Privacy

Who we are

unnotable is a notes app run from Australia. Questions about this policy, or about your data, go to support@unnotable.app.

What we collect

• Your account. Your email address, and your password stored only as a secure hash. If you sign in with Google, we also get the name and profile picture Google shares, which the app shows as your avatar.
• What you write. Your notes, comments, topics, saved views and settings, your conversations with the AI and their results, and any changes connected apps propose.
• What you do with your notes. When a note was opened, edited, ticked off, skipped in review or archived, and which AI suggestions you accepted or turned down. Review uses this to decide what to bring back to you, the stand-up to see what moved, and the progress page to show it.
• How much AI you use. A count of AI requests per account per day, so the daily allowance can be applied.
• Visits. Cloudflare Web Analytics counts page views on this website and the app, without cookies and without identifying you.

The app keeps your sign-in session and a few preferences, like your theme, in your browser’s local storage. It sets no tracking cookies.

How we use it

• To run the app: storing, showing and syncing your notes.
• To run the AI features when you use them.
• To send account emails: confirming your address and resetting your password.
• To keep the service safe and working, such as applying the daily AI allowance.

We don’t use your notes to train AI models, and we don’t read them unless you ask us to help with something.

The AI features

Chat, smart add, the stand-up and review’s suggestions send the notes they work on to our AI provider, currently OpenAI, to produce their answer. Only when you use one of them. OpenAI’s API terms say data sent through the API isn’t used to train their models, and is kept for up to 30 days to monitor for abuse. If a chat looks something up on the web, the search runs through the same provider.

Connected apps. If you connect an app like Claude, it can read your notes with the access you grant on the consent screen, and what it does with them is covered by that app’s own privacy policy. Anything it suggests waits for you to commit it. You can disconnect it any time in Settings.

Who we share it with

We use a small number of services to run unnotable, and share only what each needs:

• Supabase stores your account and notes, and handles sign-in.
• Cloudflare hosts the website and app, counts visits, and forwards email sent to support@unnotable.app.
• Resend delivers account emails.
• OpenAI runs the AI features, as above.
• Google, only if you choose to sign in with Google.

We don’t sell your data, and we don’t share it with advertisers.

Where it’s stored

Your account and notes are stored by Supabase in Seoul, South Korea. Some of the services above run in other countries, including the United States, so your data may be processed there. We rely on each provider’s standard data protection terms for those transfers.

Keeping and deleting it

We keep your data for as long as you have an account. To export your notes, or delete your account and everything in it, email support@unnotable.app from the address you signed up with. We’ll do it within 30 days, usually much sooner. Deleted data leaves our provider’s backups as they cycle out.

Keeping it safe

Everything travels over encrypted connections. Each account can only read its own notes: that’s enforced by the database itself, not just the app. Passwords are stored only as hashes. No system is perfectly secure, but we take reasonable care, and we’ll tell you promptly if something goes wrong that affects your data.

Your rights

You can ask to see, correct, export or delete your data at any time, by email. Depending on where you live, including the EU, the UK and Australia, you may have further rights under privacy law, and you can complain to your local privacy regulator. In Australia that’s the Office of the Australian Information Commissioner.

Children

unnotable isn’t meant for children under 16, and we don’t knowingly collect their data.

Changes

If we change this policy, we’ll update this page and the date at the top. If a change matters, we’ll also tell you by email or in the app.