Privacy Statement

Last updated: June 26, 2026

This statement explains what data Project Notes Pro collects, how it is used, and the choices you have over your information.

1. Information We Collect

Account Information

When you register for Project Notes Pro, we collect your name, email address, and a password (stored as a salted hash). If you subscribe, payment details are handled entirely by Stripe — we never see your full card number.

Project & Usage Data

We store the meeting notes, action items, files, and other project information you create within the application. We also collect basic usage metrics (features used, pages visited) to improve the product.

Communications

If you contact support or opt into product announcements, we retain those communications to assist you and keep you informed about service updates.

2. How We Use Your Information

Providing the Service

Your account and project data are used to operate the application — authenticate you, sync your data across devices, send meeting notes via email plugins, and generate reports you request.

Billing

Stripe processes subscription payments. We share only your customer ID and subscription status with Stripe; no payment numbers pass through our servers.

Product Improvement

Aggregated, anonymized usage patterns help us fix bugs, prioritize features, and optimize performance. We do not sell or rent your personal information to anyone.

3. Data Storage & Security

Hosting

Data is hosted on Supabase (PostgreSQL + storage), which provides encryption at rest and in transit. Infrastructure is operated in accordance with industry-standard security practices.

Encryption

All traffic between your devices and our servers is encrypted via TLS. Passwords are hashed using bcrypt. End-to-end encryption is applied to certain sync operations.

Retention

We retain your data for as long as your account is active. If you cancel your subscription, data is kept for 30 days to allow reactivation, after which it is permanently deleted unless required by law.

4. Third-Party Services

Stripe

Subscription payments are processed by Stripe. Your payment method details are governed by Stripe's privacy policy. We receive only your subscription status and invoice history.

Resend

Transactional emails (password resets, invoice receipts) and optional product announcements are sent via Resend. We share only the recipient email address and message content necessary for delivery.

Supabase

Data storage, authentication, and real-time sync are powered by Supabase. Supabase acts as our data processor under applicable data protection laws.

5. Mobile App

Data on Device

The iOS companion app stores a local copy of your projects, notes, tracker items, contacts, and clients on your iPhone or iPad. This local database makes the app fully functional offline. Sync credentials (email, password, and optional encryption phrase) are stored in the system settings database.

Background Sync

When cloud sync is enabled, the mobile app synchronizes data in the background on a 30-second interval. Sync uses end-to-end encryption if you have configured an encryption phrase. You can disable sync at any time, reverting the app to local-only mode with no network activity.

Native Device Features

The app integrates with native iOS features such as the system mail composer (for sending meeting notes) and the phone dialer (via tel: links). These actions are performed entirely on your device — we do not have access to your email account credentials or call history.

Error Logging

Sync errors are written to a local log file (error.log) in the app's data container. This log never leaves your device unless you manually share it for troubleshooting.

6. Cookies & Local Storage

Authentication

We use essential cookies and local storage tokens to maintain your session and keep you logged in. These are strictly necessary for the application to function.

Analytics

We may use lightweight, privacy-preserving analytics (e.g., no cross-site tracking) to understand aggregate feature usage. You can opt out in your account settings.

7. Your Rights

Access & Portability

You can view all your data within the application at any time. Account settings include an export option that downloads your projects, notes, and action items in a portable format.

Deletion

You may delete your account at any time through account settings. We will erase your personal data within 30 days, except where retention is required by applicable law.

Correction

Account profile information can be edited directly in settings. For data corrections that cannot be made through the UI, contact support.

8. Changes to This Privacy Statement

Updates

We may update this privacy statement from time to time. Material changes will be notified via the email address associated with your account. Continued use after an update constitutes acceptance of the revised statement.

9. Contact

Questions

If you have questions about this privacy statement or how your data is handled, please open an issue on the ProjectNotes GitHub repository or email the project maintainer through the GitHub profile.