Your library

Notes, documents, sheets, slides, sketches, recordings, scans, and the calendar are saved by the app on your device. This website does not receive, upload, or read that library. If you export or share a file, it goes where you send it.

What we collect

  • Account details — your name, email address, and chosen plan when you create an account.
  • Password — stored only as a one-way hash. We cannot read it.
  • Sign-in with Google, GitHub, X, or Microsoft — your name, email, and profile picture from that provider, plus a token so the provider can confirm it is you.
  • Billing — the name on the card and its last four digits for your invoice list. We never store a full card number.
  • Session data — a sign-in cookie, your IP address, and browser type, used to keep your account secure.
  • Contact messages — the name, email, topic, and message you send through the contact form.
  • Analytics — page visits, only if you allow analytics cookies. See the Cookie Policy.

Why we use it

  • To create your account, sign you in, and keep it secure.
  • To provide the plan you chose and send receipts or important account notices.
  • To reply to messages and fix the bugs you report.
  • To understand which pages help, if you have allowed analytics.

We do not sell your data, share it with advertisers, or use your notes to train any model.

Who processes it

The site runs on Cloudflare. Account and contact data is stored in a Postgres database hosted by Neon. If you use the assistant, your request goes to the model provider you chose, or to your own API key if you added one. Each of these handles data only to provide its service to us.

How long we keep it

Account data stays while your account is open and is deleted within 30 days after you close it. Contact messages are kept for up to 24 months. Billing records are kept as long as tax law requires.

Your rights

You can ask to see, correct, export, or delete your data, or object to how we use it. Write to us through the contact page and we will reply within 30 days. Where the GDPR or a similar law applies, you can also complain to your local data protection authority.

Children

Ultranotes is not meant for children under 13, and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will update the date above and tell account holders by email.