Privacy Policy

This policy applies to all users of NotePeel, including:

• The desktop app for macOS (notepeel.com/download)
• The browser app at app.notepeel.com
• The marketing website at notepeel.com

The desktop app stores all notes locally on your device. We do not receive, transmit, or have access to your note content from the desktop app.

The desktop app may make the following network requests:

• Update checks — periodically checks for new versions. No personal data is sent. You can disable this in Preferences.
• Crash reports — if you opt in, anonymous crash logs may be sent to help us fix bugs. These contain no note content.

To use the browser app you create a free account. We collect and store:

• Email address — used to authenticate you and send account-related emails (verification, password reset).
• Note content — the text and metadata of notes you create in the browser app, stored encrypted in our cloud database.
• Usage data — basic app events (note created, note deleted) used to understand how the product is used. No note content is included.
• IP address — logged briefly by our infrastructure provider for security and abuse prevention.

We do not collect:

• Payment information (we have no paid tier currently)
• Device identifiers or advertising IDs
• Location data

We use the data we collect to:

• Authenticate your account and sync your notes across sessions
• Send transactional emails (verification, password reset)
• Improve the product based on aggregate usage patterns
• Prevent abuse and ensure security

We do not:

• Sell your data to third parties
• Use your note content to train AI models
• Show you ads or share your data with advertisers
• Read your notes except to provide the service (e.g., syncing)

Browser app data is stored in Supabase, hosted on AWS infrastructure in the United States. Data is encrypted in transit (TLS) and at rest (AES-256).

Desktop app data is stored locally in ~/Library/Application Support/NotePeel. NotePeel does not encrypt this folder by default — your device's FileVault encryption protects it.

We use the following third-party services:

• Supabase — cloud database and authentication for the browser app
• Vercel — hosting for notepeel.com and app.notepeel.com
• Resend — transactional email delivery

Each of these services has their own privacy policy. We choose providers that take data security seriously and are GDPR-compliant.

The marketing site (notepeel.com) does not use analytics cookies or third-party tracking pixels.

The browser app (app.notepeel.com) uses a session cookie to keep you logged in. This cookie is necessary for the app to function and is not used for advertising.

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — delete your account and all associated data at any time from the app settings, or by emailing us
• Export — export all your notes from the app before deleting your account
• Objection — opt out of any non-essential data processing

To exercise these rights, email us at support@notepeel.com. We will respond within 30 days.

We retain your account data for as long as your account is active. If you delete your account, all notes and personal data are permanently deleted within 30 days.

Anonymized aggregate usage data may be retained indefinitely.

NotePeel is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, please contact us at support@notepeel.com.

We may update this policy from time to time. We will notify you of significant changes by posting a notice on the website or sending an email to registered users. The "last updated" date at the top of this page always reflects the current version.

Questions about this policy? Email us at support@notepeel.com.

Beast Creative LLC · United States