Noteback — Privacy Policy

Last updated: 25 June 2026

Noteback lets you save notes, thoughts and quotes, and sends them back to you as reminders. This policy explains what data we process and why.

Information we collect

• Account information — your name and email address when you create an account. Your password is stored hashed, never in clear text. If you sign in with Google or Apple, we receive an identifier and basic profile details (name, email) from them.
• Your content — the notes, thoughts and quotes you save (including any author, source and tags) and the reminder schedule you configure.
• Push token & device identifier — a notification token and device id (via Firebase Cloud Messaging) so we can deliver your reminders.
• Usage & diagnostics — via Google Firebase (Analytics & Crashlytics): in-app events, a pseudonymous app user id, your plan (free/unlimited), a hashed version of your email, and crash reports. This helps us understand usage and fix bugs.
• Purchases — if you make a purchase, we store your purchase status and the store transaction identifiers. We never receive or store your card details — payment is handled entirely by Apple/Google.

How we use it

• To provide the service: store your content and deliver your reminders at the times you choose.
• To authenticate you and keep your account secure.
• To process and validate purchases.
• To understand usage, diagnose crashes and improve the app.

We do not sell your data or use it for advertising.

Third-party services

We share the minimum necessary with providers acting on our behalf: Google Firebase (Analytics, Crashlytics, Cloud Messaging), Google / Apple Sign-In (authentication), Apple App Store / Google Play Billing (in-app purchase payments), Expo (EAS Update) (app updates) and our hosting provider. These providers may process data outside your country (including the United States) under appropriate safeguards.

Security

Passwords are hashed, the session token is held in the device's secure storage, and traffic to our servers is encrypted in transit (HTTPS).

Your rights, data retention & deletion

We keep your data as long as your account exists. Depending on your location (e.g. GDPR/EEA), you may access, correct, export or delete your data. To request deletion of your account and all associated data, email us — we will action it promptly.

Children

Noteback is not directed at children under 16 and we do not knowingly collect their data.

Contact

Questions or deletion requests: romain.pignoux@gmail.com