Privacy Policy

This Privacy Policy explains what data Nota Solution collects, why, and what we do with it. Nota Solution is built around a simple idea: your notes are yours, they live on your device first, and nothing about them is used to build a profile of you.

The short version

• Your notes live locally on your device in an encrypted SQLite database.
• Cloud sync is opt-in. When on, an encrypted copy is stored so your other devices can catch up.
• We use Google or Apple sign-in only to identify your account. We don’t receive your password.
• No analytics, no tracking pixels, no advertising, no selling your data. Ever.
• You can export or delete everything at any time from the profile screen.

1. What we collect

Account information. When you sign in with Google or Apple, we receive a stable user ID, your email address, and the display name you chose with that provider. We use it to create your account and identify your device on sync.

Your notes. If you turn on cloud sync, we store an encrypted copy of your notes on our servers so they can appear on your other devices. Notes stay on your device even if sync is off.

Diagnostic data. When the app crashes, we may receive a crash report with technical details (device model, OS version, a stack trace). Crash reports don’t include the content of your notes.

1a. How Nota Solution uses Google user data

When you choose “Sign in with Google”, Nota Solution requests only the following OAuth scopes, and only uses the resulting data for the purposes listed:

• openid — a stable Google user ID. Used to create your Nota Solution account and recognize you when you sign back in.
• email — your Google account email. Used to display which account is signed in and to send account or security notices. Not used for marketing.
• profile — your display name and profile picture URL. Used to show your name and avatar in the profile screen so you can confirm the right account is active.

Nota Solution does not request access to Gmail, Google Drive, Contacts, Calendar, Photos, or any other Google product. Nota Solution does not use Google user data for advertising, does not sell or share it with third parties, and does not use it to train AI or machine-learning models.

You can revoke Nota Solution’s access to your Google account at any time from your Google Account permissions page.

2. What we don’t collect

• We don’t use analytics SDKs to track how you use the app.
• We don’t serve ads and we don’t share data with ad networks.
• We don’t sell your data to anyone, for any reason.
• We don’t read your notes, and no human at Nota Solution accesses them.

3. How your data is stored

On your device, notes are stored in a local SQLite database with OS-level encryption. In the cloud, notes are encrypted in transit (TLS) and at rest. Access to production systems is limited to a small number of engineers and gated by strong authentication.

4. Who we share data with

We use a small number of infrastructure providers to run the Service. They process data on our behalf and are contractually required to keep it confidential:

• Firebase (Google Cloud) — authentication, sync backend, crash reports.
• Apple Sign in with Apple — authentication (only when you choose Apple sign-in).

We don’t share your data with anyone else, except when required by applicable law (e.g. a valid legal request).

5. Your rights

You can, at any time:

• Export your notes as JSON from the profile screen.
• Turn off sync — your notes stay on the device, and the cloud copy is removed.
• Delete your account, which removes your synced notes from our servers within 30 days.

Depending on where you live, you may also have rights under GDPR, the CCPA, or similar laws — including the right to request a copy of your data or ask us to delete it. Email privacy@nota.app and we’ll help.

6. Data retention

We keep your synced notes for as long as your account is active. When you delete your account, we delete the associated data within 30 days, except where we’re required to keep it longer for legal reasons.

7. Children

Nota Solution is not directed at children under 13. If you believe a child has created an account, please contact us and we’ll delete it.

8. International transfers

Our infrastructure providers may process data in regions outside your country. Where required, we rely on standard contractual clauses to ensure appropriate safeguards are in place.

9. Changes to this policy

If we make material changes, we’ll notify you in the app or by email before the changes take effect.

10. Contact

Privacy questions or requests? privacy@nota.app.