Privacy Policy

NotesSecured (“we”, “us”, or “our”) operates NotesSecured. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Our core principle: zero knowledge

NotesSecured is built so that we cannot read anything you create in the app — notes, to-do lists, titles, tags, folder names and attachments — or your passphrase. Everything you create is encrypted in your browser using a key derived from your passphrase. Only the encrypted ciphertext is stored on our servers. We do not have a copy of your decryption key.

2. Information we collect

• Account information: email address, password hash, and account metadata such as customer number and subscription status. We do not store your password in plain text.
• Encrypted content: ciphertext of your notes, to-do lists, tables, tags, and attachments. We cannot decrypt this.
• Usage data: anonymous analytics, feature usage, and crash reports only when you consent to analytics cookies.
• Payment data: handled by Stripe. We do not store full credit card numbers on our servers.

3. How we use information

We use your account information to authenticate you, provide the Service, enforce limits based on your plan, and send account-related emails. We do not sell your personal data.

4. Cookies and analytics

We use essential cookies for authentication. Optional analytics cookies are only set after you consent. You can change your preference at any time from the cookie banner.

When you consent to analytics, we load Google Analytics to measure aggregate visit statistics such as page views, approximate location and traffic source. It is not loaded at all if you decline or have not yet chosen. Google Analytics never receives your note content or anything else you create in the app — notes, to-do lists, titles, tags, folder names and attachments all stay end-to-end encrypted in your browser. Share links and checkout return pages are excluded from analytics entirely.

5. Data retention

We keep your account and encrypted content as long as your account is active. If you delete your account, we delete your encrypted data and account metadata within a reasonable time, except where we are required to keep information by law.

6. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. Contact us at support@notessecured.app to exercise these rights.

7. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or within the Service.

8. Contact

NotesSecured
Email: support@notessecured.app