Privacy Policy

Ownly stores your data as plain Markdown in an Ownly data folder you select (Ownly/Objects, Accounts, Snapshots, Reviews, Logs, Archive). Ownly hosts no personal ledger data and requires no Ownly cloud account or sync service.

If you point your folder at a provider you control (Dropbox, Google Drive, OneDrive, iCloud Drive), that provider syncs the files under its own policy. Ownly never touches those providers' APIs or credentials. In the browser, folder access uses the File System Access API, only for reading and writing your Ownly Markdown files.

The core app never sends ledger data to an Ownly server. Hosted analytics events must not contain Markdown contents, filenames, paths, amounts, form values, reviews, snapshots, or tool results.

Ownly Capture is a Chromium MV3 side panel for collecting your own travel research. English is the store default; switching language in-panel never changes the data model.

• Local queue (ownlyCaptureStateV3 in chrome.storage.local): pending handoff only — collections, places, active collection id, settings. Only the background worker writes it.
• Google Maps enrichment: on your one-click request, resolves the captured place to public facts (Place ID, coordinates, rating, hours, address). Your ledger is never uploaded.
• Reference FX (open.er-api.com): display-only conversion using USD-pivot rates. Raw price text is never rewritten; no ledger data is sent with rate requests.
• Export: Markdown/JSON download or clipboard copy is an explicit on-device action. Nothing is uploaded; no account needed.

• sidePanel — open the Capture panel from the toolbar action.
• storage — persist the queue and language on-device.
• scripting — run place extraction on supported travel hosts and the FX tooltip.
• activeTab — read the active tab URL/title once per capture or currency re-detect.
• tabs — find an open Maps tab for context and reuse an open Planner tab for handoff. Page contents are never read via this permission.

The selection FX tooltip matches all pages so conversion works on any merchant page, but it is off by default (opt-in toggle), converts locally for display only, and never exfiltrates page content.

• Google Maps (regional domains): place lookup for the captured place; governed by Google's policy. Ownly keeps only facts you save.
• open.er-api.com: rate-table request with no ledger content (no amounts, names, notes, identifiers); cached on-device.
• Your own sync provider (if any): your Markdown files, synced by its client under its policy.

No sale of personal data, no ads. Access everything (plain Markdown + in-panel queue), delete it (in-panel delete, clear extension storage, or uninstall), and withdraw consent anytime (FX toggle off, or remove the extension). Planner Markdown stays in your folder until you archive or delete it there.