Privacy Policy
Last updated: [DATE — fill in before publishing]
This policy explains what information Noutez ("we," "us") collects when you use the Noutez website or mobile app (together, the "Service"), why we collect it, and the choices you have.
1. Information we collect
Information you give us directly:
- Your email address and password, when you create an account.
- Your display name and bio, if you choose to add them.
- The avatar you pick from our built-in set — we do not currently accept uploaded photos for free accounts. [If the Pro photo-upload feature ships: add a paragraph here describing that a Pro member's uploaded photo is sent to Google's Cloud Vision API for a safety check and to OpenAI to be redrawn in an illustrated style before it is stored — neither company is permitted to use it for any other purpose.]
- The notes, comments, and collections you publish, which are public by design unless you mark a note or collection private.
- Your own private personal notes, which are never shown to any other user or used to train any AI model.
- If you subscribe to Noutez Pro, messages you send to the "ask this note" AI assistant. These are sent to OpenAI to generate a reply and are not used by us or by OpenAI to train their models.
Information collected automatically:
- Basic technical information (IP address, device/browser type) for security, rate-limiting, and abuse prevention.
- If you see ads on Noutez, our advertising partners (Google AdMob on the mobile app, Google AdSense on the website) may set cookies or use device identifiers to show and measure ads. See "Cookies and ads" below.
2. How we use your information
- To operate the Service — creating your account, showing you notes, sending notifications.
- To send you account emails: verifying your email, password resets, and (unless you unsubscribe) an optional weekly digest of new notes from people you follow.
- To keep Noutez safe — investigating reports, enforcing our Terms of Service, and preventing abuse.
- To process your Noutez Pro subscription, handled through Google Play Billing and RevenueCat (see "Third parties" below).
We do not sell your personal information.
3. Third parties we share information with
We use a small number of outside services to run Noutez. Each only receives what it needs to do its job:
- MongoDB Atlas — hosts our database.
- Resend — sends account and digest emails on our behalf.
- Cloudinary — [if the photo feature ships] stores Pro members' processed profile images.
- Google Cloud Vision — [if the photo feature ships] checks uploaded photos for policy violations before they are processed.
- OpenAI — powers the "ask this note" AI assistant and the photo-styling feature for Pro members.
- RevenueCat and Google Play Billing — process and manage Noutez Pro subscriptions. We receive confirmation of your subscription status, not your payment card details.
- Google AdMob / AdSense — show ads to non-Pro users.
We do not share your information with anyone else except where required by law.
4. Cookies and ads
The Noutez website uses a small number of essential cookies to keep you logged in. If you see ads (shown to free accounts only), Google's advertising cookies may also be set — you can control this through the cookie banner shown on your first visit, and change your choice at any time in [Settings / a link here].
5. Your choices
- Edit or delete your account at any time from Settings. Deletion hides your content immediately; it is permanently erased after a grace period, which also removes it from backups over time.
- Unsubscribe from the weekly digest with one click, from the link in any digest email.
- Request a copy or deletion of your data by emailing [PRIVACY CONTACT EMAIL — fill in]. We will respond within the timeframe required by applicable law (e.g. 30 days under GDPR).
6. Children's privacy
Noutez is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, contact us at [PRIVACY CONTACT EMAIL] and we will remove it.
7. Data retention and security
We keep your information for as long as your account is active, plus a limited period after deletion as described above. We use industry-standard measures (encrypted connections, hashed passwords) to protect your data, but no online service can guarantee absolute security.
8. Changes to this policy
We may update this policy as Noutez changes. We'll update the "Last updated" date above, and for significant changes, we'll let you know in the app or by email.
9. Contact
Questions about this policy? Email us at [PRIVACY CONTACT EMAIL — fill in].