Martinet privacy policy

Last updated: 19 October 2026

Martinet is a personal focus app. It keeps your work on your phone and in your Martinet account (so it's the same on your other phones and on martinet.app), and sends it elsewhere only for the connected features you choose below.

iPhone: focused Instagram inside Martinet

On iPhone, the Social tab opens Instagram's mobile website in an embedded browser. An on-device filter looks at page links and addresses to open Martinet's feed from Reels and hide Reel cards in the home feed. It does not copy messages, passwords, or page content into Martinet storage or send them to Martinet's services. The separately installed Instagram app is not modified. If you choose optional Screen Time limits for native apps, Apple gives Martinet opaque app tokens, not their names or the contents of those apps.

The embedded browser connects directly to Instagram and its login services. Your sign-in and browsing traffic goes to those services under their own terms. WebKit keeps cookies and other website data on this iPhone so you can stay signed in; Martinet does not copy them into its own storage or send them to Martinet's services. The Android-specific Accessibility, backup, and device-admin details below do not apply to the iPhone app.

The iPhone app keeps Deep dive sets, generated study tools and scores, event sets and ice-breaker cards, saved links and notes, and its weekly Social and coursework counts in private storage on your phone. Social visit and hidden-Reel counts are kept for 35 days. When you tap Make or New in Deep dive, Martinet sends the set name and selected notes, imported file text, and Canvas material to its Supabase study service and then to Anthropic's Claude to generate flashcards, a quiz, or a practice exam. A New request also sends previous questions to avoid repeats. When you request an event deck, add a person, or ask for more facts, Martinet sends the event details, notes, links, existing people and facts, and the person details you typed to its Supabase ice-breakers service and Claude. A new deck also sends the text extracted from files you imported; the iPhone app does not send the original PDF. Claude may search public web pages. Both services receive a random install ID for daily limits and retain usage counts, not the request material. Generated content stays on your phone and in your Martinet account. AI-written cards and facts can be wrong, so check them before using them. The iPhone app does not send Instagram page content, passwords, cookies, or messages to Martinet's services. Its in-app analytics are local counts, not tracking across apps.

Your Martinet account, sync, and martinet.app

Martinet needs an account. You sign in with Apple, Google or Microsoft, or with your email address and a one-time code Martinet emails you. Martinet's service (hosted by Supabase) keeps:

• your account: your email address, how you signed in, the referral code made for you, and the code of the friend who referred you, if you entered one (whether an address ends in .edu is worked out from it, for referrals);
• what syncs between your devices, so it's the same on each: your settings (theme, text, the school and kinds of events you picked, which tools and Instagram options are on), the usernames of the pages you trust, your commitment period and timeout, your Deep dive class and company sets (their names and the text of their notes, files and Canvas items), the flashcards, quizzes and practice exams made from them with your scores, and your event sets (details, notes, links, who's who and their cards; the files you added to an event stay on the phone that added them). Each document carries when it last changed and on which kind of device;
• sets you share by code: a copy of the set and what was made from it, which anyone signed in with the code can copy for 30 days, after which it's deleted.

Only you can read your synced documents; the service enforces it for every request. Nothing else is synced: your Canvas tokens and coursework, résumé, internship applications, counts, app lock and the files you added to events stay on the phone.

martinet.app, once you sign in there, shows and changes the same documents. A file you upload there is read in your browser and only its text is sent, added to the set like a file imported on the phone; the file itself never leaves your computer. The website keeps your sign-in and a random install ID (for the study service's daily limits, like the app's) in your browser's storage. It has no analytics, ads or tracking cookies. Study requests from the website go through martinet.app to Martinet's study service exactly as described below, and martinet.app keeps none of them. The website is hosted by Vercel, which, like any host, sees your IP address in short-lived request logs.

Signing out stops sync and leaves your account as it is. Deleting your account (Settings > Account > Delete account in the app, or martinet.app/delete-account) removes it and everything synced to it from Martinet's service at once; what's stored on your phone stays there until you delete it in the app or uninstall Martinet.

What Martinet reads

• Instagram, TikTok, YouTube and X screens, through Android's Accessibility service, only while those apps are open, and only to recognise Reels, Shorts, feeds and similar screens so it can close, cover or lock them. It reads the structure of the screen (view names and a few labels such as "Turn sound off"), not your messages, and it never reads other apps' screens. While one of its panels is showing it notices which app is in front when you switch apps, only so the panel can disappear. If you add pages you trust, it also looks for those usernames on Instagram's screens, only so those pages can scroll and their videos play.
• Your Canvas coursework, using the access tokens you paste in: assignments and their due dates, what is missing or turned in, and your current course grades.
• Your school's public events, if you pick a school: Martinet's events service gathers them from the school's public calendars, and your phone downloads the next two weeks of them.
• Internship postings, if you open Find internships: Martinet's service gathers them from public lists (Simplify's and Jobright's GitHub repositories) and companies' own job boards (Greenhouse, Lever, Ashby), and your phone downloads the ones that match your search.

What Martinet stores, and where

On your phone, in Martinet's private storage (what syncs is also kept in your account, as above):

• your Canvas access tokens, encrypted with a key held in Android's Keystore;
• the latest Canvas summary (titles, courses, due dates, grades);
• your settings, including the school and the kinds of events you picked, and the usernames of the Instagram pages you made special;
• what you liked in Martinet's Explore (openers, cards, quotes, assignments, as they were) and the notes you wrote on them;
• that school's upcoming public events;
• the internship applications you track: role, company, link, deadline and where each stands (what you share to Martinet from another app is only saved if you tap Save);
• the resume you build: name, contact details, education, experience, skills;
• your Deep dive company and class sets: the text of the notes, files and Canvas items you added, and the flashcards, quizzes and practice exams made from them, with your scores;
• your ice breaker events: what you typed about each (name, company or host, when, where, notes, links), copies of the files you added (PDFs as they are, photos made smaller, Word and PowerPoint files as their text), the deck of cards made for it, its fun facts, and the faces cropped from your own files for who's who; a random ID for this install, used only for ice breakers' daily limit;
• the commitment period you set, if any (its days, times, end date and apps), the timeout you started, if any (when it runs out and its apps), and the last trusted time, so a commitment or timeout is judged without the phone's clock;
• the counts behind the weekly reflection: Reels covered or closed and Shorts closed, how often Instagram was opened and for how long, per day, kept for 35 days;
• whether Martinet recognised Instagram on your recent visits, for the line that tells you if an Instagram update has stopped blocking from working.

Nothing from Instagram, TikTok, YouTube or X is saved: no screenshots, no text, no history of what you saw.

What Martinet sends

• Canvas requests, straight from your phone to your school's Canvas site over HTTPS, using your own token.

• Event requests, if you pick a school: requests for its events to Martinet's events service (hosted by Supabase) over HTTPS, when you open Martinet and while it's running, at most every 45 minutes (none while Events is turned off in Settings). They name the school and nothing else: no account, name or device ID. Like any website, the service sees your phone's IP address, and its host keeps that briefly in its request logs.

• Internship searches, if you open Find internships: requests to the same service for the postings that match. The words you type in the search, and the field, term, "remote" and "has dates" you pick, go with the request, and nothing else.

• A time check, a few times a day at most: to judge a commitment period or a timeout by a clock that can't be changed in Settings, Martinet uses the network time Android keeps, or, if the phone hasn't got one yet, asks the same events service what time it is. That request carries nothing, and the answer is only the time.

• Apply with Martinet opens an internship posting in a browser inside Martinet and fills the employer's form from your resume, on the phone; nothing reaches the employer until you tap their Submit. Martinet keeps a count of the forms it filled each day.

• The career tools' files, made from what you type and nothing else: the resume PDF goes to Download/Martinet, the QR code image to Pictures/Martinet, and a link to an NFC tag you hold to the phone, or to a phone tapped against yours while "Share by tap" is on (your phone then presents that one link as a tag, and nothing else; it stops when you turn it off, close the sheet or leave the app, and the link is never written down). Each goes only where you open, share, write or tap it.

• Ice breakers, only when you tap Break the ice (or Make a new deck): the event's details, your notes and links, the files you added to it and, if you switch on "Find common ground with my resume", your resume's sections (education, experience, skills; not your name or contact details) go over HTTPS to Martinet's ice breakers service (hosted by Supabase), with this install's random ID. The service passes them to Claude, an AI made by Anthropic, which writes the cards. When you add someone you met to a deck, what you typed about them and the photos or PDFs you picked for them go the same way, with the event's details and the names already in its deck; those files are deleted from the phone once their cards come. More facts and Quick research, in the Fun facts of Martinet's Explore, send the event's details, the names and roles of the people in its deck, the person or topic you picked or typed, how technical you chose and the facts you already have, for up to five new ones. A face in who's who is cropped on the phone from one of your own files that the deck says is that person's (a LinkedIn page saved as a PDF, a profile screenshot, a badge photo): it's never taken from the web and never sent. To do that Claude may search the web and open the links you added and pages it finds, for the company's news and what the people you named have shared publicly; it can't use personal social media or people-search sites. Martinet's service keeps none of it: it only counts how many decks, added people and requests for facts each install ID asked for each day, for the daily limits, and deletes those counts after a week. Anthropic handles the request as Martinet's provider under its commercial terms: it doesn't train its models on it and keeps it only for a limited time (for example, to check for misuse). The deck comes back to your phone and stays there. Cards are written by an AI from what it was given and found: they can be wrong, so check a fact before you bring it up. Add only what you're comfortable sharing, and about other people only what they shared with you or published themselves.

• Reports, if you report a card: the card's words and the reason you picked go to the same service, with this install's random ID, so the developer can look at it. Reports are kept for 180 days.

• Study tools, only when you tap Make (or New) on a Deep dive company or class set: the set's name and the text of its material (your notes, and the text of the files and Canvas items you added) go over HTTPS to Martinet's study service (hosted by Supabase), with this install's random ID, and the service passes them to Claude, which writes the flashcards, quiz or practice exam. For a new one, the questions you already have go too, so it comes out different. The service keeps none of it: it only counts how many of each install ID asked for each day, for the daily limits, and deletes those counts after a week. Anthropic handles the request as described under ice breakers. What comes back stays on your phone and in your account, with your scores. Reporting a card or question works like reporting an ice breaker card.

• Update checks, in the direct edition only (not the one from Google Play): a request to Martinet's releases site (GitHub) when the app is opened, every few hours at most, to see whether there's a newer version, and the download of it if there is. It carries nothing about you (only Martinet's own key for reading its releases); GitHub sees your phone's address like any website.

Apart from the requests described above and what syncs to your account, Martinet does not send your coursework, tokens, applications, counts, resume, or content from other apps to its services. It has no remote analytics, ads, or cross-app tracking. Nothing is sold; the selected material for AI features is shared with the processors named above only when you request them.

App lock

If you set a PIN, it is never stored: a random salt and a slow hash of it are, in Martinet's private storage, and wrong tries are slowed down. Fingerprint unlock, if you allow it, uses Android's own prompt; Martinet never sees your fingerprint or your phone's PIN. Martinet can't tell whether you reused your phone's PIN, so please don't.

Uninstall protection

While a commitment runs, and only with your agreement on its consent screen, Martinet is registered as a device admin app with no policies: that is just what stops Android from deleting it until the commitment ends. It reads and controls nothing on the phone through it, and removes it when the commitment ends. Android always lets you turn it off yourself, in Settings > Security > Device admin apps.

Backups

Martinet opts out of Android backup and device-to-device transfer, so your tokens and counts don't leave the phone. What syncs to your Martinet account is listed above.

Your control

• Turn the Accessibility service off any time in Settings > Accessibility > Martinet.
• Removing a Canvas account deletes its token and coursework.
• "Stop showing events" forgets your school and its events.
• Deleting an internship application forgets it.
• Deleting an ice breakers event deletes its deck and the copies of its files; removing a file or a link from an event deletes it from the phone.
• A commitment period you set can't be ended early from inside Martinet; it ends on its date, or when Martinet is uninstalled. Nor can a timeout; it runs out at the time it shows.
• Deleting a set or an event deletes it from your account too, and from your other devices when they next sync.
• Deleting your Martinet account removes it and everything synced to it from Martinet's service.
• Uninstalling Martinet deletes everything it stored on the phone.

The terms of use are in TERMS.md and in the app (Settings > Terms of use).

Contact

[Add a contact email before publishing.]