Privacy Policy

Last updated: 11 October 2026

This policy explains what personal data Lakoy processes when you visit lakoy.com and when you use Markant and Graphmark, why, for how long, and what rights you have.

Who we are

Lakoy ApS is a registered secondary name of Unbelievable ApS, a Danish company.

Unbelievable ApS (Lakoy ApS)
CVR 44018470
Egsmark Høje 12, 8400 Ebeltoft, Denmark
contact@lakoy.com

We are the data controller for the processing described here. We have not appointed a data protection officer. Write to contact@lakoy.com about anything in this policy.

Summary

  • Your documents stay on your Mac. Markant and Graphmark open and save files on your device, and neither app sends a document anywhere.
  • We use no analytics, no advertising and no tracking, in the apps or on this website.
  • Graphmark does not have AI features yet. When it does, they will send the document you are working on to our AI service, which passes it to Anthropic to write the answer. Graphmark will ask for your permission first, and you will be able to withdraw it at any time.
  • You have the right to access, correct and delete personal data we hold about you, and to complain to the Danish Data Protection Agency.

This website

lakoy.com is a set of static pages. It sets no cookies and runs no analytics or tracking scripts.

When you visit, your browser sends your IP address and request details (the page, time, browser type) to our web server. The server records them in access logs, which are kept for up to 15 days and then deleted. We use them to operate the site and to investigate errors and abuse. The legal basis is our legitimate interest in running a secure website (GDPR Art. 6(1)(f)).

Requests pass through Cloudflare, which protects and delivers the site, and are served from a server we rent from Hetzner Online GmbH in the EU. Both act as our processors. Cloudflare may process IP addresses outside the EU; it does so under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

Markant

Markant reads the files you open and displays them. It does not send document content, usage data or identifiers anywhere.

  • Preferences, such as your theme, are stored on your Mac.
  • Folder access you grant is remembered on your Mac and can be revoked in System Settings.
  • When a document refers to a picture on the internet, Markant loads that picture from the server that hosts it, as a web browser would. That server, not Lakoy, receives your IP address.

Graphmark

Graphmark opens and saves mind maps as Markdown files on your Mac. Preferences and the folders you have given it access to are stored on your Mac. Graphmark sends nothing else anywhere except in the two cases below, both of which you control.

New-version notice (off unless you turn it on)

In Settings ▸ Privacy you can ask Graphmark to tell you when a new version is in the App Store. When this is on, Graphmark asks our server once a day which version is current. The request names the app and the platform. Our server necessarily receives your IP address; it is used only to answer the request and is kept in server logs for up to 15 days. The legal basis is your consent (GDPR Art. 6(1)(a)), which you withdraw by turning the setting off. Updates themselves are delivered by the App Store.

AI suggestions

Graphmark does not offer AI features yet. This section describes how they will work when Graphmark offers them through the Lakoy AI service, and it applies from then on.

What is sent. When you ask for a suggestion, Graphmark sends the document you are working on: the text of every node with its notes and tags, the connections between nodes, any other text in the document, which nodes you selected, and what you asked for. Pictures and other files are not sent; a picture is replaced by a placeholder before anything leaves your Mac.

Permission. Graphmark asks for your permission before it sends a document for the first time, and again if what is sent or who receives it changes. You can withdraw permission in Settings ▸ Privacy.

Purpose and legal basis. To produce the suggestion you asked for (GDPR Art. 6(1)(b), performance of the service you requested).

Who receives it. Our AI service at api.lakoy.com receives the request and does not store its content: it is held only while the answer is produced. Our service passes it to Anthropic, which writes the answer as our processor under a data processing agreement. EEA customers contract with Anthropic Ireland, Limited. Anthropic processes requests in the United States under the EU Standard Contractual Clauses.

How long. Lakoy keeps no copy of your document or the answer. Anthropic deletes API inputs and outputs within 30 days. If its systems flag a request as violating its usage policy, Anthropic may keep it for up to 2 years. Anthropic may not use your content to train its models.

Service records. For each request our service records the time, the app version, the result and the amount of computation used, with no content and no IP address. These records are kept for 30 days to operate the service and prevent misuse (GDPR Art. 6(1)(f)).

Subscriptions. If you subscribe to AI features, Apple handles the purchase. Apple tells us that a subscription is active and gives it an identifier; it does not give us your name, email address or payment details. We use the identifier to check that you are entitled to the service and keep it for as long as the subscription exists, plus 30 days.

Crash reports

If you have chosen in System Settings to share analytics with app developers, Apple may send us crash reports from our apps. They do not identify you, and we use them only to fix problems.

When you write to us

If you email us, we use your address and message to answer you, and keep the correspondence for up to two years in case you write again (GDPR Art. 6(1)(f)). Tell us if you want it deleted sooner.

Children

Our apps and website are not directed at children, and we do not knowingly collect personal data from children.

Your rights

Under the GDPR you can ask us for access to the personal data we hold about you, for its correction or deletion, for restriction of its processing, and for a copy in a portable format. You can object to processing based on our legitimate interests, and you can withdraw consent at any time without affecting processing that took place before. Write to contact@lakoy.com; we answer within one month.

Because we keep almost no personal data, a request will usually concern server logs, a subscription identifier or an email exchange.

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.

Changes

We will update this page when our processing changes and show the date at the top. If a change affects what Graphmark sends for AI suggestions, Graphmark will ask for your permission again.