Privacy Policy — NoteLab
1) Scope: NoteLab is a local-first handwriting notebook app (Write. Learn. Remember.). We process account and profile data only if you sign in; optional push tokens if you allow notifications; camera and photo-library access when you insert a photo into a note; and limited technical identifiers for analytics as described below. NoteLab does not show ads.
2) Local-first notes: Notebooks, handwriting, PDFs, and attached images are stored on your device. We do not upload your notes to our servers as part of ordinary note-taking.
3) Optional account: You may continue as a guest, or sign in with email, Google, or Apple. Account data (email, user ID, session) is stored via Supabase so we can authenticate you, restore a linked account, and process deletion requests.
4) AI processing: When you enable AI features and run an action (for example Ask, summarize, or lecture tools), only the context you selected — such as the current page, a lasso selection, or retrieved chunks — is sent to our backend and to language-model providers (currently Google Gemini and DeepSeek) solely to produce the result you requested. Unrelated notebooks are not sent. We do not use your notes to train third-party foundation models. You can turn AI processing off in Settings; note-taking still works.
5) Camera and photos: The app may request camera or photo-library access only to insert an image into a note or to save an export you choose. Images stay in the notebook on device unless you export or share them yourself.
6) Google Sign-In Data: If you choose Google Sign-In, we access only your email address, basic profile information (name and profile picture, if publicly available), and your Google account ID (sub) to associate your Google account with your NoteLab account.
7) Google Data We Do Not Access: We do not access Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or any other Google service data and scopes beyond sign-in identity data.
8) How Google Data Is Used: We use Google user data only for authentication, account identification, and essential account-related communication such as security alerts or critical service updates. We do not use Google user data for advertising, ad personalization, data sales, or AI/ML training.
9) Security and Storage: Your Google-linked identity data is stored securely via Supabase on encrypted infrastructure. We never store your Google password; authentication is handled by Google OAuth 2.0. Sign in with Apple, where available, is used only to create or link your account.
10) Third-Party Services: We do not sell, rent, or share Google user data with third parties for their own purposes. Data is shared only with service providers strictly required to operate NoteLab, including Supabase (auth and optional account data), Google Gemini and DeepSeek (AI inference on the content you submit for an AI action), and Google Firebase Analytics (only to improve the app; see below). For Google's privacy practices, see https://policies.google.com/privacy.
11) Firebase Analytics: We use Google Firebase Analytics to develop NoteLab and improve the experience. When you are signed in, events may be associated with a unique user ID for your account so measurement stays consistent; that ID is not your email address or your name. Recorded events do not transmit notebook contents. We do not sell this data. Processing may take place on Google infrastructure.
12) Payments and Legal Basis: Optional subscriptions, when offered, run through Apple App Store and Google Play; we do not receive your full card details. We may use subprocessors for auth, AI, and analytics under data-processing terms.
13) Account Deletion: You can request account deletion at any time from the app settings or by contacting appsvoys@gmail.com. After deletion, associated NoteLab account data are removed from our systems within 30 days unless longer retention is required by law. Notes stored only on your device remain until you uninstall the app or clear app data. See the Account Deletion tab for details.
14) Google Policy Compliance: NoteLab's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including Limited Use requirements.
15) Your Privacy Rights: We do not sell your personal data. Retention follows service needs and legal obligations. You may request deletion via appsvoys@gmail.com; we will respond within a reasonable time.