LinkiLinki
Get the app

Privacy Policy

Effective date: October 23, 2026

Scope and controller

This policy covers the Linki mobile apps and the website at applinki.com, including its optional account and bookmark dashboard. The controller is Mele Apps / Erik Jaen in Bern, Switzerland. Privacy requests can be sent to info@applinki.com.

Data we process

  • Without an account: bookmark libraries created in the mobile app remain on the device. Our hosting provider may still process ordinary security logs such as IP address, browser, requested URL, and timestamp.
  • Onboarding video: if Linki runs in a language other than English, the mobile app downloads a short demo video in that language from applinki.com when you first open it. The request contains no account or advertising identifier. Our hosting provider receives your IP address, basic technical details such as the system version, the requested file name (which includes the language), and the time. The video is stored only in the app's cache on your device.
  • Account and sync: if you sign in, Firebase Authentication processes your email address, provider identifier, display details supplied by the provider, and authentication records. Firestore stores the bookmarks, categories, notes, tags, AI summaries, and settings you choose to sync.
  • Metadata lookup: when a signed-in dashboard user asks Linki to fetch a page title or preview, the saved URL is sent to our Cloud Function in the United States. The function requests that URL, so the destination website also receives a request from Linki infrastructure. Avoid saving URLs that contain passwords, access tokens, or other secrets.
  • Website analytics: only after you select “Allow analytics,” Google Analytics for Firebase may process page paths, interactions, browser/device information, approximate location derived from IP, and an analytics identifier. We do not use this for advertising or ad profiles.
  • Support: the contact form opens your email app. Your message is processed by your email provider and ours, not submitted to a hidden website database.

AI analysis of saved links

If you are signed in, our Cloud Function (Google Firebase, Belgium) uses the Google Gemini API to summarize, tag and suggest a collection for each link you save. It receives the URL, title, description, a page-text excerpt, your app language and your collection names. For YouTube links, it also gets the public video description from YouTube API Services, using only the video ID.

We use Gemini as a paid service, so Google does not use these prompts or responses to improve its products. Google logs them for a limited period, only to detect misuse and for legally required disclosures.

Results are saved on your device and, if you sync, in your account. The function keeps no page content or collection names. Under your user ID it keeps AI usage counters, a short-lived check of your Pro status and, for blocklisted or unsafe links, the URL, reason, time and a strike count. Three such records switch AI analysis off for the account automatically; email us if you think this is a mistake.

Private collections

A collection you mark private is private only on the device where you mark it. There, Linki deletes it and its links from your cloud backup and stops uploading them. It also keeps that collection, and collections inside it, out of AI analysis. The private setting never leaves that device. On another device that has the collection, it is an ordinary collection: that device can back it up again, and its name and links can be sent for AI analysis there. Collections inside a private collection are not marked private themselves: on that device they stay out of AI analysis but are still backed up.

Why we use data

We process account and sync data to provide the service you request; security and basic hosting logs for our legitimate interest in protecting Linki; support messages to answer you; and optional analytics only with your consent. Declining analytics does not reduce website or app functionality.

Free guide and email choices

When you request the free guide, we use your email address to send a confirmation link and, after you confirm, a link to the PDF. This does not create a Linki app account. The separate marketing checkbox is optional. We send practical Linki tips by email only if you choose it and confirm your address. You can withdraw that choice through the unsubscribe link in an email.

We store your email address, the version and date of your consent, confirmation and unsubscribe dates, a limited campaign source, and email sending status in a separate Firebase Firestore collection. This database is in the United States. Our backend can access these records; website visitors and app users cannot read the list. Google Workspace processes the confirmation and delivery emails. We do not add tracking pixels to these emails or send your email address to website analytics.

To limit automated signups, we keep temporary counters based on protected hashes of email addresses and IP addresses. These counters expire after two days. When you use the signup form, we may also use Google reCAPTCHA Enterprise, through Firebase App Check, to check that the request comes from a person and not a bot. It loads only after you select the form, and Google processes your IP address, browser and device information and how you interact with the page for this purpose. Google does not receive your email address through this check. Unconfirmed guide requests are removed after 14 days. Confirmed guide-only requests and withdrawn subscriptions are removed after 90 days. Confirmed marketing subscriptions expire after 24 months unless you renew your choice. A protected hash of an unsubscribed address remains on our suppression list until you explicitly confirm a new subscription, so a later import cannot silently subscribe you again. Hosting and email providers may retain their own service and security logs.

To ask for access to or deletion of an email record, contact info@applinki.com from that address. Unsubscribing stops marketing emails; you can keep the guide.

Legacy Linki reactivation email

We may use an address from an existing Keeplink or Linki account where you previously permitted product emails, to send a limited reactivation campaign about the move from Keeplink to Linki and current app features. Google Workspace sends these emails. They contain no tracking pixel.

The local campaign runner reads the address from a private batch file and does not copy it into the send ledger or unsubscribe record. The ledger stores a stable, secret-keyed reactivation identifier, delivery status, provider message ID, timestamps, and technical campaign metadata. The unsubscribe record stores that protected identifier, the unsubscribe date, and technical scope and version fields. We retain the private batch and local ledger only while needed to prepare, deliver, and reconcile this limited campaign. We retain the minimal suppression record while needed to honor your opt-out and prevent later imports from restarting Linki reactivation emails.

Use the unsubscribe link in the email to stop Linki reactivation emails, or contact info@applinki.com from the address that received it.

Providers and international transfers

Linki uses Google Firebase for hosting, authentication, Firestore, Cloud Functions, Crashlytics, and optional Analytics; the Google Gemini API for AI analysis of saved links; YouTube API Services (the YouTube Data API) for public video details; and RevenueCat for in-app purchases and Pro status. These providers may process data in Switzerland, the EEA, the United States, and other locations. Where required, transfers rely on recognized adequacy mechanisms or contractual safeguards. For YouTube API Services, see also the Google Privacy Policy. App-store links take you to Apple or Google, whose own privacy policies then apply.

Retention and deletion

Local app data remains until you remove it or uninstall the app. Uninstalling does not delete synced cloud data. Account and synced data remain while the account is active and until deletion is requested, except where limited retention is required for security, legal, or dispute purposes. AI usage counters are deleted 7 days after your last analysis. Blocklist records and AI suspensions are kept while needed to prevent repeated abuse. Deleting your account does not remove these records, or the counters before they expire. Optional analytics event data may be retained for up to 24 months and may then remain only in aggregated form. Support emails are kept only as long as needed to resolve the request and meet legal recordkeeping duties.

To delete your Firebase account and synced data, email info@applinki.com from the account email. We may need to verify ownership before deletion.

Your choices and rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw analytics consent at any time using the button above without affecting earlier lawful processing. You may also complain to the Swiss Federal Data Protection and Information Commissioner or your local EEA supervisory authority.

Security

We use HTTPS, Firebase Authentication, owner-scoped database rules, restricted browser permissions, and security response headers. No internet service can guarantee absolute security. Do not place credentials or private access tokens inside bookmark URLs.

Changes and contact

We update the effective date when this policy materially changes. Questions, rights requests, or vulnerability reports can be sent to info@applinki.com.