This policy explains what Hasna Inc. (“we”) collects when you use Personal Notes, why, and who else handles it. The short version: local mode keeps everything on your device; the hosted service stores what you sync; the Pro plan's cloud voice features, Talk and instant transcription, send audio to us and to OpenAI while you use them.
1. Local mode: nothing leaves your device
Without an account, Personal Notes runs entirely on your device. Notes, audio recordings and transcripts are stored locally and processed by the on-device speech model. Local mode never uploads your audio or your notes to us or to anyone else. Talk is not part of local mode; it is a cloud feature, described in section 4.
2. What the hosted service collects
- Account data: your email address, the name you give us, and sign-in session records.
- Sign in with Google (optional): if you choose Continue with Google, Google tells us your Google account's email address, whether Google has verified it, your name and profile picture if your Google profile shares them, the Google Workspace domain if the address belongs to one, and a Google account identifier. We use them only to sign you in: we keep the email address, the name (for a new account) and the identifier, which links your Google account to your Personal Notes account until you delete your account, and we do not keep the profile picture. We ask Google for nothing else: no access to Google Drive, Gmail, your contacts or any other Google data, and we never post to your Google account. You can stop using it at any time and sign in with an email code instead.
- Your content: the notes, labels and related data you create or sync to the hosted service.
- Cloud voice data: when you use Pro's cloud transcription or Talk, the audio you record, and the transcripts and responses produced from it.
- Billing data: your plan, credit balance and usage, and Stripe customer and subscription identifiers. Card details go directly to Stripe; we never see or store your full card number.
- Technical data: IP address, request logs and API key metadata, used for security, rate limiting and debugging.
3. How we use it
To provide and sync the service, sign you in, process payments, meter credit usage, prevent abuse, and contact you about your account (sign-in codes, billing problems, important changes). We do not sell your personal data, show ads, or use your content to train models.
4. Cloud voice and OpenAI
Talk and cloud transcription are optional features of the Pro plan and off until you use them. When you do, your audio is uploaded to our servers and sent to OpenAI, which acts as our subprocessor to transcribe it and generate responses with its OpenAI GPT-Live models (GPT-Live-Transcribe for transcription, GPT-Live 1 for Talk). Audio leaves your device only while you use these features. OpenAI processes this data under its API terms and does not use API data to train its models by default. If you do not want audio to leave your device, record on your Mac in local mode; local Record never uploads anything.
5. Who processes data for us
- Amazon Web Services — hosting and storage, in the US East (N. Virginia, us-east-1) region.
- OpenAI — transcription and AI responses for Pro's cloud transcription and Talk (OpenAI GPT-Live).
- Stripe — payments, invoices and the billing portal.
- Resend — delivery of sign-in codes and account emails.
We share personal data with others only when the law requires it or to protect the service and its users.
6. Where data is stored
Hosted data is stored in the United States (AWS us-east-1). If you use the hosted service from elsewhere, your data is transferred to and processed in the United States.
7. Export and deletion
You can export your notes at any time from the app, the CLI or the API (POST /api/v1/export). You can delete your account from the app or the API (POST /api/v1/delete-account). A deletion request immediately signs you out everywhere and revokes your API keys. For 7 days after the request you can cancel it simply by signing in again. After that we cancel any active subscription, permanently erase your notes, recordings and account, and email you when it is done — always within 30 days of your request. We keep only the billing and tax records the law requires, with your personal details removed from our copies, and backups age out on their normal schedule.
8. Retention
We keep your content for as long as your account exists. Notes you move to the trash stay recoverable until you delete them permanently or delete your account. Security logs are kept for a limited period.
9. Security
Data is encrypted in transit. Each account's data is isolated at the database level, API keys are stored hashed, and sign-in codes are single-use and short-lived. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.
10. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. The export and deletion tools above cover most requests; for anything else, email support@personalnotes.ai.
11. Children
Personal Notes is not directed at children under 13, and we do not knowingly collect their data.
12. Changes
We will post changes here and update the date above. If a change is material we will notify you by email or in the app.
13. Contact
Hasna Inc. — support@personalnotes.ai.