Privacy Policy
NoteEight is built so that your notes stay on your iPad unless you deliberately switch syncing on for one. This policy explains what is collected when you do, and what is never collected at all.
Who is responsible for your data
House Of Acid Ltd, of Number 24, Cheshire CH61 3XW, United Kingdom, is the data controller for personal data processed through NoteEight. You can reach us at info@houseofacid.com.
What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| Your email address | To sign you in. NoteEight has no passwords; we email a six-digit code instead. | Performance of a contract |
| Notes you have switched syncing on for: titles, task text, due dates, priorities and order | So the same list appears on your iPad and in your browser. | Performance of a contract |
| Your handwriting, as the original strokes and a rendered image | The handwriting is the note. It is stored so it can be shown back to you on another device. | Performance of a contract |
| Which plan you are on, and a record of any subscription | To apply the right limits, and to know what you have paid for. | Performance of a contract |
What we do not collect
- Notes you have not switched syncing on for. Those never leave your iPad, and we cannot see them.
- Analytics, advertising identifiers, or any tracking across other websites.
- Your location, contacts, photos, or anything else on your device.
- Payment card details. Subscriptions are sold through Apple's App Store; Apple takes the payment and we never see your card.
Storage in your browser
Two things are kept in your browser, and neither is used to track you. A sign-in token, so you are not asked for a code on every visit, and your choice of light or dark appearance. The appearance setting is a cookie covering noteeight.com and app.noteeight.com, so the site and the app agree about it; it holds one word and nothing else. Both are strictly functional, and there are no advertising or analytics cookies — which is why you are not being asked to accept any.
Who else handles your data
- Supabase — the database, sign-in, and storage for handwriting. Your notes are held on servers in the European Union.
- Resend — sends your sign-in codes. Receives your email address and nothing else.
- Cloudflare — serves this website and the web app.
Your notes and handwriting are stored in the European Union. Some of the companies above are based in the United States and may process data there — chiefly the sending of your sign-in codes and the serving of these pages. Those transfers rely on the UK's International Data Transfer Addendum and equivalent safeguards.
How long we keep it
- A note you delete goes to a recycle bin on your iPad for 30 days, and is removed from our servers at the same time.
- Switching syncing off for a note removes it from our servers on the next sync. The note stays on your iPad.
- Close your account and everything associated with it is deleted. Ask at info@houseofacid.com.
Your rights
Under UK data protection law you may ask for a copy of your data, ask us to correct or delete it, object to processing, or ask us to restrict it. Write to info@houseofacid.com and we will answer within one month. If you are unhappy with the response you can complain to the Information Commissioner's Office at ico.org.uk.
Children
NoteEight is not intended for children under 13, and we do not knowingly collect their data. If you are under 18, ask a parent or guardian before buying a subscription. If you believe a child has given us personal data, write to info@houseofacid.com and we will delete it.
Changes
If this policy changes materially we will say so on this page and update the date at the top.