Privacy policy

Who we are

Notii is made by Pixel Worship, LLC ("we", "us"). This policy covers the Notii app at app.notii.io, Notii's apps, browser extension and plugins (including Notii in ChatGPT and Claude), and this website, www.notii.io. For questions or requests about your information, email matt@mourlam.com.

What we collect

Your account

Your email address, your name (if you give one), your password (stored by our sign-in provider, never in a form we can read), and your sign-in details: passkeys, two-step sign-in, and the devices you're signed in on. If you sign in with Google, Google tells us your email address and name.

What you put in Notii

Your notes, notebooks, tasks, reminders, tags, comments, canvases, sketches, files, recordings and settings, plus what you bring in: imports, web clips from the browser extension, notes you email to your Email-in address, and the calendars you subscribe to (we fetch them to show your events). Text you lock with a passphrase is encrypted on your device before it reaches us: we can't read it.

Information about people you work with

When you share a note or project, mention someone or assign a task, we keep that person's email address and name so we can show them the note and let them know. When someone fills in your project's form, we keep their answers (and their email, if your form asks for it) as a card in your project.

How you use Notii

Our servers keep technical logs (such as the time, the request and an error, if any) to run and secure Notii. We also use Google Analytics, described below, to see which pages and features are used.

How we use it

• To run Notii for you: save and sync your notes, search them, send reminders and the emails you've chosen, run the features and rules you set up, and keep your account secure.
• For the AI features described below.
• To answer you when you contact us or send feedback.
• To understand and improve Notii, from analytics and logs, and to find and fix problems.
• To protect Notii and its users, and to meet legal obligations.

We don't sell your personal information, we don't show ads, and we don't use your notes to build advertising profiles. We don't send marketing emails.

The AI features

Notii's AI is provided by Google, through the Gemini API. To work, these features send content to Google:

• Search by meaning: each note's title and text (and text read from its files) are sent when you save it, to make the index that finds notes by what they mean. Search questions are sent too.
• Reading files: images and PDFs you add (including by email, import or clip) are sent so their text can be searched.
• When you use the AI: asking about your notes, chatting in a note, summaries, tidying, templates, diagrams, images, voice notes, meeting notes from a recording, web clips and filing suggestions send what that feature needs: your question, the note or relevant parts of your notes, files you attach, and for meeting notes, the recording and attendees' names.
• Recaps and the weekly digest: your name, the titles of notes you worked on and your tasks.

Google processes this content to return the result, under its terms for the Gemini API. We keep AI requests for up to a day to finish them; files sent for a chat are removed by Google within two days. Text you've locked with a passphrase is never sent. There isn't a setting to turn the AI features off yet; if you'd rather a note weren't processed, lock it.

ChatGPT, Claude and other connected apps

You can connect Notii to AI apps such as ChatGPT and Claude, to Notii's browser extension, and to your own tools. You choose this, and you can undo it.

• ChatGPT and Claude connect with your permission (you sign in and choose Allow). The app can then use Notii's tools while you use it: search and read notes, make and change notes, add tasks and reminders, read your calendar, update projects, set up rules, share notes by email and move notes to the Trash. What it reads goes to that app's company (OpenAI for ChatGPT, Anthropic for Claude) and is handled under their privacy policies. Access lasts until you choose Disconnect in Settings → Connected apps.
• The browser extension sends the page you save: its address, title, text, the images you pick, and when an image can't be read directly, a cropped screenshot of it. It keeps its sign-in on your computer.
• API tokens and webhooks: a personal API token lets your script or tool use the same tools as your account. A webhook sends events to the address you choose (a new note's title and link, a checked-off task, a moved card, or a form answer with the answerer's details). Revoke tokens and delete webhooks in Settings → API and webhooks.

When others can see your content

• People you share with see the shared note or project, and the names and email addresses of the others on it.
• Share links, published websites and forms can be opened by anyone with the address. Share links ask search engines not to list them; published websites are listed unless you turn that off.
• People who fill in a form: their answers go to the form's owner. We use their IP address for about two hours to stop spam.

Who helps us run Notii

We use these companies to run Notii. They process information on our behalf, to provide their services to us:

Apps you connect yourself (such as ChatGPT or Claude) aren't on this list: they're run by their own companies under their own policies.

We may also disclose information if the law requires it, to protect people's safety or Notii's security, or as part of a sale or merger of Notii (we'll tell you if that happens).

Analytics and cookies

The app and this website use Google Analytics to count visits and see which pages, buttons and features are used. It sets cookies and receives information such as the pages you visit (with note and project IDs removed in the app), the buttons you choose, your browser, device and approximate location. You can block it with your browser's settings or Google's opt-out add-on; Notii works the same without it.

On this website, Google Analytics also measures our ads on Google Search: it sets cookies that remember the Google ad you came from, if any, and tells Google Ads when you go on to sign up. Google may also use visits to this website to show our ads to people who've been here before. You can turn off personalized ads in Google's My Ad Center, and Notii works the same without them.

This website also uses OpenAI's ads pixel, to measure whether the ads we run in ChatGPT lead people to sign up. It sets a cookie that remembers the ad you came from, if any, and tells OpenAI which pages of this website you visit and when you go on to sign up. In the app, it only tells OpenAI when the sign-in screen is shown and when a new account has just been made, and it runs apart from the app's page, so it never sees your notes or anything you type. You can block it with your browser's settings, and Notii works the same without it.

The app keeps your sign-in and a copy of your notes in your browser's storage, so it's fast and works offline. Signing out removes the copy of your notes.

Emails

We email you about your account (sign-up codes and password resets), reminders, tasks due, sharing, and, if you choose, mentions, comments, checked-off items, the weekly digest and export links. Turn off mentions, activity and the digest in Settings → Email notifications. Account, security and sharing emails are always sent, and for now so is the daily list of tasks due. We don't track whether you open or click our emails.

How long we keep it

We keep your content for as long as you have your account. Some things are deleted sooner:

• The Trash keeps notes until you empty it or delete them permanently.
• Note history: versions older than 90 days are removed (and at most 50 are kept per note).
• Exports: 8 days. Weekly backups: 36 days.
• Emails sent to Notii: the original message is deleted once it becomes a note (within 3 days).
• Imported files: deleted once the import is done (within a day).
• Server logs: most are deleted after about a month. Database backups (for disaster recovery): 35 days.

When you delete your account, deletion starts right away: you're signed out everywhere and your account, notes, files, sharing, published websites and links are deleted. Copies in exports, backups and logs disappear on the schedule above. Comments you left on other people's shared notes stay with those notes. A few small records (such as approvals of connected apps and comment threads) aren't removed automatically yet: email matt@mourlam.com and we'll remove them.

Security

Notii uses encryption in transit (HTTPS) everywhere, and your stored notes and files are encrypted at rest. Files are served through short-lived signed links. You can add passkeys and two-step sign-in, see and sign out the devices on your account, and lock notes with a passphrase only you know. No system is perfectly secure; if you find a problem, email matt@mourlam.com.

Your choices and rights

• See and download your data: everything is in the app, and Settings → Export and backups → Export gives you all of it as Markdown files.
• Correct it: edit your notes, and your name in Settings → Account.
• Delete it: delete notes, or your whole account in Settings → Delete account.
• Stop sharing: remove people, revoke share links, unpublish websites, turn off forms, disconnect apps, and revoke tokens.

Depending on where you live (for example in the EU, the UK or California), you may have further rights: to access, correct, delete or move your information, to object to or restrict how we use it, and to complain to a data protection authority. We handle your information to provide the service you asked for (our contract with you), with your consent where we ask for it, and for our legitimate interests in running, securing and improving Notii. To make a request, email matt@mourlam.com; we'll answer within the time the law gives us, and we won't treat you differently for asking.

Where your information is stored

Notii is run from the United States: your information is stored in Amazon Web Services' US West (Oregon) region, and our service providers may process it in the US and other countries. If you use Notii from elsewhere, your information is transferred to the US, which may have different data protection laws from yours.

Children

Notii isn't for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has an account, email matt@mourlam.com and we'll delete it.

Changes to this policy

We'll update this policy when Notii changes. The date at the top says when it last changed. If a change is significant, we'll tell you in the app or by email before it applies.

Contact: Pixel Worship, LLC, matt@mourlam.com.