Privacy Policy

PureNote ("we", "our", or "us") is an iOS application for private, on-device voice notes. This Privacy Policy explains what data is collected, why, and how it is handled when you use PureNote and this website.

This policy is written to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Under GDPR, the data controller for personal data processed by PureNote is:

Aaro Alhainen
Email: support@PureNote.app
Location: Finland, European Union

Note content — stored on your device only

The following data is created by you and stored locally in the app's sandboxed storage on your iPhone or iPad. It never leaves your device except through optional iCloud sync (managed entirely by Apple):

• ◆ Audio recordings (if you choose to retain the audio file)
• ◆ Transcriptions and AI-generated summaries
• ◆ Recording metadata: titles, dates, durations, and timestamps
• ◆ Tags you create to organise recordings

Microphone access

PureNote requests microphone permission to record audio. Recordings are stored locally and never transmitted by PureNote.

Crash and performance data — sent to Sentry

When the app crashes or encounters an error, diagnostic data is sent to Sentry (see Section 4). This may include your IP address, device model, OS version, app version, and a stack trace. Your note content is never included in crash reports.

Subscription data — handled by RevenueCat and Apple

If you purchase PureNote Pro, your payment is processed by Apple. RevenueCat is used to verify your subscription status. This involves transmitting an anonymous, app-specific identifier and purchase metadata (product ID, entitlement status) to RevenueCat servers. No audio, transcripts, or summaries are involved.

Website

This website does not use cookies, analytics scripts, or tracking technologies. No personal information is collected through the website.

PureNote uses the following third-party services. Note content (recordings, transcripts, summaries) is never shared with any of them.

Under GDPR Article 6, we rely on the following legal bases:

• ◆ Consent (Art. 6(1)(a)): When you record audio, you grant consent to local processing. You can withdraw consent at any time by deleting the recording.
• ◆ Contract (Art. 6(1)(b)): Subscription verification via RevenueCat and Apple is necessary to deliver PureNote Pro features you have purchased.
• ◆ Legitimate Interest (Art. 6(1)(f)): Crash reporting via Sentry is in our legitimate interest to detect bugs and maintain a stable, secure app. Reports do not contain your note content.

Note content is processed entirely on your device to provide transcription (Apple Speech Framework), AI summaries and action items (Google's Gemma model, executed via the LiteRT-LM runtime — both bundled in the app, both running on-device), search and tagging, and export functionality. The licences and notices that govern the on-device AI model are available in the app under Settings → About & Licenses, and use restrictions are set out in our Terms of Use.

Crash data is used solely to identify, triage, and fix software defects. We do not use it for advertising or marketing.

Subscription data is used only to verify whether your device is entitled to PureNote Pro features.

Note content is stored in the app's sandboxed container using SwiftData and the App Group Container for audio files. It is protected by iOS device encryption and app sandboxing. We have no access to your device or its data.

If you enable iCloud sync, your data may be stored in your personal iCloud account under Apple's terms and privacy policy.

Crash reports sent to Sentry are stored on Sentry's EU infrastructure and retained according to Sentry's data retention policies.

Subscription data transmitted to RevenueCat is stored on their servers. RevenueCat is SOC 2 Type II certified.

You have complete control over your note content. It is retained until you delete individual recordings in the app, use "Delete All Data" in Settings, or uninstall the app. There is no automatic expiry.

Crash reports are retained by Sentry for 90 days by default.

Subscription records held by RevenueCat are retained as described in their privacy policy.

As an EU resident you have the following rights regarding your personal data. For note content, you can exercise most rights directly in the app:

• 📋 Right of Access (Art. 15) — Export all your notes using the export feature in Settings.
• ✏️ Right to Rectification (Art. 16) — Edit recording titles, transcriptions, and tags directly in the app.
• 🗑️ Right to Erasure (Art. 17) — Delete individual recordings or all data via "Delete All Data" in Settings.
• ⏸️ Right to Restrict Processing (Art. 18) — Stop using the app or delete recordings to stop local processing.
• 📦 Right to Data Portability (Art. 20) — Export your data in JSON format from Settings.
• 🚫 Right to Object (Art. 21) — Object to crash reporting by contacting us; we can discuss disabling Sentry for your account.
• ↩️ Right to Withdraw Consent (Art. 7) — Withdraw consent at any time by deleting your recordings or uninstalling the app.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For material changes we will provide additional notice within the app.

Your continued use of PureNote after changes are posted constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please reach out:

Aaro Alhainen
support@PureNote.app