Privacy Policy.

Who we are.

beg1nner is a sole-operator app studio based in Paris, France. The studio is run by one person and has no employees, contractors, or shareholders.

If "the studio" or "we" appears in this policy, it means: one person, at one laptop, in Paris.

What data we collect.

Website (beg1nner.com)

• Anonymous aggregate visitor counts via Plausible Analytics — no cookies, no IP storage, no cross-site tracking.
• Email address — only if you submit the contact form or the launch list. Used to reply or send launch notices. Never sold. Never shared.

Apps

• rece1pt — receipt records and OCR stay on device. Optional scan area uses Apple geocoding; Apple processes subscriptions; you choose when to share exports. See the Rece1pt privacy policy.
• m1nesweeper / n0n0gram — game progress saved in browser localStorage or iCloud private database. No accounts. No analytics SDK.
• mailhub — a private tool the operator uses to archive and search their own mailboxes. It only ever signs in to accounts the operator owns. Details below.

Google user data (mailhub)

• What it accesses — when the account owner signs in, mailhub requests access to that account's Gmail, Google Calendar, Google Contacts, Google Tasks and, where the owner enables it, Google Drive (read-only).
• How it is used — only to sync, archive and search the owner's own data and, when the owner asks, to draft, send or organise the owner's own mail and calendar. Never for advertising, never sold, and not used to develop, improve or train generalised AI or machine-learning models.
• Where it is stored — on hardware the operator controls (a private home server and the operator's own computer). Sign-in tokens are stored encrypted-at-rest or owner-only on that hardware.
• Who it is shared with — no one, with one exception the owner initiates: when the owner asks an AI assistant (such as Claude, by Anthropic) about their mail or calendar, the content needed to answer that request is sent to that assistant's provider for that purpose only.
• Removal — revoke access at any time at myaccount.google.com/permissions; archived copies are deleted on request.

mailhub's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Third-party services.

The fewer third parties involved, the fewer privacy promises someone else can break. Here's the complete list as of today:

• Apple services — MapKit handles optional scan-area lookup for Rece1pt; the App Store handles payment processing for rece1pt Pro subscriptions. We never see your card. Apple's privacy policy applies to that relationship.
• Cloudflare — DNS and CDN for this website. Standard server logs apply, retained per their stated policy.
• Plausible Analytics — privacy-respecting traffic analytics, EU-hosted, no cookies, GDPR-compliant out of the box.
• AI assistant providers (e.g. Anthropic) — mailhub only, and only for content the owner explicitly asks an assistant about. See Google user data.

No Google Analytics. No Meta pixels. No Hotjar. No "growth" trackers.

Children.

None of our apps are designed for or directed at children under 13 (or the equivalent age in your jurisdiction). We don't knowingly collect data from children.

If you're a parent and believe your child has interacted with one of our apps, email us and we'll delete anything we have — usually within 24 hours.

Your rights.

Under GDPR (if you're in the EU) and equivalent laws elsewhere, you have rights regarding personal data we hold about you:

• Right to access — ask what we have. We'll tell you (usually nothing).
• Right to erasure (Art. 17) — ask us to delete. We will.
• Right to portability — ask for an export. We'll send it.
• Right to object — to processing, to email. Unsubscribe links work in one click.

For Rece1pt, deleting the app removes its local vault from that device. Device backups and exported copies are managed separately. There is no Rece1pt server copy to retrieve; see its retention and deletion details.

Contact.

Privacy questions, data requests, or to flag anything strange:

We aim to respond within 24 hours and resolve all data requests within 30 days, per GDPR Article 12.