Privacy
Your notes are yours
Two things are described on this page and they are separate. The app, which is not out yet, and this website, which is currently one email field. Last updated 25 August 2026.
The short version
- They live on your phone and in your own iCloud. Not on our servers. There is no Marbles account to create.
- To organize your notes, Marbles sends them to an AI provider that is contractually barred from storing them or training on them.
- Anything shaped like a password, a key or a card number never leaves your phone at all. That is enforced by the way the app is built, not by asking a model politely.
- You can export everything as plain Markdown files with your attachments, any time, and walk away.
The app
Where your notes live
Every note you write is saved to a database on your iPhone. That save is local and immediate, and it does not touch the network. If you have iCloud turned on, your notes sync through your own iCloud account, which is a place Apple operates for you and we have no access to. We do not run a notes server, we do not hold a copy of your notes, and there is no account to create with us.
Everything Marbles works out about your notes, which is to say the groupings, the links, the summaries and the pages for people and projects, is derived data. It is computed from your own notes and it stays on your phone.
What is sent away, and why
To work out what a note is about, Marbles sends the text of that note to a large language model provider. This is the honest centre of the whole document: the organizing step does not happen on your phone. The alternative, a model running on the device itself, does not currently support several of the languages Marbles is built to read.
That request travels through a relay we operate. The relay exists for one reason, which is that an API key shipped inside an app is a public API key. It checks that the request came from a genuine copy of Marbles, adds the key, and forwards the bytes unchanged. It has no database of notes and it does not log the contents of requests. There is a test in the codebase that fails if note content ever appears in a log line.
The provider on the other end operates under paid API terms that bar it from using submitted content to train models, and from retaining it beyond what is needed to return a response and to run abuse checks.
What never leaves at all
Before anything is sent anywhere, every note passes a filter that looks for the shapes credentials take: API keys, private key blocks, card numbers that pass a checksum, and the word for “password” in a number of languages. A note that matches never goes to the provider, is never turned into a vector, and is left out of the graph, the links and the compiled pages, because a note whose text is private but whose associations are public is not private.
The filter is deliberately over-eager. It would rather hold back a note about your bank than let one password through, and it runs a second time on anything a link brought back, since the first pass on a note that is only a URL has seen nothing but the URL.
Getting your data out
Settings has an Export everything button. It writes your notes as plain Markdown files, one per note, with your attachments alongside them at the paths the Markdown points at, so the export opens correctly in another app. There is no export tier and no waiting period. Deleting the app deletes the local database; notes synced to your own iCloud are removed the way any other iCloud app data is.
This website
The waitlist
If you put your address in the form, we store your email address, the date and time you ticked the consent box, the wording that was next to the box, which part of the page you signed up from, any campaign tags in the link you arrived on, and, if someone referred you, their referral code. That is the whole record.
The legal basis is your consent, which is why the box is empty until you tick it. We use the address for one thing: to tell you when Marbles is out, and occasionally before that if there is something worth saying. Every email has a working unsubscribe link. We do not sell the list, we do not share it with advertisers, and we do not use it to build a profile of you.
The list is held by Resend, an email provider acting on our instructions under a data processing agreement, on servers in the European Union. Once Marbles has launched and the launch emails have gone out, the list is deleted.
Analytics
We use PostHog to count how many people visit, which pages they read, how far down they get, and which links they follow off the site. It is configured without cookies and without local storage, so nothing is written to or read from your device and there is no banner to click. The cost of that choice falls on us rather than on you: we cannot tell a returning visitor from a new one.
Our web host, Vercel, keeps standard server logs including IP addresses for a short period, as any web host does.
Your rights
AGI Studio is the data controller and is established in the European Union, so the GDPR applies to everyone on this list regardless of where they live. You can ask us to:
- tell you what we hold about you, and give you a copy;
- correct it if it is wrong;
- delete it, which we will do within 30 days and usually the same week;
- stop using it, which unsubscribing also does;
- hand it to you in a portable format.
Write to privacy@trymarbles.com from the address you signed up with and we will do it. You do not need to give a reason. If we get it wrong you can complain to your national data protection authority.
Changes
If this page changes in a way that affects what happens to your notes, we will say so in an email rather than quietly editing the date at the top. General questions go to hello@trymarbles.com.