YonderkitDRAFT — this policy is awaiting review by Yonderkit Ltd and may change before publication.
Garner Privacy Policy
Effective 9 November 2026 · Last updated 9 November 2026
Garner is a read-later and note-taking app for Android, published by Yonderkit Ltd ("we"). We are the data controller for the limited data described below. This policy explains what happens to your information when you use the app.
The short version: there is no account, your library stays on your phone, and we do not sell, rent or share your data for advertising.
What stays on your phone
Everything you save in Garner — clips, your own notes, highlights, topics, tags, reading progress and settings — is stored only on your device. We never receive a copy. If you use your own AI key, it is kept in your phone's encrypted storage and is only ever sent to the AI provider you chose.
Backups and Obsidian exports are files you write to a folder you pick. Where those files go after that (for example, a cloud drive) is up to you and that service's own policy.
What leaves your phone, and why
1. Fetching the links you share
When you share a link with Garner, your phone downloads that page (and its images) directly from the website, just like a browser would. For some sources Garner uses a public interface to get a clean copy:
- YouTube: the video page and its captions, from youtube.com.
- X (Twitter): the post, via the public FxTwitter service (api.fxtwitter.com).
- Bluesky: the post, via Bluesky's public API (public.api.bsky.app).
- Reddit: the post's public feed, from reddit.com.
These sites see a normal request from your phone, including your IP address and the address of the page. Their own privacy policies apply.
2. AI summaries and filing
To summarise a clip, suggest tags and choose a topic, Garner sends the clip's text (and the names and descriptions of your topics) to an AI model. You choose how:
- Your own key. The text goes straight from your phone to the provider you picked (for example OpenAI, Anthropic, Google, OpenRouter, DeepSeek, or a server you run yourself). It does not pass through us. That provider's privacy policy applies.
- Built-in AI (subscription). The text goes to our server, which forwards it to an AI model provider (currently Anthropic) and returns the result. Our server does not store the text you send or the results. Under the model provider's commercial API terms, this data is not used to train its models.
You can use Garner without AI. Clips are still saved and readable; they just are not summarised or filed automatically.
3. Built-in AI subscriptions
Subscriptions are sold and billed by Google Play. We never see your name, email or payment details. To check that a subscription is active, the app sends us the Google Play purchase token, and our server confirms it with Google. For each subscription (or access code) our server keeps:
| What | Why |
|---|---|
| A one-way hash of the purchase token or access code (not the token itself) | To recognise your subscription without storing the token |
| Product, expiry date and when it was last checked with Google | To know whether Built-in AI should work |
| Number of requests and tokens used per month | To apply the monthly and daily limits |
None of this is linked to your name, email or Google account. These records are deleted automatically 30 days after a subscription or access code expires. Daily usage counts are deleted after 35 days, and monthly counts after 13 months.
Our server runs on Cloudflare, which processes network requests (including IP addresses) to deliver and protect the service.
Legal basis
Where UK data protection law applies, we process subscription records and forward Built-in AI requests because this is necessary to provide the service you subscribed to (performance of a contract). We rely on our legitimate interests to keep the server secure and to prevent abuse of usage limits.
Service providers and transfers
- Cloudflare — hosts our server and processes network requests.
- Anthropic — processes the text of Built-in AI requests to return a result.
- Google — sells and bills subscriptions through Google Play and confirms purchase tokens.
These providers may process data in the United States. Where they do, the transfer is covered by UK adequacy regulations or by appropriate safeguards such as the UK International Data Transfer Addendum.
What we do not do
- No account or sign-up.
- No advertising, analytics or tracking SDKs, and no crash reporting service.
- No selling or sharing of your data with data brokers or advertisers.
- No access to your location, contacts, camera, microphone or files outside the folders you choose.
Permissions
- Internet: to fetch links and reach the AI provider.
- Notifications: to tell you when a clip is saved or needs attention.
- Background work (foreground service, run after restart): to finish saving clips you shared while the app is closed.
- Google Play billing: only if you subscribe to Built-in AI.
Your choices and rights
- Delete any clip or note in the app, or uninstall the app to remove everything stored on your phone.
- Switch between Built-in AI, your own key, or no AI at any time in Settings.
- Cancel a subscription in Google Play. The anonymous subscription records on our server are then deleted automatically, as described above. Because they are not linked to your name or email, we cannot look them up for you any other way.
You have the right to access, correct, delete, restrict or object to the use of your personal data, and to data portability. Email support@yonderkit.com and we will reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
Garner is not directed at children under 13, and we do not knowingly collect information from them.
Changes
If we change this policy, we will update this page and its effective date. Significant changes will also be noted in the app's release notes.
Contact
Questions or requests: support@yonderkit.com. See also the Yonderkit privacy policy for this website and support emails.