The short version: Your notes are yours. Private notes never leave your device. Regular notes (and voice recordings you choose to transcribe in the cloud) may be processed by AI (Google Gemini, with Anthropic Claude as a fallback) to transcribe speech and extract summaries and tags. We don't sell your data. We don't show ads. We don't track you across the web.
1. Who we are
Noda is operated by SuAppStudio, an independent design studio based in Vietnam. When this Privacy Policy refers to "we," "us," or "Noda," we mean SuAppStudio operating the Noda mobile application.
If you have questions, contact us at pebblenotes.app@gmail.com.
2. What data we collect
Information you provide
- Notes content: Text, voice recordings, and images you save in the app. Stored on your device by default.
- Profile: Display name and avatar (emoji or photo). Stored locally on your device.
- Settings preferences: Language, theme, notification preferences. Stored locally.
Information collected automatically
- App usage analytics: We collect basic usage metrics (crashes, feature usage frequency) via Apple's standard analytics. This data is aggregated and anonymous.
- Device information: Operating system version and device model, used only for diagnostic purposes.
What we do NOT collect
- We do not collect your location.
- We do not collect your contacts.
- We do not track your activity across other apps or websites.
- We do not sell, rent, or trade your data with third parties.
3. How AI processing works
This is the most important section. Please read carefully.
For Private notes (marked with 🔒)
Private notes are never sent to AI. They remain entirely on your device. AI features (summary, hashtags, action extraction) are skipped. We've built multiple safety layers to ensure this never accidentally happens.
For regular notes
When you save a regular note, Noda may send the note's raw text content to our AI providers — Google Gemini (primary), with Anthropic Claude as a fallback — for processing. The AI generates:
- A short summary (2-3 sentences)
- Suggested hashtags (in both Vietnamese and English)
- Action items detected from the note
- Optional reminder or calendar suggestions
For voice notes (cloud transcription)
By default, voice is transcribed on your device using Apple Speech. For higher-quality, multilingual transcription, Noda may send the audio recording of a non-private voice note to Google Gemini to convert speech to text. This happens only for regular (non-private) notes, and only within your daily AI allowance / Pro plan. Private (🔒) voice notes are always transcribed on-device and never uploaded.
What we send to the AI:
- The raw text of your note (text notes), or the audio recording (voice notes you transcribe in the cloud)
- The detected language
- An anonymous request identifier (no user account info)
What we do NOT send:
- Your name or profile information
- Your device identifier
- Your location or IP address (Noda sends requests through standard HTTPS without revealing user identity to the AI)
- Other notes (each note is processed independently)
- Anything from notes marked Private (🔒)
Sensitive content detection
Noda automatically scans note content for patterns that look like passwords, ID numbers, credit cards, or bank accounts. When detected:
- The note is masked in the UI (e.g., "Pa•••••••3")
- The note is suggested to be marked Private
- If you don't mark it Private, sensitive patterns are masked before being sent to AI
4. Where your data lives
Noda is a local-first app. Your data lives on your device. Specifically:
- Notes: SQLite database on your iPhone, encrypted by iOS at rest
- Voice recordings: iOS file system, encrypted by iOS at rest
- Settings: iOS preferences storage
- Sensitive credentials: iOS Keychain (most secure storage Apple provides)
We do not maintain user accounts or cloud servers that store your notes. There is no Noda account to hack because there is no Noda account.
5. Third-party services we use
Google Gemini (AI processing & voice transcription)
For non-private notes, we use the Google Gemini API as our primary AI to transcribe voice recordings and generate summaries and hashtags. Google processes the input and returns a response. Per Google's API terms, paid Gemini API inputs are not used to train their models. Read Google's API terms · Google privacy policy.
Anthropic Claude (AI processing)
For non-private notes, we use Anthropic's Claude API to generate summaries and hashtags. Anthropic processes the text and returns a response. Per Anthropic's privacy policy, they do not use API inputs to train their models. Read Anthropic's privacy policy.
Apple App Store & In-App Purchases
Subscription payments are processed by Apple. We never see your payment information. Apple provides us with subscription status only. Read Apple's privacy policy.
RevenueCat (Subscription management)
We use RevenueCat to manage subscription state. RevenueCat receives anonymous purchase tokens from Apple, never your payment details. Read RevenueCat's privacy policy.
JSDelivr CDN (Translation updates)
We use JSDelivr to deliver over-the-air translation updates. Standard CDN requests may be logged by JSDelivr per their privacy policy.
6. Your rights
Because your data lives on your device, you have full control:
- Right to access: All your notes are accessible in the app itself.
- Right to delete: Delete any note from the app. Deleted notes go to Trash and are permanently removed after 30 days.
- Right to export: Use the Export Data feature in Settings to download all your notes as JSON.
- Right to be forgotten: Uninstall the app to remove all data from your device.
7. Children's privacy
Noda is not designed for children under 13. We do not knowingly collect data from children under 13. If you believe we have inadvertently received data from a child, please contact us at pebblenotes.app@gmail.com.
8. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. For significant changes, we'll notify you within the app.
9. Contact us
Questions, concerns, or requests about your privacy?
Email: pebblenotes.app@gmail.com
Studio: SuAppStudio, Vietnam
Subject: "Privacy inquiry"
We aim to respond within 5 business days.
Your data belongs to you.
We're a small studio, not a data company. Noda is built so we never need to know what's in your notes.