Privacy policy

Last updated: August 15, 2026 · Early access

The short version: your notes are yours. Everything is private unless you deliberately share it. We don’t sell your data, we don’t show ads, and we don’t use your content to train AI models. You can export everything or delete everything, anytime, from inside the app.

What we collect

Your account: the email address you sign up with, your language, and the display name and avatar you choose to set. If you never set a display name, readers in your circles see a short name derived from your email address; public link previews never show it.
Your content: the notes, quotes, thoughts, tags, books, collections and vocabulary you create, and the page photos you take.
Voice notes: the recording is transcribed and then discarded. We keep the transcript text as part of your note, never the audio.
Page photos: stored privately so you can reopen the original page from your note. They are deleted when you delete the note, and with your account.
Kindle import: the notebook email you send is processed to create your notes and is not stored. An import log (the sending address and how many highlights arrived) is kept for 90 days so Settings can show your recent imports.
Social features you use: your friends list, reading circle memberships, the comments and reactions you post, the recommendations you send with the reason you wrote, and referral counts.
Technical basics: a push notification token when you turn notifications on, your timezone, and usage counts that enforce plan limits.
Feature usage counts: the app records which features you use (opening the digest counts as one event), tied to your account, never including any content. We read these numbers to decide what to improve. No third-party analytics or tracking SDKs anywhere; this website keeps only cookieless, aggregate page statistics.

How AI processing works

NotaFlow’s job is turning what you capture into structured notes, and parts of that run on specialized AI providers. Voice recordings are transcribed by Groq. Page photos are read, and notes are structured, summarized and made searchable, by OpenAI. Optional audio narration of your digests is synthesized by Google Cloud. Each provider receives only what that step needs, only when you use the feature, under API terms that do not allow them to train models on your content. We do not train models on your content either.

Where your data lives

Your data is stored with Supabase (database and file storage) and processed by our backend on Google Cloud, in the United States, encrypted in transit. A few focused services help run the product: Expo delivers push notifications (the notification text passes through their servers), Cloudflare serves this website and routes Kindle import email, Resend sends account emails like password resets, and book searches query Open Library to find titles and covers. This website loads fonts from Google Fonts and uses Plausible for cookieless analytics.

What sharing actually shares

Private by default. Nothing you capture is visible to anyone until you deliberately share it.
Reading circles see only the notes you chose to share for that one book, and only their text: quotes, thoughts, page numbers, tags. Never your page photos, never your audio, never the rest of your library.
Friends and circle co-members can see your profile: name, avatar, book counts, and shelves of what you are reading and have finished. Titles and covers only, never your notes. Everyone else sees nothing.
A recommendation carries the book, your reason, and the quote you chose. Its public link preview shows the book, a short version of the reason, the cover, and your name only if you explicitly set one.
Share cards are images you generate and send yourself, wherever you choose to send them.
Avatar photos and covers you upload are served from unguessable public web addresses, the way most apps do it; anyone you share content with can load them.

What we never do

Sell or rent your personal data.
Use your notes, audio or photos to train AI models.
Show you advertising.
Publish your page photos or show them to other users. Ever.

Retention, export, deletion

Your content stays until you delete it. Deleting a note also deletes its page photos. Settings has a full export (every note, book, collection and word, in JSON) on every plan, and a delete account option that removes your content and files from our systems; residual copies in encrypted backups expire on their own short schedule. If you cancel a paid plan, nothing is deleted. You simply return to the free plan’s limits.

Your rights

You can access, export, correct and delete your data yourself, from the app, at any time. If you are in the United States, state privacy laws may give you rights to know, correct, delete and opt out of sales; we sell nothing, and the rest you can exercise directly or by writing to us. If you are in Mexico, you have the rights of access, rectification, cancellation and opposition (ARCO) under the LFPDPPP; write to us and we will act on your request. Wherever you are: email us and a human handles it.

Children

NotaFlow is not directed at children under 13 and we do not knowingly collect their data. If you believe a child is using the service, tell us and we will delete the account.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect.

Contact

Questions about privacy? Write to us and a human answers: [email protected]