Noto Privacy at a glance

A simple, honest summary of what we collect — and what we never do with it.

We collect

  • Account information (name, email)
  • Content you choose to store (notes, tasks, maps)
  • Files you upload
  • Study activity (focus time, reviews, quiz scores)
  • Technical information necessary to operate the service

We don't

  • Sell your personal data
  • Use your notes for advertising
  • Read your notes for marketing
  • Share your notes with other users without your permission
🇺🇸

Your location

United States

Your privacy information is adapted to United States.

Change
Applicable framework:CCPA / CPRA (California)·CCPA·Supervisory authority:California Attorney General

Your rights

  • Know what personal data is collected
  • Know if data is sold or shared and to whom
  • Delete your personal data
  • Opt out of sale or sharing of personal data
  • Limit use of sensitive personal data
  • Non-discrimination for exercising your rights
  • Authorized-agent requests

Data-processing inventory

Data-processing inventoryLegal basisRetention

Account & profile

Identify and authenticate you; manage your account.

Contract (GDPR Art. 6(1)(b))Account lifetime + 30 days

Study content

Provide the study tools you use (notes, tasks, exams, flashcards, calendar, mind maps, revision sheets, AI agents).

ContractUntil you delete it (trash: 30 days)

Uploaded files

Attach and re-open documents in your notes.

ContractUntil you delete the file

AI inputs

Generate AI outputs (summaries, flashcards, quizzes, revision sheets, chat, explain-it-back).

ConsentTransient (per provider retention policy)

Usage analytics

Understand usage and improve the app.

Legitimate interest / consentRaw events up to 12 months; aggregates longer

Collaboration data

Share notes with collaborators you invite.

ConsentUntil you unshare

Backups

Disaster recovery.

Legitimate interestUp to 30 days

Contact messages

Handle support/contact requests; rate-limiting and audit.

Consent / legitimate interestUp to 12 months

Where your data goes

Click any box to see what is sent, why, where, how long it's kept, who receives it, and whether it's used for training.

Database

Tap a node to inspect it
What is sent
Notes, tasks, exams, flashcards, calendar, revision sheets, AI agents.
Why
To save your work and sync it across your devices.
Where
Base44-managed cloud database (encrypted at rest).
How long
Until you delete it; backups retained up to 30 days.
Who receives it
Only you and the hosting infrastructure.
Used for training?
Never.
Contractual safeguards
Row-level security, per-user isolation, no cross-user access.

Privacy changelog

How Noto's data practices have evolved.

  1. New AI provider added to flashcard generation

    August 25, 2026

    We added an AI provider as the model behind flashcard generation from notes and documents.

    Data affected: AI inputs
    Purpose: Flashcard generation
    Retention: Transient — not stored by Noto
    Training: Not used for training
    Your action:None required

  2. Trash auto-purge window shortened to 30 days

    August 20, 2026

    Deleted notes, flashcards, and quiz attempts are now permanently removed after 30 days in trash instead of 90.

    Data affected: Study content
    Purpose: Lifecycle / retention
    Retention: 30 days in trash, then hard-deleted
    Training: Not used for training
    Your action:None required

  3. Explain-It-Back voice game launched

    August 12, 2026

    A new study game transcribes your spoken explanation of a note and sends it to an AI for assessment. Audio is processed by the browser; only the transcript is sent to the AI provider.

    Data affected: AI inputs
    Purpose: Explain-it-back assessment
    Retention: Transient — not stored by Noto
    Training: Not used for training
    Your action:Consent required

AI

Some features require sending selected content to external AI providers. Here's exactly what is sent.

Summarize
What's sent: The text of your selected noteWhy: Generate a summary and key terms
Flashcards
What's sent: The text of your selected noteWhy: Create flashcards from your notes
Quiz
What's sent: The text of your selected noteWhy: Generate quiz questions
Revision sheet
What's sent: The text of the notes in your selectionWhy: Build a revision sheet
Explain it back
What's sent: Your explanation and the note's key conceptsWhy: Score your explanation
AI assistant
What's sent: Your message and relevant study contextWhy: Answer your study question
Document chat
What's sent: Your question and the document's extracted textWhy: Answer questions about your document
Extract concepts
What's sent: The text of your selected noteWhy: Extract key concepts
Provider: Noto AI · Used to train models: No — Noto doesn't use your content to train its models.

Analytics

Here's exactly what analytics we collect.

  • Which screens you open and which features you use
  • Study actions (e.g. session started, card reviewed)
  • Device type and language preference
  • We never collect the content of your notes through analytics

Your choices

Export everything

Download a JSON file of your stored data.

Delete everything

Opens account deletion in Settings.

Go

Manage analytics

Re-open the cookie & analytics consent choice.

Manage AI processing

Re-enable the pre-action data confirmations for AI features.

Our data practices are public

Noto's full privacy & data-handling documentation — architecture, retention, deletion, security, AI processing and more — is published in the open on our GitHub transparency repository.

View on GitHub

Last updated: 8/29/2026 · Full privacy policy · noto-transparency