Notori Privacy Policy

App privacy policy updated 30 September 2026. Contact details and publication on notori.app updated 7 October 2026.

This is the privacy policy for Notori, created by Miguel Ángel Ramírez.

Privacy at a glance

Notori is designed so that note and local search work on your device without an account. AI is integral to Notori and accepting its processing is required before using the app. Notori does not use advertising trackers.

1. Data stored on your device and in iCloud

Your notes, links, attached photos and files with their recognised text, edits, and derived topics and relationships are stored in Notori’s private app or App Group container. When iCloud is available, Notori syncs this database with your private iCloud (CloudKit) database, so it can appear on your other devices signed in with the same Apple Account. That copy sits in your own iCloud account under Apple’s terms; Notori does not operate an account or a server for it. The local search index, settings, AI-consent choice, widget snapshot and the queue of pending AI jobs stay only on the device and are not synced. To stop syncing, turn off iCloud for Notori in your device’s system iCloud settings; copies already stored in iCloud remain until you delete them there. Apple may also include app data in device backups according to your iCloud or backup settings.

2. AI processing

Only after you consent, note text, your questions and a bounded amount of relevant source content may be sent to Notori’s Cloudflare Worker and then to OpenAI to organise material or answer your question. For photos you save, a resized copy of the image is also sent with its recognised text to describe objects and scenes, not just words. The uploaded copy is generated without the original file metadata; the original photo remains stored on your device. This requires accepting the updated notice even if you previously accepted text processing. Requests are protected by device attestation, an installation identifier, rate limits and size limits. The Worker requests store:false. OpenAI states that API data is not used to train its models by default; unless a stricter retention arrangement applies, abuse-monitoring logs may retain content for up to 30 days. For some requests (organising notes and building topics), the Worker keeps the result for up to 24 hours, linked to your device’s installation identifier, so an interrupted request can be recovered without repeating it; it is then deleted automatically. Do not send information you do not want processed by these providers. There is no setting to turn AI off or use Notori in a local-only mode. Stop using Notori if you no longer accept this processing.

3. Security identifier

Notori creates a persistent random installation identifier and uses Apple App Attest signals to defend the AI service, enforce limits and investigate abuse. The identifier may be associated with AI requests, but is not used for advertising or cross-app tracking.

4. Purchases

Apple processes payment information. RevenueCat receives an anonymous persistent app-user identifier plus subscription and purchase status so Notori can offer, restore and manage Premium access, analyse purchase reliability and prevent fraud. Notori does not receive your full payment-card details. This data is not used for advertising tracking.

5. Retention and deletion

Items moved to Notori’s trash remain on your devices until you restore them or remove the app data. You can permanently delete items from Trash at any time, and that deletion is also applied to your other devices through iCloud. “Delete all my data” in Settings removes your notes and derived data from this device and from your private iCloud copy. You can export your notes as Markdown from Settings. If iCloud sync is off, these deletions apply only to this device and copies already in iCloud must be deleted in your iCloud storage settings. Because notes sync through iCloud, a change or deletion made on one device is also applied to your other devices. Removing the app and its data removes the local database from that device, but not the copies already synced to iCloud, which may be downloaded again if you reinstall Notori with iCloud on; you can delete them in your iCloud storage settings. Copies may remain in Apple backups until those backups expire or you delete them. Results that the AI service keeps temporarily are deleted automatically within 24 hours at most. Operational security records held by service providers follow their own retention periods, including the OpenAI period described above.

6. Sharing and legal requests

Notori shares data only with the processors described above when needed to provide features, protect the service, comply with law, or complete a transaction. Notori does not sell personal data.

7. Your choices and contact

You can stop using Notori, manage subscriptions through Apple, export your notes, delete your data from Settings, and manage iCloud sync from system settings. Stopping use does not change the retention periods described above. For privacy requests or questions, email miguelangel@notori.app. This notice should be read together with the public privacy policy for your country or region.