Tessamark
Last updated: October 2026. Tessamark is operated by Gavware Limited, New Zealand. Our approach to privacy comes down to one rule: we cannot read what we never hold.
This website does not set cookies, does not load tracking pixels, and does not execute third-party analytics or surveillance scripts. We do not track you across the web, profile your browsing, or sell advertising data. Web server requests do not retain identifying IP logs.
Tessamark is a local-first application. All documents, notes, vaults, and git version history exist on your local file system. When you use sync, it goes through a folder you already sync (such as iCloud Drive or Dropbox) or your own chosen git remote (such as GitHub, GitLab, or your private git server). When end-to-end encryption is enabled, data is encrypted client-side using cryptographic keys that never leave your device. Gavware Limited operates no central database of your notes and has zero access to your file contents.
The Android app you download from tessamark.com (not the Google Play version) asks tessamark.com for the list of current versions at most once every 24 hours, when you open the app, so it can tell you a newer one is available. The request carries no identifier, only the app's name and version, and it never downloads or installs anything by itself. You can turn it off under Settings › About.
Tessamark does not operate an AI proxy server. When you use AI pairing features, your document context and prompts are transmitted directly from your device to your configured provider (such as Anthropic, OpenAI, or a local Ollama model) using your personal API key. Gavware never sees, buffers, caches, or logs your prompts or token usage.
All online purchases, checkout sessions, and licence transactions on tessamark.com are conducted by our Merchant of Record, Paddle (Paddle.com Market Ltd / Paddle Payments Ltd). Paddle processes payments, prevents fraud, and handles global sales tax, VAT, and GST compliance.
When you purchase a licence, Paddle collects necessary transaction details (such as your name, email address, payment method details, and billing country) in accordance with Paddle's Privacy Policy. We receive only confirmation of successful payment, the order reference, and your email address in order to generate and issue your cryptographic licence key.
If you buy Pro in the iPhone, iPad or Mac app, Apple handles the payment under Apple's Privacy Policy. The app then sends us Apple's signed record of the purchase, so we can issue a licence that works on every platform. We keep the purchase's transaction ID, the product, its dates and, for a subscription, the date it is paid up to. Apple does not tell us your name or email address, and we do not ask for them.
When you activate a licence on a device, the app sends us the licence and a random device ID that the app creates the first time it needs one. We store the device ID, the platform (such as macOS or iOS) and the date, so that a licence works on the number of devices it allows and you can free up a device you no longer use. The device ID is not derived from your hardware and is not used to track you.
If the application encounters an unexpected error, crash reporting is strictly opt-in. A report contains the type of error, its message and stack trace, the app version, the operating system version, the part of the app it came from, and anything you choose to type into its description box. Reports are not linked to your licence or to any account, and they never include note text, vault paths, or keys.
If you send feedback from the app, we receive what you type, the app version and the platform. A "how can we reach you" field is optional; if you fill it in, we keep it with your feedback so we can reply. We use feedback only to answer you and improve Tessamark.
If you submit a theme to the theme gallery, the form uses Cloudflare Turnstile to prevent automated spam and stores only what you typed.
If you sign in to the licence portal, to manage a team licence, or from the iPhone, iPad or Mac app to restore a purchase you made on our website, sign-in is handled by our identity provider, WorkOS, under WorkOS's Privacy Policy. We store your email address, whether it has been verified, and your WorkOS user ID, so we can show you your licences and your team's seats. When you restore a purchase in the app, the app receives your licence and keeps nothing else from your sign-in. You never need an account to use Tessamark itself.
You can delete your account at any time, from the app (Settings › Pro › Delete Account…) or by contacting us. We then delete your WorkOS account, your email address as a sign-in record, and your sign-in sessions. We keep your licence and its purchase and activation records, because they are proof that you bought Tessamark, and we may need them for tax and accounting. Your licence keeps working on devices where it is already active.
If you have any questions about this Privacy Policy or your data rights, please contact us at [email protected].