Privacy Policy for MarkerPad

We, UNIQH LTD, are committed to protecting your data and respecting your privacy.

Last Updated: 30 July 2026

Introduction

This policy applies to your use of:

• MarkerPad application software (the App) available on various platforms including iOS, macOS, Android, and Windows, once you have downloaded or streamed a copy of the App onto your mobile telephone, computer, or handheld device (Device).
• The MarkerPad web application available at markerpad.app (the Website).
• Any of the services accessible through the App or the Website (Services).

This policy sets out the basis on which any data we collect from you, or that you provide to us, will be processed by us.

Important information and who we are

UNIQH LTD is the controller and is responsible for your data (collectively referred to as "Company", "we", "us" or "our" in this policy).

We have appointed a data protection officer (DPO). If you have any questions about this privacy policy, please contact them using the details set out below.

Contact details

Our full details are:

• Full name of legal entity: UNIQH LTD
• Name or title of DPO: 2A PARTNERS LTD
• Email address: [email protected]
• Postal address: 8 Kingsbridge Avenue, London, W3 9AJ, England

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).

Changes to the privacy policy

We keep our privacy policy under regular review. This version was last updated on the date shown above. It may change and if it does, these changes will be posted on this page and, where appropriate, notified to you when you next start the App or visit the Website.

Third-party links

Our App and Website may contain links to and from the websites of third parties. Please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any data to these websites or use these services.

The data we collect about you

MarkerPad does not require a MarkerPad account or user profile. Unless you choose to connect a third-party sync provider, your documents and embedded files remain in the App's local workspace, except when you choose to export, share, or otherwise transfer them.

We collect limited analytics data to help us understand how our App and Website are used so we can improve them. Depending on your privacy choices and platform settings, this may include:

• Anonymised Usage Data: Information about how you use our App and Website, such as the features you use and the time spent on the app.
• Anonymised Device Data: Information about the device you use, such as the operating system, device type, and screen resolution, without any unique identifiers.

If you enable Google Drive sync, Google's authorization software on your Device temporarily handles the account you select so that Google can grant access. MarkerPad does not retain or display your Google account name, email address, or account identifier and does not transmit those identity details to a MarkerPad-operated server. MarkerPad processes the names, identifiers, types, parent relationships, modification times, checksums, and revision information of files and folders available to MarkerPad; the contents of documents and embedded files selected for sync; and local sync settings, mappings, timestamps, status, and recent results.

We do not intentionally request, infer, or profile special-category or criminal-offence data. Your document content may nevertheless contain information of your choosing. MarkerPad handles that content only to provide the editing, export, and sync functions you request.

How is your data collected?

Analytics data is collected automatically as you interact with our App and Website, subject to your available privacy choices. We use Google Analytics and Firebase for this purpose. Google Drive data is accessed only after you deliberately connect Google Drive and grant the requested OAuth permission.

How we use your data

We use analytics data for our legitimate interests in operating, securing, and improving our App, Website, and Services. We process Google Drive data at your direction to provide the optional sync service you request. Our purposes are:

• To administer and protect our business, App, and Website (including troubleshooting, data analysis, and system testing).
• To monitor trends and analyse usage to improve the user experience and functionality.
• To understand which features are most popular to guide future development.
• To obtain and maintain the Google Drive authorization you request without retaining the selected account's identity in MarkerPad settings.
• To create and manage MarkerPad's folder structure in your Google Drive and to upload, download, create, rename, move, update, compare, or delete files and folders according to the sync mode, conflict policy, schedule, and actions you select.
• To maintain sync mappings, detect changes and conflicts, show sync status, and retain or prune Google Drive file revisions according to the version-retention settings you select.

Google Drive sync and Google user data

Google Drive sync is optional. MarkerPad requests the https://www.googleapis.com/auth/drive.file scope. This permits MarkerPad to see, create, edit, and delete only the Google Drive files and folders that MarkerPad creates or that you explicitly open or use with MarkerPad. MarkerPad does not request access to all files in your Google Drive.

Synced content travels directly between the App on your device or browser and Google Drive over encrypted HTTPS connections. MarkerPad does not route Google Drive file content or OAuth tokens through a MarkerPad-operated server. Sync configuration, remote file mappings, last-sync timestamps, and recent sync results are stored locally by the App. Google Sign-In and the operating platform manage account selection and authorization credentials. MarkerPad immediately discards the account name, email address, and identifier exposed during authorization and does not store Google access or refresh tokens in its application database.

We do not sell Google user data, use it for advertising, use it to determine creditworthiness, or use it to train or improve general artificial intelligence or machine-learning models. We do not permit humans to read Google user data except with your explicit consent for support, when necessary for security or abuse investigation, or when required by applicable law.

MarkerPad's use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disclosures of your data

We may disclose data only as described below:

• Google: Google Sign-In and Google Drive process account authorization and Drive data as necessary to authorize access and perform the sync operations you request. MarkerPad does not retain the identity details returned during account selection.
• Analytics providers: Google Analytics and Firebase process analytics data as described in this policy.
• Legal and security disclosures: We may disclose data where necessary to comply with applicable law or to investigate security incidents or abuse.
• Business transfers: Aggregated analytics data may transfer as part of a merger, acquisition, or sale of assets. Google user data will be transferred in such a transaction only with your explicit prior consent and where permitted by Google's policies and applicable law.

We do not sell personal data or Google user data to data brokers, advertising platforms, or information resellers.

International transfers

Google and our other service providers may process data on servers located outside the UK. Where international data-protection rules apply, we require an appropriate transfer mechanism or rely on another lawful safeguard. Files stored in Google Drive are also subject to your Google account settings and Google's privacy terms.

Data security

We use data minimisation, the limited drive.file permission, encrypted HTTPS transport, and platform-managed Google authorization. MarkerPad's web application contains only the public OAuth client identifier; private OAuth client secrets are not included in the App or web deployment. You remain responsible for protecting access to your Device and Google account.

Data retention

We may retain anonymised and aggregated data indefinitely for research or statistical purposes without further notice to you, as it can no longer be associated with you.

Local documents, embedded files, sync configuration, remote mappings, and sync history remain on your Device until you delete them, remove the relevant workspace data, clear the App's storage, or uninstall the App. Google account name, email address, and account identifier are not retained in this local sync data. Existing installations automatically remove legacy identity fields when their sync settings are next loaded. Removing a sync service deletes its local sync configuration and requests disconnection of Google authorization, but it does not automatically delete files or retained revisions already stored in Google Drive. You can delete those directly in Google Drive and can revoke access from your Google Account at any time. While a service remains connected, remote revisions are retained and pruned according to the settings you select and Google Drive's own limits.

Your legal rights

Depending on your location, data-protection law may give you rights to access, correct, erase, restrict, object to, or obtain a copy of personal data, and to withdraw consent where consent is relied upon.

• Control local and Drive data: You can edit or delete local workspace content in MarkerPad and manage synced files directly in Google Drive.
• Disconnect MarkerPad: You can remove the sync service in MarkerPad at any time. You can also revoke MarkerPad's Google access from your Google Account connections. Revocation stops future access but does not itself delete files already stored in Google Drive.
• Contact us: You may contact our DPO to exercise rights concerning personal data controlled by UNIQH LTD. We may need enough information to verify and respond to your request.

You can typically reset your device’s advertising identifier or use your browser's privacy settings to limit ad tracking and analytics.

If you have any questions about your rights in the context of our Services, please contact our DPO.

Glossary

LAWFUL BASIS

• Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process any data for our legitimate interests.

THIRD PARTIES

• External Third Parties:
  • Service Providers acting as processors who provide IT, system administration, and analytics services. Our providers are listed in the "Third-Party Service Providers" section.
  • Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors, and insurers based in the UK who provide consultancy, banking, legal, insurance and accounting services.
  • HM Revenue and Customs, regulators and other authorities acting as processors or joint controllers based in the UK who require reporting of processing activities in certain circumstances.

Third-Party Service Providers

The following third-party services process analytics data or, when you enable optional sync, Google authorization and Drive data as described above: