Privacy
Last updated 30 October 2026. This page says what we keep and why, in plain words. Questions about your data: hello@notefriends.com.
What stays on your device
A copy of each note you open, and its reading style, is saved in your browser’s local storage so nothing is lost if the connection drops.
What we store when you share or sign in
- Your notes. The text and reading style of notes you share or save are stored on Cloudflare. Shared notes are not end-to-end encrypted, and anyone with a note’s editing link can read and change it. Keep links private.
- Your email address. Used to sign you in with a link. Supabase sends the sign-in email and holds your account in Ireland. We do not send marketing email and do not sell your address. It is never sent to an AI.
- Note titles and times. Your account keeps a list of your notes with their titles and last-edited times, so My notes can show them.
Cookies
Three cookies, all needed for sign-in, all HttpOnly (page scripts cannot read them): a session cookie, a refresh cookie that lasts up to 30 days, and a 10-minute cookie that ties a sign-in link to the browser that asked for it. Signing out clears the session. We use no advertising or tracking cookies.
Usage analytics
We use PostHog (EU) to count page views and clicks so we can see which parts of NoteFriends get used. Its requests go through NoteFriends’ servers first, and the page contacts no PostHog address itself. It keeps an anonymous ID in your browser’s local storage, not a cookie. It does not record your screen, and it never receives your note text, note titles or the keys in sharing links. Text on the page is masked, and page addresses are sent with room and page ids and everything after a ? or # removed.
AI in rooms and notes
Some AI runs without being asked. When you post in a room, the message goes to an AI to update the room’s Memory. In a room alone with Nota, she answers every message. In a group, a quick check decides whether she should join in. When you ask her, she reads the room’s chat, pages, Memory and photos to answer. You can also ask for AI help to title, rewrite, summarize or draft.
What reaches the AI. OpenAI gets the room’s text as the room shows it, with people named as the room names them. Account email addresses are never sent, and photo location and camera details are removed first. Short rewrites use Cloudflare Workers AI and can fall back to OpenAI. Neither provider trains its models on it, and processing may happen outside the EU. Our requests to OpenAI ask it not to store them; the quick-check requests have no such setting. In both cases OpenAI may keep requests up to 30 days for abuse monitoring, then deletes them. Cloudflare does not keep short rewrites after it answers.
Web search. Nota searches the public web through OpenAI for places and things. Searches are checked before they leave so that they don’t look up people in the room by name or carry contact details or addresses. The search reaches public websites. What a search finds on public websites is kept for up to six months for reuse, with no record of who searched or in which room, so a later question in any room may be answered from it. Nothing is kept from a message that asks Nota not to remember it.
What we keep. Nota’s replies and the changes she makes are saved in the room, like anyone’s messages and edits. Memory keeps a short takeaway of what you post, with who said it and when, so Nota can use it later. When you tell Nota something lasting about yourself (where you live, who lives with you, languages, what you eat, a standing preference), she keeps it as your own memory in that workspace and uses it only in its rooms you are in, without saying which room you said it in. She never keeps your health beyond diet, money, relationships, work or beliefs this way, or anything you asked her not to remember. Nobody else can see that list; you see and remove it under Your memory, and it is deleted when you leave a team. We don’t keep a copy of what was sent to the AI for each request; for each request we keep only counts (task, size, cost, timing) to run daily limits. The exception is NoteFriends staff testing the app: in rooms where everyone who has taken part is staff, we keep a record of what Nota was given and answered for up to 90 days in our systems to fix problems and measure quality.
Spam protection
Before a sign-in email is sent, Cloudflare Turnstile checks that you are not a bot. It may look at signals from your browser to do this, under Cloudflare’s privacy policy. To limit how many notes one network can create, we count creations against a one-way hash of your network address, kept for the current day only.
Deleting your data
You can delete any note you own from My notes, or use Delete shared note on an open note; the text is removed. To remove your whole account and its notes, use Delete account on your You page, or email hello@notefriends.com and we will remove them.
Who else handles data
- Cloudflare: hosts the site, stores notes and runs short AI edits.
- Supabase: sign-in, the database and the sign-in emails.
- OpenAI: AI answers, Memory and web search.
- PostHog (EU): usage counts.
- Cloudflare Turnstile: the bot check at sign-in.
- Unsplash: when you search for a photo; its images load from Unsplash.
- MET Norway: weather from a place’s coordinates, in the weather app.
- OpenStreetMap Nominatim: when you type a place.
- Sites whose images or videos you embed in a note: they see your browser load them.