Privacy Policy

Last Updated: April 13, 2026

1. Introduction

This Privacy Policy explains how NoteAI ("NoteAI," "the App," "we," "our," or "us") handles information when you use our local-first note, document, and AI knowledge vault application.

This Privacy Policy applies to NoteAI and its related support pages.

2. Our Privacy Approach

NoteAI is built around local storage and on-device workflows. In the current codebase, we do not require account registration, we do not run advertising or analytics SDKs, and we do not operate a mandatory cloud sync service for your vault content.

However, NoteAI is not a fully air-gapped product in every scenario. Certain optional features connect directly from your device to third-party endpoints when you choose to use them.

3. Information Processed by the App

3.1 Information Stored Locally on Your Device

Depending on how you use NoteAI, the app may store the following locally on your device:

• Notes, markdown content, titles, tags, and timestamps
• Imported files, extracted text, indexing metadata, and retrieval data
• Chat sessions, prompts, AI-generated responses, and task summaries
• Voice note audio files and on-device transcription results
• Local settings such as language, model selection, Local-Only Mode, and editor preferences
• Optional local app lock settings, including a locally stored PIN
• Local model files, embeddings, replay files, and local backup copies you create

3.2 Information We Do Not Intentionally Collect for Our Own Servers

In the current implementation, we do not intentionally collect or transmit your vault content to our own servers for routine use of the app. We also do not intentionally collect the following for our own analytics or advertising purposes:

• Your name, email address, or phone number through an in-app account system
• Advertising identifiers for targeted advertising
• Behavior analytics from third-party analytics SDKs
• Third-party crash-reporting feeds containing your note content
• Cloud-hosted copies of your notes or chat history by default

3.3 Optional Network Activity Triggered by You

NoteAI may connect to third parties in the following cases:

• Web page import: if you paste or submit a link, the app fetches that web page directly from your device in order to extract readable text and save it locally as a note.
• Model downloads: if you download local AI, embedding, or speech models, the app connects to third-party file hosts such as Hugging Face or Cloudflare R2-style storage endpoints.
• External links: if you open a link from the app, your system browser or app store may connect to that destination.
• Store-managed billing: if your version of the app later enables live paid purchases, the app store operator may process billing and related transaction data under its own privacy terms.

When one of these features is used, the destination website or host may receive technical request data such as your IP address, approximate location inferred from network routing, user agent, and request timestamps under that third party's own privacy practices.

4. How We Use Information

NoteAI uses locally stored information to operate requested app features, including:

• Creating, editing, organizing, searching, and displaying notes
• Importing documents and building local search or retrieval indexes
• Running on-device AI responses over your local content
• Recording voice notes and generating on-device transcripts
• Applying privacy and security settings such as Local-Only Mode and app lock
• Creating local backup copies on your device when you choose to do so

5. Third Parties and Service Providers

We do not currently use third-party advertising, analytics, or hosted cloud-sync providers for routine in-app vault data.

The main third parties relevant to this app are:

• Websites you choose to import from: those sites receive the request needed to deliver page content to your device.
• Model download hosts: these hosts deliver optional AI or speech model files to your device.
• Apple or other distribution platforms: they may process app distribution, store telemetry, device diagnostics, billing, or refund workflows under their own policies.

6. Data Retention and Deletion

Your local data generally remains on your device until you delete it, overwrite it, remove the app, or remove a local backup.

You can manage retention in several ways:

• Delete notes, sessions, or imported content inside the app
• Delete downloaded model files or local backups from your device
• Uninstall the app to remove app-managed local data, subject to how your operating system handles backups

If you export, back up, or share data outside the app, retention of those copies is controlled by you and the destination you choose.

7. Data Security

We use a local-first architecture to reduce unnecessary sharing of your content. The app also includes optional local privacy controls such as Local-Only Mode and a local PIN-based app lock.

No system can guarantee absolute security. Your data protection also depends on your device security, operating system protections, backup settings, and whether you share your device or exported files with others.

8. Children's Privacy

NoteAI is not directed to children under 13. If you are under the age of digital consent in your jurisdiction, please use the app only with permission from a parent or legal guardian.

Because the app does not require an online account in its current implementation, we do not knowingly collect children's personal information for our own hosted services. However, parents and guardians should supervise any minor's use of AI-generated features and imported web content.

9. International Data Transfers

We do not currently operate a routine cloud transfer system for your vault content. For that reason, there are generally no international transfers of your local vault data by us during ordinary local use.

If you use optional network features, the third-party website, model host, or app store operator you connect to may process data in other countries under its own terms.

10. Your Choices and Rights

Depending on your jurisdiction, privacy laws may give you rights such as access, correction, deletion, portability, or objection. Because NoteAI is primarily local-first, many of these controls are exercised directly on your device.

• Access: you can view your notes, chats, and local files inside the app
• Correction: you can edit your content and settings locally
• Deletion: you can delete content, backups, or uninstall the app
• Portability: you can export or back up local data where supported by your workflow

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we do, we will update the "Last Updated" date on this page. Material changes may also be described in the app or related support materials where appropriate.