MD2docx - Privacy Policy

Effective date: 5 October 2026

MD2docx turns Markdown files into Word documents on your Mac, iPhone, iPad or Android device. It is made by Łukasz Dec, trading as AlmostCyb.org, Poland ("we"). We are the controller for the little personal data this policy describes. We believe your data belongs to you. This policy describes how the MD2docx app handles your information.

Privacy commitment: MD2docx works entirely on your device. Your documents never leave your hardware, and the app collects no personal data. (If you write to us through the website, see section 7.)

1. No data collection

• MD2docx does not collect, store or transmit any personal information.
• The app does not collect your name, e-mail address or contact details.
• We do not track your usage, and the app contains no analytics or advertising frameworks.
• We do not use cookies or tracking identifiers.
• The app makes no network connections at all: nothing is checked, sent or downloaded online.

2. Local processing (on-device only)

All file conversions happen on your device.

• Input files: your Markdown files are read locally inside the app.
• Processing: the conversion runs on your device, including tables, lists, code blocks, footnotes, math and diagrams. No data is sent to external servers.
• Output files: the generated .docx files are saved to your local storage or to the cloud provider you choose (for example iCloud Drive).

We have no access to the content you convert.

3. Third-party services

MD2docx does not integrate with third-party advertising or data-sharing services. If you save or open files through a third-party provider (such as iCloud, Google Drive or Dropbox), those files are subject to that provider's own privacy policy.

If you choose to share analytics or crash reports with app developers in your device settings, Apple or Google may give us anonymous, aggregated reports. They contain no personal data that identifies you, the app itself sends us nothing, and we use such reports only to fix problems.

4. Permissions

The app may ask for access to your files or folders. These permissions are used only to read the Markdown files you select and to write the converted documents to your device.

• Files are only accessed when you choose them, with the system file picker or by dragging a file into the app.
• The app has no network access. It does not use a Share extension or "Open in" from other apps, and it does not register itself for any file type.
• Converted files are saved through the system Save panel (Mac) or the share sheet (iPhone and iPad), which you control. On Android the same principle applies: the app only reads and writes files you choose.
• The app does not ask for access to your photos, camera, location or microphone.

5. Purchases

MD2docx is a paid app. It is sold by Apple (App Store) or Google (Google Play), who process the payment and are the seller of record. We never see your payment details or your identity. Billing, refunds and cancellation are handled by Apple or Google under their own rules.

6. Children's privacy

Because we collect no personal data, we do not knowingly collect information from anyone, children included.

7. If you contact us

The app itself sends us nothing. If you write to us through the website, the data is handled as follows.

• Contact form: we receive the name, e-mail address and message you type. Cloudflare Turnstile checks that the sender is not a robot, and a Cloudflare Worker passes the message on. It is stored as a ticket in a private GitHub repository that only we can read. We use it only to answer you and to keep a record of the request, and we keep it for up to 12 months after the request is closed, then delete it. We do not share it or use it for marketing. Cloudflare and GitHub act on our behalf to deliver and store it, and may process it outside the EU under their own safeguards. The legal basis is our interest in replying to requests (Art. 6(1)(f) GDPR).
• Bug reports and suggestions on GitHub: these are public. Anything you write there, and your GitHub username, can be seen by anyone. Do not put private details in them; use the contact form for anything private.
• You can ask us to delete your ticket at any time through the support form, and you may complain to the Polish supervisory authority (UODO, uodo.gov.pl) or to the authority in your country.

8. Legal basis, retention, transfers

Through the app we process no personal data, so there is nothing to retain or to transfer. If you contact us, we process the details you send to answer you (Art. 6(1)(f) GDPR, our interest in replying to requests), and we keep the ticket for up to 12 months after the request is closed, then delete it. Cloudflare and GitHub act on our behalf to deliver and store it, and may process it outside the EU under their own safeguards. Apple and Google are independent controllers for their own processing of purchases.

9. Your rights (GDPR)

If you are in the EU or UK you have the right to access, correct, erase, restrict, object to and move personal data about you, and to withdraw consent. Because the app gives us none, the practical answer to a request is usually that we hold nothing about you, unless you wrote to us; you can still ask through the support form and we reply within 30 days. To remove your data yourself, delete the app and, if you saved converted files elsewhere, delete them there. You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, uodo.gov.pl), or to the authority in your country.

10. Users in the United States and other regions

We do not sell or share personal data, as those words are used in the California Consumer Privacy Act and similar laws of other US states, and we do not use personal data for targeted advertising or profiling. We do not collect sensitive personal data. The rights those laws give you (to know, delete, correct and opt out) are answered the same way as the rights above: the app gives us no personal data, and we hold only what you send us through the contact form, which you can ask us to show or delete at any time. We will not treat you differently for asking. Users in the UK, Switzerland, Brazil and other regions with similar laws can use the same route.

11. Security

The app keeps your documents on your device, makes no network connections and sends nothing to us, so there is no database of ours to break into. The contact form uses an encrypted (https) connection and the tickets are kept in a private repository that only we can access. No system is completely secure, and we cannot promise it.

12. The almostcyb.org website

The almostcyb.org website sets no cookies and uses no analytics or advertising. The main page remembers your language and colour theme in your browser's local storage on your device; this is not a cookie, and it is sent nowhere. The legal pages (privacy, takedown, support) use no local storage. The website loads no fonts or scripts from other hosts, except Cloudflare Turnstile (a robot check) on the pages with a contact form, which runs from Cloudflare's own domain and is used only for the form.

13. Changes to this policy

We may update this policy. Our core principle, that your data stays on your device, will not change. Updates are posted on this page with a new effective date.

14. Contact

Questions about this policy: use the form at almostcyb.org/support/md2docx.