Privacy policy
Privacy policy
Last updated: [date]
MnemoNotes is operated by [operator name and address]. Questions and requests about your data go to [contact email address].
The short version
Your notes are end-to-end encrypted on your device. We cannot read them, their titles, your tags, your folders or your searches. We store only what is needed to sign you in and to sync and share encrypted data, we do not sell anything, and this website uses no cookies, analytics or third-party scripts.
What we store
- An account identifier from Google. When you sign in with Google we receive an anonymous identifier for your Google account. We do not ask for or store your email address, name or profile picture.
- The display name you choose, which your contacts see.
- Your passkeys’ public keys, to verify that you use them. The secrets they hold stay on your device.
- Encrypted data: your notes and everything about them, and locked copies of your keys. We cannot decrypt any of it.
- Information needed to sync and share: your contacts and invitations, who shares which notes with whom, the members of shared documents, and how many changes you make, when and how large they are.
- A session cookie in the app, to keep you signed in. It ends 7 days after you sign in, or after 3 days without use.
Your IP address is used briefly, in memory, to limit abusive traffic. Our server does not write it to its logs.
What we cannot see
The text and titles of your notes, your tags, folders and documents, the names you give your contacts, the names of shared documents, and what you search for. These are encrypted on your device with keys we never have. Seehow it works for the details.
Why we process this data
Only to provide the service you signed up for: signing you in, storing and syncing your encrypted data, and letting you share with the contacts you choose. We do not use your data for advertising and do not sell or share it.
Who processes data for us
- Google, for signing in.
- Fly.io, which hosts the app.
- Neon, which hosts the database.
They receive the data listed above only as far as they need it to do that.
How long we keep it
As long as your account exists. Old versions of notes are pruned automatically, and deleted notes are removed from the server. To have your account and all its data deleted, contact [contact email address].
Your rights
You can ask for access to, correction of, or deletion of your data, and object to its processing, by contacting [contact email address]. You can export your notes yourself from the app at any time. You also have the right to complain to your data protection authority.
This website
This website sets no cookies, runs no analytics and loads nothing from other companies.