Privacy policy

Privacy policy

Last updated: 27 September 2026

MnemoNotes is built and run by an independent developer, not a company. “We” and “us” below mean that developer, who is the controller of your personal data under the GDPR. Questions and requests about your data go to .

The short version

Your notes are end-to-end encrypted on your device. We cannot read them, their titles, your tags, your folders or your searches. We store only what is needed to sign you in and to sync and share encrypted data, we do not sell anything, and this website uses no cookies, analytics or third-party scripts.

What we store

• An account identifier from Google. When you sign in with Google we receive a unique identifier for your Google account. We do not ask for or store your email address, name or profile picture.
• The display name you choose, which your contacts see.
• Your passkeys’ public keys, to verify that you use them. The secrets they hold stay on your device.
• Encrypted data: your notes and everything about them, and locked copies of your keys. We cannot decrypt any of it.
• Information needed to sync and share: your contacts and invitations, who shares which notes with whom, the members of shared documents, and how many changes you make, when and how large they are.
• A session cookie in the app, to keep you signed in. It ends 7 days after you sign in, or after 3 days without use.

Your IP address is used briefly, in memory, to limit abusive traffic. We do not log it or store it. Our hosting providers see it as part of delivering traffic and may keep it in their own logs, under their own privacy policies.

What stays on your device

The app keeps a copy of your data in your browser’s storage, so it opens quickly and works offline. Like what we store, that copy is encrypted: the browser holds only locked data and locked keys. After you unlock, the key that opens them is kept in the browser for at most 12 hours, so reloading the page does not lock you out. You can remove the copy by clearing this site’s data in your browser.

What we cannot see

The text and titles of your notes, your tags, folders and documents, the names you give your contacts, the names of shared documents, and what you search for. These are encrypted on your device with keys we never have. See how it works for the details.

Why we process this data

Only to provide the service you signed up for: signing you in, storing and syncing your encrypted data, and letting you share with the contacts you choose. We do not use your data for advertising and do not sell or share it.

The legal basis is that this processing is needed to provide the service you agreed to (GDPR article 6(1)(b)). Using your IP address to limit abusive traffic rests on our legitimate interest in keeping the service available and secure (article 6(1)(f)). Without this data we cannot give you an account. We make no automated decisions about you.

Who processes data for us

• Fly.io, which hosts the app, in Amsterdam.
• Neon, which hosts the database, on AWS in Frankfurt.
• Cloudflare, which hosts this website and handles email sent to .

They receive the data listed above only as far as they need it to do that.

Signing in is handled by Google, which decides for itself what it does with that under its own privacy policy. It tells us only the identifier above.

The app and its database are in the European Union. These are US companies, though, and Cloudflare serves this website and email from locations around the world, so your data may also be processed outside the European Economic Area. Those transfers rely on the EU–US Data Privacy Framework where the company is certified under it, and otherwise on the European Commission’s standard contractual clauses.

How long we keep it

As long as your account exists. We may close accounts that nobody has signed in to for two years, as the terms say. Old versions of notes are pruned automatically, and deleted notes are removed from the server. You can permanently delete your account yourself in the app's settings; this cannot be undone. It removes your notes, documents, contacts and the rest of your data from the server and from the device you delete it on, and notes you shared are deleted for everyone they were shared with. What you wrote in notes and shared documents that others own stays with them, together with the public keys that show it came from you, but no longer with your name. We keep only a record that the account existed and was deleted: its internal ID, its public keys, when it was deleted, and a statement signed by your account that it was deleted, so that your other devices can check the deletion is genuine before offering to remove their copy. Signing in again with the same Google account starts a new, empty account. So that the database can be restored after a failure, it keeps a history of its recent changes for 6 hours; after that, what you deleted is gone from it too. You can also ask to delete your account; because we do not store your email address, we will ask you to show that the account is yours, for example by signing in while we are in contact.

Your rights

You can ask for access to, correction of, deletion of, or a copy of your data, ask us to restrict its processing, and object to it, by contacting . You can export your notes yourself from the app at any time. You also have the right to complain to a data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

Children

MnemoNotes is not meant for anyone under 16.

This website

This website sets no cookies, runs no analytics and loads nothing from other companies.

Changes

When this policy changes, the date at the top changes with it. We aim to tell you before we start collecting more about you.