything you need before clearing local storage or signing out. Browser storage can be removed by your browser or operating system.
8. Security
We use HTTPS, password hashing, access checks by account and workspace, encrypted stored originals and provider credentials, bounded requests, audit trails and backups. No internet service is risk-free. Use a strong unique password and protect your unlocked devices. Do not share session tokens or provider keys in notes or support messages.
The service is not designed for storing payment-card secrets, government identity documents or regulated health records. If your organization requires special contractual, regulatory or residency safeguards, contact us before using Manicule for that data.
9. Your controls and rights
Settings lets you manage profile preferences, email digests, connected services, export and account deletion. You can edit or remove content and assistant memories. For access, correction, portability, deletion, objection, restriction, withdrawal of consent or other rights available under your local law, email hello@manicule.me. We may need proportionate proof of account ownership and will respond within applicable legal time limits.
Where available, you may complain to your local privacy regulator or appeal a decision by replying to our response. We do not discriminate against you for exercising privacy rights. Because we do not sell or share data for behavioral advertising, no advertising sale/share opt-out is needed to use this release. Global Privacy Control does not enable any tracking.
10. Age and changes
Manicule is intended for adults aged 18 or older. We do not knowingly provide accounts to children. If you believe a child has supplied personal information, contact us so we can investigate and take appropriate action.
We will update this page when practices change and display the effective date. Material changes will be communicated in the service or by email where appropriate; new optional processing will not be enabled merely by editing this notice. Contact hello@manicule.me with questions.