Privacy Policy
Effective date: June 11, 2026 · Applies to the Nablix desktop app and the nablix.app website
1. Who we are
Nablix is developed and operated by Afterglow Laboratory (sole developer, Japan). You can reach us anytime at afterglowlaboratory@gmail.com.
2. At a glance
| Data | Where it lives | Sent anywhere? |
|---|---|---|
| Your notes, pages, canvases, attachments | Folders on your device | Never sent to us. Sent to your AI provider only if you explicitly use an AI feature on that content. |
| AI API keys (OpenAI / Anthropic) | Stored locally on your device; requests are proxied through the app's local backend | Used only to authenticate your requests to the provider you chose. Never sent to us. |
| License key & device name | Stored locally | Sent to Lemon Squeezy to activate/validate your license. |
| Usage analytics / telemetry | None. The app contains no analytics, tracking or telemetry of any kind. | |
3. What stays on your device
- Your content. Pages, handwriting canvases, attachments and workspace files are stored in ordinary folders on your disk. We cannot access them.
- Settings, including your AI configuration and language preference.
- AI API keys. Keys are stored locally and injected into requests by the app's local backend; they are not displayed in full after saving and are never transmitted to Afterglow Laboratory.
- License state. A cached copy of your license status, so the app works offline.
4. When data leaves your device
The app connects to external services in exactly these cases:
4.1 Purchases, license activation and validation — Lemon Squeezy
Payments are processed by Lemon Squeezy, LLC as merchant of record. When you buy a license, Lemon Squeezy collects your payment and billing details under their privacy policy; we never see your card number. When you activate or validate a license inside the app, your license key and a human-readable device name are sent to the Lemon Squeezy License API. We receive order information (such as your email and the product purchased) from Lemon Squeezy to provide support.
4.2 AI requests — your chosen provider
If you configure an API key, AI features (chat, inline completion, ink/image conversion) send the relevant note content directly from your device to the provider you selected — OpenAI or Anthropic — authenticated with your key. That content is handled under your agreement with that provider. No AI request passes through any server of ours. If you never add a key, no AI request is ever made.
4.3 Update checks — GitHub
The official edition periodically asks GitHub (github.com) for the latest release manifest to offer auto-updates. Like any web request, this exposes your IP address to GitHub under GitHub's privacy statement. No identifier beyond the standard web request is included.
4.4 MCP — AI tools you connect
If you enable the built-in MCP server, third-party AI tools that you configure (for example Claude Code, Cursor or Windsurf) can read and edit the currently open page and its workspace, locally on your machine. What those tools then do with that content (for example sending it to their own AI provider) is governed by their respective privacy policies. Access is limited to the page and workspace you have open; closing the note revokes the context.
5. What we don't do
- No analytics, telemetry, crash reporting or tracking in the app.
- No account system — we don't have your name unless you email us.
- No selling, renting or sharing of personal data. There is nothing to sell.
- No advertising.
6. This website (nablix.app)
- The site is hosted on GitHub Pages; GitHub may log standard request data such as IP addresses under its privacy statement.
- The site sets no cookies. It uses your browser's localStorage solely to remember your language preference. No analytics scripts are loaded.
- Web fonts are served by Google Fonts, which receives your IP address as part of font delivery.
- The download button queries the GitHub API from your browser to display the latest version.
7. Email
If you contact us, we keep the correspondence so we can help you (and to handle refunds). We use it for nothing else.
8. Children
Nablix is not directed at children under 13, and we do not knowingly collect personal data from them — by design, we collect almost no personal data from anyone.
9. Changes to this policy
If we change this policy, we will update this page and the effective date above. Material changes will be highlighted in release notes.
10. Contact
Afterglow Laboratory — afterglowlaboratory@gmail.com