Privacy

Privacy Policy — A Note for Us

Effective: 17 July 2026  ·  Last updated: 1 October 2026

A Note for Us (“the app”, “we”, “us”) is a small, private shared journal. People who are close share a “Corner” and each leaves one small thing a day — a short note, a photo, or a brief video. This policy explains what we collect, why, and the choices you have. It is written to be read, not to hide things.

This policy is provided by A Note For Us. If you have any questions, contact us at contact [at] a-note [dot] app.

The short version

• We collect only what the app needs to work: your account details and the things you choose to post to your Corners.
• Your notes, captions, keepsake nicknames, and media are encrypted in transit and at rest, and are only shown to members of your Corner.
• We do not sell your data, profile you, or use your content to train AI or to rank/score anything.
• You can delete your account and your content at any time, from inside the app.

What we collect

Account information. When you sign in, we store your email address and the authentication details needed to keep you signed in and to secure your account.

Content you create. The notes, captions, photos, videos, voice notes, keepsake nicknames, and reactions you add to a Corner. Text content (notes, captions, keepsake nicknames) and your media files are encrypted before they leave your device (see How your content is protected below).

A place you choose for a post. You can, if you wish, put a post on your Corner’s map by choosing a spot for it. That spot (a latitude and longitude, which can be as exact as a street) is stored with the post, encrypted on your device like the rest of it, and shown only to members of your Corner. It is never added automatically, and you can move it or take it off the map at any time.

Your device’s location. If you tap “find me” on the map and allow it, the app reads your device’s location to move the map to where you are. That reading stays on your device: it is not sent to us and we do not store it. We never read your location in the background.

Corner and membership data. Which Corners you belong to, who else is in them, invitations you send or accept, and the shared history of the Corner (so the journal you and your people are building together keeps working). We also store when you last opened each Corner, so the app can show you what is new since then.

Notification tokens. If you enable reminders or notifications, we store a push notification token so we can deliver them. Daily reminders are scheduled on your device; you can turn notifications off at any time in your device or app settings.

Basic technical data. Standard information needed to operate the service securely and reliably (for example, connection metadata handled by our hosting provider).

Crash and error reports. If the app crashes or runs into an error, it sends a report so we can fix it: what went wrong and where in the app’s code, your device’s model, operating system, memory and storage, the app’s version, a random identifier for this installation of the app, and — if you’re signed in — your account’s ID (a random identifier, so we can match a problem you tell us about to its report; not your email or name). Reports never include your posts, your name, or anything you type.

We do not track where you are: the only location we store is a place you choose for a post. We do not knowingly collect contacts, browsing history, biometric identifiers, or advertising identifiers.

How we use what we collect

We use this information solely to:

• Provide the app — deliver your Corners, posts, invites, reminders, and shared history to the people in your Corner;
• Keep your account and content secure;
• Find and fix crashes and errors in the app;
• Communicate with you about your account or important service changes.

We do not use your content for advertising, for building profiles about you, for ranking or scoring, or to train machine-learning or AI models.

How your content is protected

Your text content, your media, and any place you choose for a post are encrypted on your device before upload and stored as encrypted data (“encryption at rest”). They are decrypted only for members of your Corner. Connections between the app and our servers use transport encryption (HTTPS/TLS).

This is encryption at rest, not “zero-knowledge” encryption. The keys that protect Corner content are managed by our backend so that members can be added, reinstall the app, or use a new device without losing access.

Who we share it with

We do not sell your personal data and we do not share it for advertising. We rely on a small number of infrastructure providers who process data on our behalf, under their own security and privacy terms, solely to run the service.

The map. The map in the app is provided by Mapbox. When you open it, the app asks Mapbox for the map of the area you are looking at, so Mapbox receives standard technical information such as your IP address and which part of the map is on screen. Mapbox’s software may also send Mapbox de-identified location and usage data to help improve its maps; you can turn this off at any time from the ⓘ button on the map (“Mapbox Telemetry”). Mapbox never receives your posts or the places you choose for them. See Mapbox’s privacy policy.

Crash and error reports. Crash and error reports are processed by Google’s Firebase Crashlytics, which keeps them for 90 days and then deletes them. Deleting your account doesn’t remove reports already sent; they are deleted when those 90 days are up. See Firebase’s privacy information.

We may disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

Data retention and deletion

We keep your account and content for as long as your account is active, so your Corners keep working.

You can delete your account at any time from Settings → Privacy & data → Delete account. During deletion you choose what happens to your past posts:

• Keep them — your notes and photos stay in your shared Corners, frozen under your name (as if you had simply left the Corner); or
• Remove everything — your posts, photos, videos, voice notes, and the keepsake stamps you authored are removed.

A Corner in which you are the only member is closed entirely either way.

When content is removed, the underlying media files are deleted from storage by a server-side clean-up process shortly afterward. Closed Corners are permanently purged after a short grace period.

Your rights

Depending on where you live (for example, under the EU/UK GDPR or the California CCPA/CPRA), you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can exercise the core of these rights directly in the app (account and content deletion). For anything else, contact us at contact [at] a-note [dot] app and we will respond as required by applicable law.

International data transfers

Your information may be processed and stored on servers operated by our infrastructure providers, which may be located outside your country. Where required, we rely on appropriate safeguards for such transfers.

Security

We take reasonable technical and organizational measures to protect your information, including client-side encryption of content, transport encryption, and access controls. No method of transmission or storage is perfectly secure, but we work to protect your data and to limit access to it.

Age

A Note for Us is for people aged 16 and over.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app.