Privacy Policy

1. Data We Collect

None. Notevo does not collect, transmit, store, or process any personal data on our servers. There are no analytics, no error tracking, no advertising networks, and no telemetry.

2. Your Notes

Notes are stored either in your browser's localStorage (offline mode) or in your own Supabase project (cloud sync). In both cases, notes are encrypted with AES-256-GCM before leaving your device. The encryption key is derived from your password and never transmitted anywhere.

3. Authentication

If you create an account, your email and hashed password are stored in Supabase Auth. We use this solely to identify your session. We never see your note contents — only encrypted blobs.

4. Cookies & Tracking

Notevo does not use tracking cookies, advertising networks, or any third-party analytics. We use a single localStorage flag (notevo_cookie_ok) to remember that you dismissed the cookie banner. Supabase sets a session cookie for authentication only.

5. Third-Party Services

• Supabase — optional cloud sync. Subject to Supabase's privacy policy.
• Google Fonts — typography CDN. Google may log font requests.
• Vercel — hosting. Vercel may log request metadata per their privacy policy.

6. Children's Privacy

Notevo does not knowingly collect data from children under 13. Since we collect no personal data, COPPA compliance is inherent to our design.

7. Your Rights

Under GDPR, CCPA, and similar laws, you have the right to access, correct, or delete your data. Since we hold no personal data, you can exercise these rights entirely on your own — export or delete your notes at any time from within the app. For account deletion, use the settings panel.

8. Changes

If we ever change this policy in a meaningful way, the "Last updated" date above will reflect it. We will never retroactively reduce your privacy protections.

9. Contact

Questions? Open an issue on GitHub or email samo.hossam@gmail.com.