Privacy policy
Last updated: 11 October 2026
This policy explains how personal data is handled when you use MyBenchBook (iPhone, iPad, Android, Mac, Windows), MyWB (iPhone and Android) and this website. The two apps share the same account and the same server.
- Your notebooks and experiments stay on your device. They reach our servers only if you turn on MyBenchBook's cloud sync (subscription).
- You can use the apps without an account, as a guest.
- Dictation runs entirely on your device: the audio never leaves your phone or computer.
- The AI features send the provider (Anthropic) only the text or photo you choose, and only after your consent.
- No advertising, profiling, cross-app tracking or analytics. The website uses no cookies.
Contents
- Data controller
- Account
- Your content
- Artificial intelligence features
- Dictation
- Subscriptions and purchases
- Email and support
- This website
- Device permissions
- Purposes and legal bases
- Providers and transfers
- Retention
- Security
- Your rights
- Minimum age
- Changes
1. Data controller
Sebastiano Solito, Mesagne (BR), Italy — support@mybenchspace.app.
MyBenchSpace is the name under which Sebastiano Solito publishes his apps ("we" in this policy). For any privacy question, write to the address above.
2. Account
The account is optional and is the same for MyBenchBook and MyWB. It is needed for the AI features, subscriptions and cloud sync.
- With email and password: email address, password (stored only in encrypted form, unreadable even to us), first and last name. MyBenchBook also asks for your nationality and saves the app language at sign-up, used to write our emails in your language.
- With Apple or Google (in MyWB): account identifier, email address (with Apple also a "hidden" address, if you choose it) and, if you share them, first and last name.
- Technical data: account identifier, creation and last sign-in dates, session tokens, IP address and device type logged by the authentication server for security (for example limits on sign-in attempts), which of our apps you use and your plan.
Name, surname and nationality never decide what you can do in the app: we only use them to address you.
3. Your content
MyBenchBook
Notebooks, experiments, text, photos, PDFs, calculations, layouts and protocols are stored on your device. If you have a subscription with cloud sync and use it, a copy is stored on our servers (Supabase, data centre in Frankfurt, EU) in a private space of your account, so you can find it on your other devices. Items you delete are removed from the server too; files no longer used are deleted after one day.
MyWB
Experiments, samples, catalogues, photos and PDFs stay only on your device: MyWB does not send them to any server. On iPhone they are part of your device backups (for example iCloud) according to your iOS settings; on Android they are excluded from backups.
Sharing between the apps
When you send an experiment from MyWB to MyBenchBook, the file goes from one app to the other on your device (or through the sharing method you choose, such as AirDrop or Files). We do not receive it. The same applies to the PDFs, Word documents and other files you export.
4. Artificial intelligence features (MyBenchBook)
The AI features require an account and, before the first use, your explicit consent, which you can withdraw in Settings → Legal.
- Tidy up text: the text you select (or the whole experiment, if you select nothing) is sent to our server and from there to Anthropic (Claude model), which returns the tidied version.
- Handwritten notes from a photo: a reduced copy of the photo you choose is sent the same way; the original photo stays in the page, on your device.
Our server does not keep the text, the photos or the answers: it only records how many credits you used in the month and technical data (request size, cost, any errors). Anthropic processes this data on our behalf, does not use it to train its models and deletes it from its systems within a limited period (currently 30 days at most), except where needed to prevent abuse or comply with the law. Please do not send the AI personal data about other people (for example patient data).
5. Dictation (MyBenchBook)
Your voice is recorded and transcribed on your device: the audio is never sent to us or anyone else. Recordings are deleted after transcription (if the app closes unexpectedly, they stay on the device until you transcribe or delete them). The speech-recognition model is downloaded once, on first use, from Hugging Face, which like any website sees the IP address of the device downloading the file.
6. Subscriptions and purchases
In-app payments are handled by Apple (App Store) or Google (Google Play): we do not receive your payment details. We only receive the subscription status, linked to your account through an anonymous identifier. When purchases in MyBenchBook or from the website become available, we will update this policy with any other providers before they go live.
7. Email and support
We only send service emails: account confirmation, password recovery and password-changed notices. They are sent from noreply@mybenchspace.app through Resend. We send no newsletters or advertising. If you write to support@mybenchspace.app, the message is forwarded to us through Cloudflare and we only use it to reply to you.
8. This website
The website is hosted by Cloudflare, which processes your IP address and the technical data of the request to show you the pages and protect them from attacks. The website uses no cookies, analytics or third-party content: even the fonts are served from our own domain.
9. Device permissions
The apps ask for a permission only when you use the feature that needs it: camera (to photograph membranes, notes or material to attach), photos and files (to choose images and PDFs to attach or files to import), microphone (dictation in MyBenchBook). We do not use location, contacts or advertising tracking.
10. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing the account, sign-in, password recovery, service emails | Performance of a contract (Art. 6(1)(b)) |
| Cloud sync and subscriptions | Performance of a contract (Art. 6(1)(b)) |
| AI features | Performance of a contract (Art. 6(1)(b)), with your explicit consent to send content to the AI provider |
| Usage limits, security, abuse prevention | Legitimate interest (Art. 6(1)(f)) |
| Answering support requests | Performance of a contract or legitimate interest (Art. 6(1)(b) and (f)) |
| Legal obligations (for example tax, for purchases) | Legal obligation (Art. 6(1)(c)) |
We make no automated decisions that produce legal effects on you. The texts proposed by the AI are only suggestions: you decide whether to use them.
11. Providers and transfers
We rely on these providers, which process data on our behalf and according to our instructions (or, for Apple and Google, as platforms you use directly):
| Provider | What for | Where |
|---|---|---|
| Supabase, Inc. | Account, database, synced files, server functions | Frankfurt (EU) |
| Anthropic, PBC | MyBenchBook AI features | United States |
| Resend, Inc. | Sending service emails | Ireland (EU), company in the United States |
| Cloudflare, Inc. | Website, DNS, forwarding support emails | Global network, company in the United States |
| Apple Inc., Google LLC | Stores, payments, sign-in with Apple or Google, device backups | According to their policies |
| Hugging Face, Inc. | Downloading the dictation model | United States |
Transfers outside the European Economic Area rely on the EU-U.S. Data Privacy Framework, where the provider is certified, or on the Standard Contractual Clauses approved by the European Commission.
12. Retention
- Account: until you delete it. Accounts never confirmed are deleted automatically after 7 days.
- Synced content (MyBenchBook): until you delete it, choose "delete only MyBenchBook data" or delete the account.
- AI credit counts: as long as the account exists.
- Technical logs of servers and emails: a few days or weeks, according to the providers' settings.
- Database backups: overwritten by the provider according to its backup cycle (a few days).
- Support emails: as long as needed to handle the request, 24 months at most.
- Data on your device: stays under your control; you delete it from the app or by uninstalling it.
13. Security
Communications are encrypted (HTTPS). On the server each account can read and write only its own data, files are kept in a private space and passwords are stored only in encrypted form. The services' secret keys are never included in the apps.
14. Your rights
You can ask us at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest. You can withdraw your consent for the AI whenever you like, without affecting processing already carried out. First and last name can be changed directly in MyWB (for MyBenchBook, write to us); your content can be exported to PDF, Word or as a MyWB package. You can delete your account from the apps or by writing to us.
To exercise your rights, write to support@mybenchspace.app: we answer within one month. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) or the authority of the country where you live.
15. Minimum age
The apps are designed for professional and academic use and are reserved for people aged at least 18. We do not knowingly collect data from minors; if you think this has happened, write to us and we will delete it.
16. Changes
If we change this policy we publish the new version here, with the date of the update. If the changes are significant (for example new kinds of data or new providers), we will also tell you in the app or by email.