Privacy Policy

Privacy Policy for Noto

Last Updated: February 8, 2026

At Noto, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we handle your information when you use our AI-assisted note-taking application.

1. Information We Collect

  • Google Account Data: When you sign in via Google, we collect your email address and basic profile information to create and identify your account.
  • Google Calendar Data: If you enable the "Sync to Calendar" feature, we access your Google Calendar to view and edit events. Specifically, we collect event titles, dates, and times to link your notes to scheduled reminders.
  • Audio and Voice Recordings: We collect audio data when you use our voice recording feature to provide AI-powered transcriptions.
  • Note Content: We store the text, titles, and tags you create within the app to ensure your data is synced across devices.
  • Usage Data: We may collect basic technical information (IP address, device type) to ensure the security and performance of our service.

2. How We Use Your Data

  • Service Delivery: We use your data to transcribe voice recordings and organize notes using AI.
  • Calendar Synchronization: We use the .../auth/calendar.events scope to automatically create, view, and update calendar events based on dates and times recognized within your notes.
  • Account Management: We use your email to manage your account and send important service updates.
  • AI Processing: We use third-party AI providers to transcribe and summarize notes. Your data is processed only to fulfill your requests and is not used to train public AI models without your explicit consent.

3. Google API Limited Use Disclosure

Noto's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Storage and Security

  • Infrastructure: Your data is stored securely using Supabase.
  • Encryption: All data, including Google OAuth tokens, is encrypted in transit using SSL/TLS and at rest using industry-standard encryption.
  • No Selling: We do not sell, rent, or trade your personal data, note content, or calendar information to third parties for marketing or advertising purposes.

5. Your Choices and Rights

  • Access and Deletion: You may view, edit, or delete your notes and synced reminders at any time.
  • Revoking Access: You can revoke Noto's access to your Google Calendar or your entire Google account at any time via your Google Account Security settings.
  • Account Removal: You can request the permanent deletion of your account and all associated data via our support channels.

6. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: