Privacy Policy

Camera Instruments (basic, half, sixtyfive, sixtyfive motion, Spool, The Camera Collection)

No user account is required. Exposures, undeveloped frames, contact sheets, and exposure parameters remain in local application sandboxes until you choose to export them to the system Photos library.

Dispatch Postcard

Video clips and assembled cards stay on-device. If you choose to publish a postcard to your public Wall or Explore feed, that post is stored in CloudKit public records associated with your chosen handle. You can delete public posts or your entire profile at any time from in-app settings.

Lumen Darkroom, ArtBench & CaptureMood

Native macOS, Linux, iPadOS, iOS, and iPhone Duo photo editors. CaptureMood is available for macOS on the Mac App Store and direct licence, with its iOS and iPadOS release in development. Original images are read from your local folders and never altered. Layer documents, adjustment sidecars, and subject masks stay on your device without network activity.

Linen Editor

Native Mac plain-text and code editor. Linen Editor collects no data and has no accounts, analytics, advertising, tracking, or crash reporting. Files you open are read and saved in place on your Mac; Scratches, version snapshots, snippets, and settings stay in Linen Editor's own container on your Mac. Sticky notes can sync through your private Apple CloudKit database when you turn on iCloud sync in Settings; SixTwelve Studio cannot see them. Scripts you add to Linen Editor's Scripts folder run on your Mac only when you choose them.

roono

Native Mac writing desk. roono collects no data and has no accounts, analytics, advertising, tracking, or crash reporting. Document vaults, evidence pins, moments, and drafts stay on your local disk. Optional sync uses your private Apple CloudKit container; we run no intermediary sync servers. Microphone audio for interview transcription is recognised on your Mac and never leaves it. Web clips are fetched only from addresses you add. Publishing sends a finished piece only to the WordPress, Ghost, Substack, or webhook destination you configure, with credentials stored in your Mac's Keychain. In-app BYO AI integrations communicate only with the third-party endpoint you configure (e.g. local Ollama or personal API keys); SixTwelve Studio never intercepts your prompts or documents.

Talus Notes

Everyday writing tool. Operates offline locally with optional sync via your private Apple CloudKit container. We run no intermediary sync servers for Talus.

jots (iOS, iPadOS, macOS, watchOS, Android, iPhone Duo)

Shared list tool. Every list works offline on the device with no account. On Apple platforms, personal sync uses your private Apple CloudKit container. On Android, and for lists shared between people on any platform, sync runs through the Studio Sync Service.

When you sign in with Google, Apple, or an email code, the service stores your email address, the display name from your sign-in provider, the text of your lists, items, sections, notes, due dates, and reminders, the membership of lists you share or join, an installation identifier, and a push token (Apple Push Notification service or Firebase Cloud Messaging) used only to tell your other devices that something changed. Firebase Cloud Messaging is used for push delivery only; no Firebase Analytics or Crashlytics component is included. Nothing is sold or shared with third parties, and no advertising identifier is read.

Delete account in Settings removes your account, your sign-in identities, your push tokens, your memberships, and every list only you could open. A shared list that other people still use passes to its longest-standing member so their copy keeps working; your name is cleared from its items. Export data in Settings gives you a Markdown copy at any time.

Stuckies (iOS, iPhone Duo)

Sticky notes for iPhone and iPhone Duo. Stuckies collects no data and has no accounts, analytics, advertising, tracking, or crash reporting, and it sends nothing to SixTwelve Studio. Your notes, their backs, walls, and postmarks are stored on your iPhone in Stuckies's own container, which Stuckies's widgets and Live Activities read. When you are signed in to iCloud, your library syncs through your private Apple CloudKit database. It is encrypted on your devices with a key kept in your iCloud Keychain, so SixTwelve Studio cannot read it.

The camera is used only while you stick a note to a surface; the map of that surface is saved with the note on your iPhone and in your encrypted iCloud library. Dictation turns your speech into text with Apple's speech recognition on your iPhone. Location is used only for a note you choose to stick to a place, so that note can show on your Lock Screen when you arrive; Stuckies keeps that place with the note and does not record where you go. Pass it connects straight to a nearby iPhone over an encrypted local connection, and only after the other person accepts; the note never passes through our servers. Reminders are local notifications made on your iPhone.

Use Wall menu → About Stuckies → Erase all Stuckies data to remove every note, wall, surface map, and setting from this iPhone and the encrypted library from your iCloud, or delete the app. Another iPhone signed in to the same iCloud account keeps its own copy until you erase it there too.

Tidemark (iOS, iPadOS, macOS, watchOS, iPhone Duo)

Notes, calendar and promises. Tidemark collects no data and has no accounts, analytics, advertising, tracking, or crash reporting, and it sends nothing to SixTwelve Studio. Your notes, threads, projects and Low Tide history are stored on your device. When iCloud sync is on in Settings › Sync & Storage, your library syncs through your own private iCloud database, which SixTwelve Studio cannot read.

Promise detection, Undertow filing and search run on your device and never send your writing anywhere. Calendar and Reminders access, when you allow it, is used to show your events beside your notes and to keep threads in step with Apple Reminders; that data stays in your calendars and reminders. Location is used only if you turn on Switch at sunset, once a day, to work out sunset; it is kept in memory and never stored. Face ID or Touch ID is handled by your device and only unlocks Tidemark.

Delete notes in the app to remove them from every synced device, use Settings › Sync & Storage to remove the sample library or export your library to Markdown, or delete the app. To remove the iCloud copy, open iCloud settings on your device, choose Manage Storage, and delete Tidemark's data.

The Kinnn (iOS, iPadOS, macOS, watchOS, iPhone Duo)

Family location sharing. The Kinnn has no ads, no paid tier, no analytics, no tracking and no crash reporting. Your identity is your Apple Account; the only thing the app asks for is a first name. The only thing it sends to SixTwelve Studio is described under "Waking a closed app" below.

Your location, battery level, places, check-ins, trips, chat messages and SOS alerts are encrypted on your device with your circle's key before they are stored in Apple's CloudKit, so only the people in that circle can read them. Neither SixTwelve Studio nor Apple can read them. Circle keys stay in your iCloud Keychain. The server sees only record names, sizes, times, invite codes and opaque alert tags. An invite link holds its secret after the # sign, which browsers never send to a server, and it expires after 7 days.

Location is used to show you to the circles you choose and to tell them when you arrive at or leave a place you set up. With Always allowed, this works while the app is closed. Pause shows your circles "Paused" and leaves no older spot behind. You can share an approximate area instead of your exact spot, per circle. The Mac shares nothing unless you turn it on. Apple Watch receives the circle keys from your paired iPhone so it can send an SOS when the iPhone is out of reach. Each of your devices (iPhone, iPad, Mac, Apple Watch) also shares its own spot, battery and model name, or the name you give it in the app, with the same circles under the same rules, so your circle can tell where a watch or phone left behind is.

Waking a closed app. When someone in your circle asks where you are while The Kinnn is closed on your iPhone or iPad, our relay at kinnn-service-production.up.railway.app asks Apple's push service to wake the app for one location reading. For this the relay stores your device's Apple push token and opaque tags made from your circle's key, which it cannot read or link to you, a name, a circle or a place. It never receives a location. A request from a circle member names only a tag. Tokens a device has not refreshed in 30 days are deleted, and Delete all my data removes your device from the relay at once.

History, including the path you travelled each day, is kept 7 days by default; you can choose Off, 1 day, 30 days or Forever in the You tab, and older records are deleted from your devices and from iCloud, not hidden. Your path is kept only for circles that see your exact spot, and nothing is recorded while you are paused. When you join, The Kinnn can ask iOS or macOS for an age range (under 13, 13 to 17, or 18 and over) through Apple's Declared Age Range feature; it keeps only whether you are under 18, shown to your circle's owner, and children under 13 cannot start a circle; they join only through an invite link, such as one from a parent.

Use You → Your data → Delete all my data to remove your circles, places, history, messages and keys from iCloud and the device. People in your circles stop seeing you right away.

Verso Markdown (macOS, iPadOS, iOS, Linux, iPhone Duo)

Markdown editor. Verso collects no data, has no account, analytics, advertising, tracking or crash reporting, and makes no network connections. Your documents are ordinary .md files in folders you choose and are never copied anywhere else; Verso does not sync files between devices, so files in iCloud Drive move only through Apple's own iCloud Drive service. Preferences, the list of folders you opened, and untitled drafts stay in Verso's own container on the device.

On iPhone, the camera is used only when you choose Scan Text: printed text is recognised on the device by Apple's Live Text and inserted into your note, and no image is stored or sent. Text you send to Verso from the share sheet waits in a folder shared only between Verso and its share extension on the same device until the app files it into your Inbox folder. The Home Screen and Lock Screen widgets read a small on-device summary (titles, word counts and today's writing streak) from that same container. Writing Tools, summaries, translation and Siri requests run on the device through Apple Intelligence where it is available.

To remove Verso's data, delete your Verso folders in the Files app or Finder and delete the app.

Marlin Developer's Bench, Engage, Specimen & Folio

Native desktop text, terminal, vector inspection, PDF workbench, and stream engineering tools (macOS and Linux). These tools do not report use, and they do not ask you to sign in. Files open from disk, and a session stays on the machine.

Specimen and Folio run purely offline without network dependencies. Vector geometry and SVG payloads are sanitized and inspected in local memory, rejecting remote entities, external stylesheets, and web pings. Folio operates with zero network entitlements under Apple App Sandbox; irreversible redactions physically destroy underlying vector glyphs and raster pixels in memory before serialization, and on-device Vision OCR processes scanned documents without network round-trips. Marlin Developer's Bench runs under the App Sandbox and reaches only the files and folders you choose. Very large files are read through a sparse line index rather than loaded whole; that index, along with your session, saved recipes, snippets, custom grammars and a local diagnostic log, is written inside Marlin's own container and never leaves the machine. Marlin's assistant uses Apple Foundation Models on device, so the text it reasons about is not transmitted anywhere.

Repo Viewer (macOS and Linux)

Repo Viewer collects no data, and nothing is ever sent to SixTwelve Studio. It reads the Git repositories in the folder you choose (branch names, commits, tags, authors, file changes, and working tree status) with a built-in Git library, under the App Sandbox. It creates a repository, or adds a remote to one, only when you use New Repository or Publish to GitHub. Your settings, pinned repositories, and a bookmark to your workspace folder stay in Repo Viewer's own container on your Mac; delete the app to remove them. If you connect a GitHub token, Repo Viewer stores it in your Mac's Keychain; choose Disconnect in Settings > Integrations to remove it. Repo Viewer has no accounts of its own, analytics, advertising, tracking, or crash reporting. It connects directly from your Mac to GitHub (api.github.com and github.com), under your own GitHub account, only when you connect a token or open New Repository or Settings > Integrations with a token connected (to read your user name, organizations, and template repositories), when you create a repository with a .gitignore or license template (to download the template text, also for a repository only on your Mac), and when you create or publish a repository on GitHub (to create it and push the branch you chose, with its history). The GitHub Privacy Statement applies to those requests. "Open on GitHub" opens a page in your browser only when you ask. "Try Sample Workspace" makes seven small example repositories with invented data in Repo Viewer's container. The version from this website can also use your GITHUB_TOKEN environment variable or your GitHub CLI sign-in when no token is in the Keychain; the Mac App Store version cannot.

On Linux, Repo Viewer also collects no data. It reads your repositories with the git on your system and keeps its settings in your desktop settings store (GSettings). It makes network connections only when you turn them on: "Fetch remotes in background" runs git fetch against your own remotes, and "Sync release notes with gh" reads release notes from GitHub through the gh tool you signed in to. Both go only to the servers your repositories and gh already use.

Linen Editor (macOS)

Plain-text and code editor for macOS. Linen Editor collects no data, has no accounts, analytics, advertising, tracking, or crash reporting, and makes no network connections. Your files and scratches stay on your Mac and are never sent anywhere. Untitled scratches, sticky notes, window state, and local version snapshots are stored strictly in Linen Editor's sandbox container on your Mac. Delete the app to remove all stored scratches and snapshots, or delete individual files directly in Finder.

Mocksyy

Wireframe and mockup studio for macOS. Mocksyy collects no data. It has no account, no analytics and no tracking, and it sends nothing to SixTwelve Studio. Documents are saved as .vellum packages on your Mac, or in your personal iCloud Drive, which Apple operates, if you turn on iCloud sync. Screenshot import reads the image on your Mac with Apple's Vision framework and, on Macs that support it, Apple Intelligence; the image never leaves the device. Write Real Copy, Critique Flow, Compose Screen and diagram generation use the on-device Apple Intelligence model when it is available; your screens and notes are processed on your Mac and are never sent to SixTwelve Studio, to Apple servers or to any third-party AI service. The author name you enter in Settings is stored on your Mac only and is used for comments and version history.

Stackker (iOS, iPadOS, macOS, watchOS)

Falling-block puzzle game. Stackker has no accounts, analytics, advertising, tracking, crash reporting or in-app purchases. Your games, replays, Layers pictures and settings are stored on your device. A game in progress can move between your own iPhone, iPad, Mac and Apple Watch through Handoff and the Watch connection; it is not sent to SixTwelve Studio.

Leaderboards, achievements, online Versus and your friends' Daily Game results use Apple's Game Center, run by Apple under Apple's privacy policy. After your one ranked Daily Game of the day, Stackker saves that game's Layers picture, lines and score to a public CloudKit database operated by Apple, filed under your Game Center player ID for this game, so your Game Center friends can see the picture next to theirs. It contains no name, email or other contact details. SharePlay Versus sends board positions only to the people in your FaceTime call. To remove Stackker's data from your device, delete the app; to remove a shared Daily Game picture, write to hello@sixtwelve.studio.

Kingsrow Chess and Checkers (iOS, iPadOS, macOS)

Chess and checkers game. Kingsrow has no accounts, analytics, advertising, tracking, crash reporting, in-app purchases or network connections. Your Hints and Coach settings are stored on your device. To remove Kingsrow's data, delete the app.

Brownsnout (iOS, iPhone Duo)

Document, receipt, ID and passport scanner. Brownsnout collects no data and has no accounts, analytics, advertising, tracking or crash reporting. Camera frames, text recognition and passport or ID reading are processed on your iPhone. Every page, its recognised text and any markup are encrypted with AES-GCM before they are written to your device. When iCloud Sync is on, those encrypted pages sync through your private Apple CloudKit database, and the encryption keys sync through your iCloud Keychain, so only your own devices can open them; SixTwelve Studio cannot see or decrypt them. Photos you import are read only when you pick them. A scan leaves your devices only when you share or export it yourself. To remove Brownsnout's data, delete the scans in the app (this also removes them from iCloud), or turn off iCloud Sync and delete the app.

Twenchi (iOS, iPadOS, macOS, watchOS)

Pachisi courtyard board game. Twenchi has no accounts, analytics, advertising, tracking, crash reporting, in-app purchases or telemetry servers. Matches against AI and local pass-and-play execute entirely on your device hardware. Multiplayer matches use Apple's SharePlay or Game Center under Apple's privacy policy. To remove Twenchi's data from your device, delete the app.

Embertail, Fold & Kizuna

Tactile games that run offline. Game saves and scores remain strictly on device hardware.