Your data is safe with us
We take privacy seriously. Here's how we protect your information and comply with global data protection regulations.
Regulatory Compliance
We process data with a lawful basis, honor data subject rights, and provide full transparency.
We do not sell personal data. California residents can exercise their rights under CCPA.
We comply with India's Digital Personal Data Protection Act, 2023, including consent and grievance mechanisms.
We adhere to Google API Services User Data Policy, including Limited Use requirements.
Security & Privacy Practices
Encrypted at Rest & In Transit
All data is encrypted using AES-256 at rest and TLS 1.3 in transit. Your notes, recordings, and personal data are always protected.
Right to Delete
You can permanently delete your account and all associated data at any time from your settings. Deletion is processed within 30 days.
We Never Sell Your Data
Your personal information is never sold, rented, or traded to third parties. We generate revenue from our product, not your data.
Data Portability
Export your notes and data in standard formats. Your data belongs to you, and you can take it with you anytime.
Transparent Analytics
We use PostHog for product analytics — with your explicit consent via our cookie banner. You can opt out at any time.
Cookie Consent
We use a GDPR-compliant cookie consent banner. Only essential cookies are used without consent. Analytics require your opt-in.
Google OAuth 2.0
We use Google Sign-In for secure authentication. We never store or see your password. Adheres to Google API Limited Use policy.
Google Cloud Infrastructure
Your data is stored on Google Cloud (Firebase), which is certified for SOC 1/2/3, ISO 27001, and HIPAA. Enterprise-grade infrastructure.
Infrastructure & Sub-processors
We rely on the following trusted sub-processors to deliver our service:
| Service | Purpose | Location |
|---|---|---|
| Google Firebase | Authentication, database, storage | US (multi-region) |
| Google Gemini AI | AI summaries, transcription, chat | US |
| PostHog | Product analytics (consent-based) | US / EU |
| Vercel | Web hosting, edge network | Global CDN |
Questions about our practices?
We're happy to answer any questions about data privacy and security.