Privacy policy
In short: Noter stores your email address and the notes, to-dos and images you put into it, so that you can use them on your devices. Nobody at Noter reads them, including its owner. We don't show ads, don't sell data, and don't use tracking or analytics tools. You can export or delete everything.
Who we are
Noter is an independent note-taking service run by its owner in India ("we", "us"). For anything about your data, use the contact form and choose "Privacy or account deletion". This is also how to reach us with a grievance.
What we collect
| Data | Why |
|---|---|
| Your email address | To create your account, send sign-in links, and check you have an invite. |
| Your notes, notebooks, sections, pages, to-dos, tags and settings | To store them and show them to you on your devices. This is the service itself. |
| Images you add to pages | The same as above. |
| Sign-in and session records (when you signed in, device and browser type, IP address) | To keep you signed in, protect your account and fix problems. |
| What you send through the contact form (name, email, message) | To reply to you. |
We don't collect your contacts, location, microphone or camera. If a future feature needs the camera (for example scanning a QR code to link a device), it will only be used when you start that action.
What we don't do
- We don't read your notes, to-dos or images. This rule applies to everyone who runs or helps build Noter, including its owner and the AI assistant used to build it. The only exceptions: when you ask us to help with a problem and give permission (we then look only at what is needed), or when the law requires it, in which case we will tell you unless the law forbids that.
- To keep the service running we look only at technical information: counts, sizes, dates, error logs and sign-in records, never the content of your notes.
- Be aware that people with administrator access to the database are technically able to see notes that are not in a locked notebook. Our rule above forbids it. Locked notebooks are encrypted on your device with a passphrase only you know, so nobody but you can read them, even with that access. If you forget that passphrase, those notes cannot be recovered by anyone.
- We don't sell or rent your data, and don't share it for advertising.
- We don't use advertising, tracking or analytics tools on the app or this website.
- We don't use your notes to train AI models.
Where your data is kept
We use a small number of service providers who store or process data for us, under their own security and privacy commitments:
- Supabase: database, sign-in and file storage for the app. Hosted in its Mumbai, India region.
- Cloudflare: hosts this website and the app's pages. Contact form messages are stored with your other data in Supabase.
- An email delivery service: sends your sign-in emails.
- GitHub: stores encrypted nightly backups if you turn them on. GitHub can't read them; only your own key file and passphrase can open them.
- Google: only if you choose Continue with Google, to confirm your email address.
- Google Play: if you install Noter from the Play Store, Google processes the install and any purchase under its own policy.
Some of these providers may process data outside India. We choose providers that protect data with encryption and access controls.
How we protect it
- Every account can only reach its own records, and the database itself enforces this rule.
- Data is encrypted in transit (HTTPS) and encrypted on disk by our providers.
- Passwords are stored only as salted hashes by Supabase Auth. You can also sign in with Google or by linking a new device from your phone.
- Encrypted backups are locked with a key that only you hold, protected by your passphrase. We can't open them or recover the passphrase.
No system is perfectly secure. If a breach affects your data, we'll tell you and the relevant authority as the law requires.
How long we keep it
We keep your data while your account is open. Pages you move to Trash stay there until you empty it or delete them. When you delete your account in Settings, your notes, to-dos, images and email address are deleted straight away. Encrypted backups of your account are deleted by the next nightly run. Contact form messages are deleted within 12 months.
Your choices and rights
Under India's Digital Personal Data Protection Act, 2023 and similar laws, you can:
- Access and export your data at any time from Settings › Backup & restore in the app.
- Correct anything in your notes yourself, or ask us to correct your account details.
- Delete your account and data yourself in Settings › Account info › Danger zone, or by contacting us.
- Withdraw consent by deleting your account.
- Nominate someone to act for you if you can't, and complain to us first, then to the Data Protection Board of India if you aren't satisfied.
Age
Noter is meant for people aged 18 and over. We don't knowingly hold data about children. If you think a child has an account, contact us and we'll delete it.
Changes
If we change this policy in a way that matters, we'll show a notice in the app before it takes effect. The date at the top shows the latest version.