Privacy Policy for YourNotes

1. Overview & Privacy Philosophy

At YourNotes (developed by Lucas Labs), we believe your notes, thoughts, and sketches are deeply personal. We designed the app to keep your data local by default and to collect nothing about you. We do not collect, sell, share, or use your data for marketing, advertising, profiling, or any similar purpose — there are no ad networks, no data brokers, and no email marketing built on your activity.

2. Data Storage & Local Architecture

A. Notes, Drawings & Media

Everything you create in YourNotes is saved in local .ynote packages inside the app's sandbox on your device, or in local backup folders you choose. We have no servers that store your notes and no way to access them.

B. On-Device OCR & Search

Handwriting recognition and full-text search run entirely on your device using Apple's Vision framework. No handwriting images or strokes are sent anywhere for indexing.

C. Audio Recordings

Audio notes recorded alongside your handwriting are stored locally and are never transmitted over the internet.

D. Local Peer-to-Peer Wi-Fi Sync

Device-to-device sync runs over your local Wi-Fi network using Apple Bonjour (_yournotes._tcp). Your notes travel directly between your own devices and never route through external servers.

E. Optional AI Integrations

AI is entirely optional and off until you turn it on. You can run models fully on-device (no data leaves your iPad), or connect a third-party provider or your own self-hosted API.

If you connect a third-party provider, your API key is stored securely in the hardware Apple Keychain, and the note content you choose to send is transmitted over HTTPS directly from your device to that provider. We never see or proxy this data.

Important: once your content reaches a third-party provider, it is handled under that provider's privacy policy and terms, not this one. Review their policies before enabling them:

• OpenAI
• Anthropic (Claude)
• Google (Gemini)
• Ollama

If you use your own self-hosted model, your content goes only to the server you control.

3. Permissions Used

• Microphone: To record audio synced with your handwriting during lectures or meetings.
• Camera: To insert photos into notes and, if you pair devices, to scan a pairing code for local sync.
• Local Network: To discover your paired devices on your Wi-Fi for peer-to-peer sync.
• Photo Library: To import images and to save exported note pages or charts.

Each permission is requested only when you use the feature that needs it, and the app works without granting any of them.

4. Data Retention & Deletion

Because your data lives on your device, you're always in control of how long it's kept:

• Delete a note: removing a note deletes its .ynote package and all of its contents from your device.
• Delete everything: deleting the app removes all notes stored in its sandbox. Notes you saved to your own backup folders remain there until you delete them.
• Revoke AI access: remove a provider's API key in Settings at any time. This stops all requests to that provider and clears the key from your Keychain. Content already sent to a provider is governed by that provider's own retention policy.

5. The Website & the Requests Board

This policy covers the app. The website, yournotes.dev, has one feature that stores anything: the Requests board, where you can suggest features and vote on them. It needs no account and never asks for your name or email.

• What you write: the text of ideas you submit is stored on the board. New ideas are only shown publicly after they've been reviewed, and they may be edited for clarity, merged with a similar idea, or not published. If your idea closely matches one that already exists, your wording is kept as another way of describing that request and your submission counts as a vote.
• Votes: your browser keeps a random ID in local storage so each idea gets one vote per device. Only a salted, one-way hash of that ID is stored with your votes and submissions. It isn't linked to your name, email, or the app.
• Duplicate matching: to find similar ideas, the text you type into the idea box is sent to Cloudflare Workers AI to compute a text embedding. That happens on Cloudflare's infrastructure and isn't used to train models.
• Bot protection: the first time you vote or submit, Cloudflare Turnstile runs a quick check. Turnstile's script loads only on the Requests page, and only when you vote or submit. See Cloudflare's privacy policy.
• IP addresses: used only to limit how often someone can vote or submit. They're hashed with a salt that changes every day, and the IP address itself is never stored.
• Analytics: the website uses Cloudflare Web Analytics, which is cookieless and doesn't track you across sites.
• Removal: email support@yournotes.dev with the text of an idea you submitted and it will be removed. Clearing your browser's site data resets your device ID.

No email notifications are sent and nothing from the board is shared with or sold to anyone.

6. Children's Privacy

YourNotes does not collect personal information from anyone, including children. The app is not directed at children under 13, and we do not knowingly collect data from them.

7. Changes to This Policy

If we update this policy, we'll revise the "Last Updated" date above and post the new version at this address. Continued use of the app after a change means you accept the updated policy.

8. Contact Us

If you have any questions about this Privacy Policy, reach out at support@yournotes.dev or visit yournotes.dev.