Privacy Policy

Last Updated: June 23rd, 2026

Your privacy is critically important to us. This Privacy Policy explains how Nota ("we", "us", or "our") collects, uses, processes, and protects your information when you use our application.

We built Nota with a privacy-first architecture. We only process what is necessary to provide the app, sync your workspace, manage subscriptions, and power the AI features you choose to use. We also give you control over whether AI processing is allowed.

01 Data Collection

Nota collects limited information necessary to create your account, sync your notes, manage subscriptions, and provide the features you request.

• Account Data: Name, email address, and account identifier provided by your chosen authentication provider, such as Apple or Google.
• Workspace Data: Notes, note titles, tags, folders, preferences, shared-note settings, and related app data needed to provide sync, backup, collaboration, and organization features.
• Subscription Data: Subscription status, entitlement status, purchase validation data, and usage limits needed to provide Free, Pro, and other paid features.
• Usage and Diagnostic Data: Limited technical information related to app functionality, service reliability, usage limits, crash diagnostics, and feature performance.

02 Data Storage and Syncing

Nota stores and syncs your app data so your notes can remain available across supported devices.

• Text Data: Your notes, note titles, tags, folders, shared-note data, and app preferences may be securely synced using our backend infrastructure, including Google Firebase.
• Audio Files: Raw audio recordings are stored locally on your device or within your personal Apple iCloud Drive, depending on your settings and device configuration. Nota does not use raw audio files for advertising or model training.
• Shared Notes: When you share a note or collaborate with others, the relevant note content and collaboration data are stored and processed so the shared experience can function.
• Security: We use commercially reasonable technical and organizational safeguards to protect your data. No system can be guaranteed to be perfectly secure, but we design Nota to minimize unnecessary data access and processing.

03 Artificial Intelligence (AI) Processing

Nota includes optional AI features that help users summarize, rewrite, translate, organize, tag, draft, and otherwise process notes or user-provided content.

When you choose to use Nota AI, certain information may be securely transmitted to third-party AI service providers in order to generate your requested response.

• What data may be sent: The prompt or instruction you provide, selected text, note title, note content, relevant note context, transcribed text from voice notes when used in an AI request, and text extracted from scans, images, or documents when used in an AI request.
• Request-based processing: Nota does not automatically send your entire note library to AI providers. AI processing is request-based and limited to the content needed to complete the specific AI action you choose.
• Purpose of processing: AI request data is used to generate the response or output you requested, such as a summary, rewrite, translation, tag suggestion, note organization, or other AI-assisted result.
• User permission: Nota presents an AI Processing Permission disclosure before AI processing is enabled. You can review or change this permission in the app under Settings > Privacy & Permissions.
• If AI processing is disabled: Nota will not send your note content, selected text, prompts, or relevant note context to third-party AI providers for AI generation.

04 AI Providers Used by Nota

Depending on your selected model, feature, subscription tier, region, and availability, Nota may process AI requests through one or more third-party AI service providers.

• Global and non-China providers may include: Google Gemini, OpenAI / ChatGPT, Anthropic / Claude, xAI / Grok, DeepSeek, Alibaba Cloud / Qwen, Z.ai / GLM, SiliconFlow-hosted models, and Moonshot AI / Kimi.
• China-region providers may include: DeepSeek, Alibaba Cloud / Qwen, Z.ai / GLM, SiliconFlow-hosted models, and Moonshot AI / Kimi.
• China-region routing: For users in Mainland China, or when Nota uses China-region AI processing, Nota is designed to use regionally available AI providers. China-region AI processing is not intended to route requests to Google Gemini, OpenAI, Anthropic, or xAI.
• Provider selection: Not every provider receives every request. The provider used depends on the selected AI model, feature, subscription tier, region, system availability, reliability, and technical requirements.
• Provider changes: Available AI providers may change over time based on regional availability, legal requirements, technical requirements, reliability, pricing, security, or product changes.

05 AI Data Use, Retention, and Training

Nota uses AI request data only to provide the AI response requested by the user.

• No sale of AI request data: Nota does not sell your notes, prompts, selected text, or AI request content.
• No advertising use: Nota does not use your AI request content for advertising.
• No Nota-owned model training: Nota does not use your notes, prompts, selected text, or AI request content to train Nota-owned AI models.
• Third-party provider processing: Third-party AI providers process requests according to their own service terms, privacy policies, data processing terms, and security practices. Depending on the provider, request data may be temporarily retained for service operation, abuse prevention, security, diagnostics, legal compliance, or reliability.
• Provider safeguards: Where supported, Nota uses provider settings, API configurations, and business processing options intended to limit training use and protect user content.
• Sensitive information: You should not include sensitive personal information, confidential business information, financial information, health information, government identification numbers, passwords, private keys, or other highly sensitive data in AI requests.

06 Bring Your Own Key (BYOK)

Some current or future Nota tiers may allow users to connect their own AI provider credentials or API keys.

• User-provided keys: If you provide your own API key, the key is used to send your selected AI requests to the provider you choose.
• Provider responsibility: Requests made using your own API key are processed by the provider you selected and are subject to that provider’s terms, billing rules, privacy policy, and data processing practices.
• Nota access: Nota does not use your BYOK requests for advertising or Nota-owned AI model training.

07 Voice Recording and Transcription

Nota allows users to capture voice notes and convert spoken content into text.

• Recording storage: Voice recordings are stored locally on your device or within your personal Apple iCloud Drive, depending on your settings and device configuration.
• Transcription: Nota uses Apple speech recognition or system transcription services where available to convert speech into text. Depending on device, language, operating system, and Apple system settings, transcription may be processed on-device or through Apple’s speech recognition services.
• AI use of transcripts: If you choose to use Nota AI on a transcript, the transcript text may be processed under the AI Processing sections above.

08 Scans, Images, and OCR

Nota may allow users to scan documents, import images, or extract text from visual content.

• Image access: Camera and photo library access are controlled by your device permissions.
• Extracted text: Text extracted from scans, screenshots, documents, or images may become part of your note content.
• AI use of extracted text: If you choose to use Nota AI on extracted text, that text may be processed under the AI Processing sections above.

09 Subscriptions and Payments

Nota uses Apple's native in-app purchase system and RevenueCat to manage subscriptions, purchases, entitlement status, and access to paid features.

• Payment information: We do not collect, store, or have access to your credit card number or full payment credentials.
• Subscription verification: RevenueCat receives purchase receipt and entitlement information from Apple to verify your subscription status.
• Feature access: Subscription and entitlement data are used to determine whether Free, Pro, or other paid features are available to your account.

10 Data Deletion

You have the right to delete your data.

• Deleting notes: Deleting a note within Nota removes it from your active workspace and from our active databases according to the app’s deletion and recovery behavior.
• Account deletion: To delete your entire account and associated account data, please contact us at privacy@nota.talk.
• Backup retention: Some deleted data may remain in encrypted backups or system logs for a limited period as required for security, reliability, fraud prevention, legal compliance, or disaster recovery.

11 Your Choices and Controls

You can control how Nota accesses and processes your information.

• AI processing: You can allow or disable AI processing in Settings > Privacy & Permissions.
• Device permissions: You can manage permissions for microphone, camera, photos, notifications, and other system features in your device settings.
• Cloud sync: Your device, iCloud, and account settings may affect how notes and recordings sync across devices.
• Account access: You may contact us to request access, correction, or deletion of account-related information.

12 Contact

If you have questions about this Privacy Policy, AI processing, data deletion, or your privacy rights, please contact us at privacy@nota.talk.