Privacy Policy

01Using the app without an account

The free app works entirely on your device. With no account, nothing you write, record or draw is sent to us, and we store nothing on our servers. Voice notes are transcribed on your device and your audio stays there. The app may fetch public information to display something you saved, such as the title of a YouTube link, or the Pro price from Google Play when you open Settings; these requests carry none of your notes.

02If you create an account

Signing in enables optional cloud backup, sync, and AI features. With an account we process:

Your email address

to create and secure your account (via email code or Sign in with Google).

Your notes

the text, voice recordings and their transcripts, and drawings you choose to sync, with the folders, tags and research answers that go with them, so they can be backed up and organized. Data is encrypted in transit. Photos stay on your phone, and for an attached file only its name is synced, never the file.

Voice recordings for cloud transcription

with Pro and cloud AI, a new voice recording is sent to be transcribed in the cloud (see OpenAI below). This is on by default; turn off Cloud transcription in Settings to keep transcription on your phone.

03Service providers

Supabase

stores your account and your synced notes, recordings and drawings (hosted in the EU), and runs the server functions that sync them and pass requests to the AI providers below.

Anthropic (Claude)

with Pro, when you tap Tidy now, on an AI save mode pass, for a note that has an instruction, and when an automatic tidy is retried, the note's current text and its captures are sent to Anthropic's API on our behalf to tidy it. Anthropic also receives a voice note's transcript, or the text of a capture you tag Split, to split it into points, a note's text to break it down into smaller notes, and a research capture's text to answer it, including the web searches Anthropic's web search tool runs for it. It is used only to provide the feature you asked for.

OpenAI

with Pro, the text of a new capture is sent to OpenAI's API on our behalf, with the titles and opening lines of your recent notes and your tag names and descriptions, to file it into the right note. The automatic tidy after a change sends the note's current text and its captures the same way. With cloud transcription on, the recording of a new voice note is sent to be transcribed. It is used only to provide these features.

TypeSafe (Jev)

with Pro and Spot tasks on, the text of a new capture is sent to TypeSafe's API on our behalf to check whether it is something you still have to do, so it can be tagged Actionable. It is used only to provide this feature.

Google

handles Pro purchases through Google Play billing (we receive the purchase status, never your payment details), and is used for sign-in only if you choose Sign in with Google.

Vercel

hosts this website and the web viewer at app.chatnoteai.com, and forwards API link requests to our server. It sees standard request data such as IP addresses and the pages requested, not the content of your notes, except a note you make available through the API link, which passes through it when read.

Private notes, local-only notes, and every note while your account is in Private sync or On this phone only are never sent to these AI providers.

04Private notes and account modes

In a private note, the text, the captures filed into it, and their recordings and drawings are encrypted on your phone before they are uploaded, with a key only your phones hold. We store the encrypted copy and cannot read it. When a note becomes private, its older readable versions are erased from the cloud. Cloud AI, the web viewer and the API link are off for a private note.

The server can still see about a private note: dates, folder and tag names, its template, which captures belong to which note, the kind and length of each capture, and how many versions the note has. A capture synced before you filed it into a private note was readable until then, a capture that is also in a readable note stays readable there, and server backups keep earlier readable copies for a while.

You can also choose a mode for the whole account in Settings, Account & sync. Sync keeps readable copies in the cloud, so cloud AI, the web viewer and the API link can use them. Private sync makes every note private, new notes too. On this phone only deletes everything in the cloud and keeps your notes on your phone; you stay signed in, and cloud AI is off in this mode.

Private notes use a recovery code, shown to you once, so another phone can open them. The code is never sent to us: we store only your key wrapped by that code, which opens nothing without it. If you lose both the code and your phone, nobody can open the cloud copies of your private notes, not even us.

05The API link

With Pro you can make a chosen note available through the API link. Anyone who has its address can then read that note's current text, and the list of notes you made available, with no sign-in, until you switch the note off, close the link, or change the address in Settings. It is off by default and never available for private or local-only notes. We store only a hash of the address's secret part, count reads so you can see when the link was last used, and count failed requests per hashed IP address for at most two hours to stop guessing.

06Your control

You can delete your account and all associated data at any time, see Delete your account and data. Your original notes are never altered by AI without a visible, dated, reversible record.

07Contact

Questions? Email hi@dominguezpablo.com.