Privacy Policy

This Privacy Policy explains how Pomnote (“Pomnote,” “we,” “us”) handles information in the Pomnote iOS app and on pomnote.app. We built Pomnote to be private by default.

The short version

Your notes live on your device. We don’t run ads, we don’t track you across apps or the web, and we don’t sell your data. The only information that leaves your device is what you explicitly choose to send (a bug report) or what a feature you turn on needs to work (AI photo understanding on Premium).

Website waitlist

If you join the waitlist on pomnote.app, we collect the email address you enter so we can confirm your signup and send Pomnote launch updates. The signup is voluntary, and every marketing email includes an unsubscribe link.

Waitlist email addresses and subscription status are stored with Convex. Resend delivers confirmation and update emails. Cloudflare Turnstile checks that a signup is made by a person and may process technical data needed for abuse prevention under Cloudflare’s own privacy terms. We do not put note content in any of these services.

What stays on your device

Your notes, to-dos, ideas, spaces, connections, and attachments are stored locally on your device. On the Free plan there is no Pomnote account and no cloud copy. You can export a JSON snapshot or erase everything at any time in Settings → Data & Backup.

Location reminders

If you use place reminders (“remind me when I get home”), the places you save and their coordinates are stored only on your device and are processed on-device by iOS to trigger the reminder. Your location is never sent to us or to any server, and analytics never include coordinates or place names.

iCloud Sync (optional, Premium)

If you enable iCloud Sync on a Premium plan, your notes are mirrored to your own private iCloud database so your devices stay in step. That data is handled by Apple under your iCloud account; we never see it and cannot read it. Sync is off by default and the Free plan is local-only.

Diagnostics you choose to send

If you tap Help & Feedback → Report a bug, the report includes only data Apple permits an app to collect without special consent:

• App version and build number, and the bundle identifier
• An install-scoped identifier (Apple’s identifierForVendor). It is not shared with other developers’ apps and resets if you delete the app
• Device model (e.g. “iPhone17,1”), iOS version, locale, and time zone
• Basic device stats (free disk, memory, low-power state) and recent in-app log lines

We never collect your name, your note contents, contacts, precise location, an advertising identifier (IDFA), or hardware identifiers like UDID, serial number, IMEI, or MAC address. The app never transmits a report by itself: you send it through the iOS share sheet, so you see exactly what leaves your phone and choose how it travels. We use it solely to diagnose and fix the issue.

AI features (Premium)

Photo understanding runs on your device by default. If you enable enhanced AI on a Premium plan, the image you capture is sent to our backend, which uses a third-party AI provider to generate a title and description. Images are processed transiently for that purpose and are not retained beyond what is needed to return the result. This only happens for photos you capture while the feature is turned on, and the feature is off by default.

Service providers

We rely on Apple for App Store distribution, StoreKit billing, and optional private iCloud sync; OpenAI for the optional enhanced AI feature described above; Convex for waitlist storage; Resend for waitlist email; and Cloudflare Turnstile for signup abuse prevention. We do not share your information with advertisers or data brokers.

Data retention

• Your notes stay on your device until you delete them; deletion is immediate and local
• Automatic backups (Premium, optional) keep only the five most recent snapshots, on-device
• Uninstalling the app removes all app data from the device
• Bug reports exist only where you chose to send them; the app keeps no copy
• Waitlist information is kept while you are subscribed. If you unsubscribe, we retain the address and unsubscribe status as a suppression record so we do not email you again

Security

Your notes, backups, photos, and voice recordings are protected with iOS Data Protection (encrypted at rest, with our files using the strongest “complete” class). There is no Pomnote account and no Pomnote server holding your notes, which removes the most common ways note data gets breached.

Your rights and choices

• Export your data as JSON, or erase all content, in Settings → Data & Backup
• Use the app entirely offline on the Free plan
• Decline AI features by not enabling Premium photo understanding
• Your JSON export is a full, portable copy of your data (data portability)
• Unsubscribe from waitlist email at any time, or ask us to delete your waitlist information by emailing contact@pomnote.app

We do not sell or share personal information as defined by the California Consumer Privacy Act, and we do not use your data for advertising. Because your notes never reach us, requests to access or delete server-held data generally do not apply; everything is in your hands on the device. If you enable an AI feature, the text or image you submit is processed by our provider in the United States for the moment it takes to return the result.

Children

Pomnote is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy as the app evolves. Material changes will be reflected here with a new “Last updated” date.

Contact

Questions about privacy? Email contact@pomnote.app.