Privacy Policy

not·that ("we", "our", or "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your information when you use our note-taking application at notthat.net.

Information we collect

We collect the following information when you use not·that:

• Account information: Your email address when you sign up with email/password or Google.
• Note content: The notes, to-do lists, and other content you create within the app.
• Google account data: If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password.

How we use Google user data

When you connect your Google account, not·that may request access to Google Drive solely to allow you to export your notes as files to your own Google Drive. Specifically:

• We only access files that not·that creates — we do not read, modify, or delete any existing files in your Drive.
• We use the drive.file scope, which is the most limited Drive permission available.
• We never share your Google data with third parties.
• You can revoke access at any time via your Google Account settings.

Data storage

Your notes are stored securely in Supabase, a cloud database provider. Each user can only access their own notes — we enforce Row Level Security to ensure this. Your data is stored in the EU (Frankfurt region).

AI features

When you use AI features (summarize, grammar check, translate, extract to-dos), the content of your note is sent to Google's Gemini API for processing. We do not store this data beyond what is necessary to return your result. Please review Google's Privacy Policy for details on how they handle API data.

Data sharing

We do not sell, rent, or share your personal data with third parties, except as required by law or as necessary to provide our services (e.g., Supabase for storage, Google for authentication).

Data deletion

You can delete your account and all associated data at any time by contacting us at hazalkalmis@gmail.com. We will delete your data within 30 days of your request.

Cookies

We use only essential cookies required for authentication (session tokens). We do not use tracking or advertising cookies.

Children's privacy

not·that is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by updating the date at the top of this page.

Contact

If you have any questions about this privacy policy, please contact us at hazalkalmis@gmail.com.