Privacy Policy
Effective: 2026-05-05 Last updated: 2026-05-05
This policy describes what data No Notes collects, how we use it, and what choices you have. Contact: report@nonotes.app.
The short version: we collect as little as we can. We do not ask for your real name, your contacts, your photos, or your precise location. We use Sign in with Apple specifically because it gives us a stable identifier without giving us your identity.
1. What we collect
Account data
- An anonymous user ID from Sign in with Apple. This is a stable identifier scoped to our app — we cannot use it to find you outside No Notes.
- A display alias (auto-generated; you can change it).
- The fact that you accepted our Terms, Privacy Policy, and Content Guidelines, and the version you accepted.
We do not receive your real name, your email address, your phone number, or any other Apple account detail unless you explicitly choose to share it.
Activity data
- Cases you have listened to, votes you have cast, cases you have saved, cases you have reported, and cases you have shared.
- Taste signals derived from the above (which silos you engage with) so the feed can rank cases for you. Taste signals live on your device first; if we ever sync them server-side, this policy will say so before we do.
Diagnostic data
- App crash reports (via Sentry), with no user-identifiable content.
- Anonymous product analytics (via PostHog) — events like "case played", "verdict cast", "report submitted". Tied to your anonymous user ID, not to your real identity.
- Apple's standard App Store analytics, which we cannot disable.
Purchase data
- If you subscribe, RevenueCat and Apple handle billing. We see that a purchase happened and what tier you are on. We do not see your payment details.
2. What we do not collect
- No real names.
- No email addresses (unless you write to us).
- No phone numbers.
- No address book, contacts, or call logs.
- No photos, camera, or microphone access.
- No precise location.
- No biometric data.
- No data about other apps on your device.
If a future feature needs any of the above, we will ask for explicit permission with a clear explanation, and the feature will be optional.
3. How we use your data
- To run the app — sign you in, show you the feed, count votes, deliver audio.
- To rank the feed for you (taste signals).
- To detect and remove abusive cases (kill-switch on three reports).
- To diagnose crashes and improve the app.
- To bill subscriptions through Apple and RevenueCat, where applicable.
We do not sell your data. We do not use your data for ad targeting. We do not share your data with data brokers.
4. Where your data lives
[VERIFY: legal review for region/transfer specifics]
- Account, vote, and report data: Supabase (Postgres + storage), hosted in the EU.
- Crash diagnostics: Sentry (EU).
- Product analytics: PostHog (EU).
- Subscription state: RevenueCat (US).
- Auth identifier: Apple Sign in with Apple.
If you are outside the EU and use the app, your data may be transferred to and processed in the EU. By using the app you consent to that transfer.
5. How long we keep it
- Account and activity data: until you delete your account, then within 30 days.
- Crash and analytics data: 90 days.
- Reported cases: retained for audit even after the case is removed, indefinitely, in anonymized form (no association with your account).
- Backups: rolling 30-day window; deletion may take up to 30 days to fully propagate.
6. Your rights
You can:
- Delete your account from inside the app. This removes your votes, saves, taste profile, and reports within 30 days.
- Request an export of your data by emailing report@nonotes.app. We respond within 30 days.
- Object to or restrict processing by emailing us. Where the law gives you specific rights (GDPR, CCPA), we honor them.
- Withdraw consent at any time. Withdrawing consent for analytics or crash reports may degrade the app experience but will not block functionality.
- Lodge a complaint with your local data protection authority. In the EU, that's typically your country's DPA. [VERIFY: legal review]
7. Children
No Notes is 18+ only. We do not knowingly collect data from anyone under 18. If we discover a minor's account, we delete it. If you believe a minor is using the Service, email us.
8. Third parties
We only share data with the processors listed in §4 above, and only to the extent needed to run the app. We do not sell, rent, or trade your data with anyone.
9. Changes
We may update this policy. Material changes are surfaced in the app and require re-acceptance before continued use. The current version is always at nonotes.app/privacy.