Privacy at NonoNotes

Your notes
Your control

NonoNotes handles only the data needed for features you choose. Core note-taking does not require an account. We process relevant data when you use Sign in with Apple, paid membership, the invite program, in-app feedback, or an optional third-party service.

Effective and last updated: September 10, 2026

01 · DATA MINIMIZATION

Limited processing

We handle only the data needed to provide features you choose, respond to support requests, and meet legal obligations

02 · YOUR CHOICE

Only when you choose

These permissions and connected services are used only when you choose the related features, and you can turn them off at any time

03 · NO TRACKING

No selling, no tracking

We do not provide third-party targeted ads, track your activity across apps or websites, or sell or rent personal information

01 · SCOPE

Scope

This Privacy Policy applies to the NonoNotes iOS and iPadOS application, account and membership services, and the NonoNotes website that links to this policy (together, the “Services”). In this policy, “we,” “us,” and “our” refer to NonoNotes.

Core note-taking does not require sign-in. Sign in with Apple is used for account, membership, the invite program, and in-app feedback. This policy describes how the Services currently handle data. Third-party websites opened through the built-in web tool, and Google Drive, Microsoft OneDrive, or Baidu Netdisk accounts that you connect, are also governed by the privacy policies of those providers.

02 · AT A GLANCE

The most important points

  • Notes are stored on your device by default. We do not receive note content unless you choose a feature that transfers it or send it to us for support.
  • When you use Sign in with Apple, we process account details. When you purchase or restore membership, we process transaction information needed to verify access.
  • When you join the invite program or submit in-app feedback, we process the information needed to confirm eligibility, provide rewards, deliver feedback, and reply.
  • We do not sell personal information, use it for targeted advertising, or track you across other companies’ apps or websites.
  • Cloud backup, system services, web access, and nearby collaboration are optional, and related data is used only to perform the feature you request.
What “collection” means here: An app feature using data does not necessarily mean we receive it. A relevant recipient processes data only when a feature needs a third-party service, you choose to share content, or you contact support.

03 · DATA WE PROCESS

Data handled by the Services

Category Examples and purpose Possible recipients
Notes and user content Notes, documents, and related content you create or import, used to create, edit, search, import, export, and provide connected features you select. Your chosen cloud service, system service, sharing recipient, or collaboration participant; these recipients do not process the content unless you use the relevant feature.
Account and sign-in Your Apple account identifier and any name or email Apple may provide when you first authorize access, including a private relay address, to create, authenticate, and manage your Nono account. NonoNotes account services and Apple.
Membership and purchases Subscription product, transaction proof, membership status, expiration, and renewal status to verify purchases, restore access, redeem codes, and prevent a transaction from being used more than once. NonoNotes account services and Apple. Apple processes payment methods and full billing details; we do not receive your full payment-card information.
Invite program Invite codes, referral relationships, eligibility, and reward records, plus account, device, and membership status needed to confirm eligibility and prevent program abuse. NonoNotes account services; Apple provides transaction status when purchase eligibility is involved.
Audio and transcripts Audio you record and resulting text, used for recording, playback, and speech-to-text. Apple system services or your chosen cloud service when you enable the relevant feature.
Photos and camera content Images you select, import, or capture, used to insert them into notes and provide image features you choose. The relevant recipient only when you choose to share, back up, or use a related system service.
Preferences and usage records App settings and preferences, plus web-tool bookmarks, history, and website data, used to remember your choices and provide related features. We do not receive this data; websites you visit may process website data under their policies.
Cloud authorization and backup The cloud service you authorize, your selected backup location, connection and backup status, and authorization data needed to manage backups. This data is used to connect the service, maintain authorization, and perform the backups you request. NonoNotes does not obtain your cloud-service password. Your chosen cloud provider. When Baidu Netdisk authorization is connected or renewed, the NonoNotes account service briefly processes the required authorization data but does not retain Baidu authorization codes or access credentials.
In-app feedback and support communications When you submit feedback in the app, we receive its category, title, content, app version, device model, system version, language, region, and limited network information needed to prevent abuse, and use the email linked to your account to reply. If you email us, we also receive the message and any attachments you choose to provide. NonoNotes and our email provider.

System speech, text recognition, and translation

When you use speech recognition, text recognition, or translation, relevant content may be processed by Apple system services depending on your device, system settings, and selected feature. Apple’s processing is governed by the Apple Privacy Policy.

Public website

The NonoNotes website does not use third-party advertising or analytics scripts. To deliver and protect the site, the hosting provider may automatically process basic connection information such as IP address, browser type, and access time. If you email us, the email provider processes the communication.

04 · DEVICE PERMISSIONS

How device permissions are used

Permission When it is used If you decline
Camera When you take a photo to insert into a note. You cannot capture a new photo in the app; other note features remain available.
Photos When you view recent photos or select images from your library. You cannot insert library photos; iOS limited-photo access can be used.
Microphone When you begin recording audio in a note. You cannot create new recordings; existing notes remain available.
Speech recognition When you enable recording transcription or captions. Transcription methods requiring this permission are unavailable; recording and handwriting still work.
Local network When you use classroom mode to discover and connect nearby iPads. Classroom mode cannot discover or connect nearby devices.

You can review or revoke permissions at any time in iPad Settings under Privacy & Security. Revoking a permission affects only features that need it and does not remove content already inserted into a note.

05 · OPTIONAL CLOUD BACKUP

Optional third-party cloud backup

Nono Unlimited members may connect Google Drive, Microsoft OneDrive, or Baidu Netdisk. NonoNotes accesses cloud data needed for backup only after you connect a provider and enable backup. Depending on the format you choose, uploaded content may include notes, PDFs, images, or recordings contained in your notes. Each provider also processes data under its own privacy policy and your account settings.

Google Drive Accesses specific files and folders you use with NonoNotes to select a location and create, update, or delete NonoNotes backups. Google Privacy Policy
Microsoft OneDrive Authorization allows access to read and write files in the signed-in account. NonoNotes actually uses it only to view folder names needed to choose a location and to create, update, or delete NonoNotes backups. Microsoft Privacy Statement
Baidu Netdisk Accesses the NonoNotes app-data directory in Baidu Netdisk to select a location and create, update, or delete NonoNotes backups. Baidu Privacy Policy
  • Backup content is transferred from your device to the selected cloud provider. The NonoNotes account service does not retain a copy.
  • Google Drive and OneDrive authorization data is stored on your device. When Baidu Netdisk authorization is connected or renewed, required authorization data passes through the NonoNotes account service but is not retained there.
  • Backup files are retained by the selected provider and linked to your account with that provider.
  • Disconnecting a provider in NonoNotes clears the connection from your device and stops future access, but does not automatically delete uploaded files or necessarily revoke the grant in the provider account.
  • To remove cloud copies, delete the NonoNotes folder or files in that drive and revoke NonoNotes access in the provider’s account settings.
Google API Limited Use: NonoNotes’ use of information received from Google APIs, and its transfer of that information to other apps, will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the Google Drive backup feature you choose. We do not sell this data or use it for advertising, credit decisions, or training generalized AI models. Our personnel do not view backup content unless you explicitly ask us to assist with it or access is necessary for security, compliance, or legal reasons.

06 · WEB & NEARBY COLLABORATION

Built-in web tool and classroom mode

Built-in web tool

When you visit a third-party website through the web tool, that site may process your IP address, device or browser information, cookies, login details, and content you submit under its policy. The web tool retains website data needed for browsing, which you can clear there. We do not receive your browsing history or send note content to a website unless you choose to submit it.

Classroom mode

When you choose to host or join classroom mode, nearby participants may see your device name and classroom code. After connection, collaboration content is sent to connected participants. Related transfers stop when the class ends or devices disconnect.

Join only classrooms you trust and avoid including sensitive information you do not want other participants to see. A copy already received by another participant may remain on their device, and NonoNotes cannot remotely delete that copy for you.

07 · SHARING

When information is shared or disclosed

We do not sell or rent personal information or share it for third-party advertising or cross-service tracking. Necessary disclosure occurs only in these situations:

  • At your direction: for example, uploading to a drive you select, exporting or sharing content, or collaborating with nearby classroom participants.
  • System and service providers: such as Sign in with Apple and the App Store, NonoNotes account services, Apple system services, cloud providers, website hosting, and email providers, to perform features you request.
  • Legal and safety reasons: when required by law, necessary to protect users or the public, or needed to protect our legal rights, limited to information we actually hold.
  • Business changes: if NonoNotes changes ownership through a merger, acquisition, or asset transfer, we will require the recipient to continue protecting relevant information under this policy and provide notice where applicable.

When we select a provider to process data on our behalf, we require it to use protections consistent with this policy and applicable law.

08 · RETENTION & DELETION

How long data is retained

  • App content and preferences: until you delete them in the app or uninstall the app. Deleted notes remain in Trash for up to 30 days and are then permanently removed automatically; you can empty Trash sooner. Export content you want to keep before uninstalling.
  • Nono account: account details, sign-in identifiers, and membership status are retained while your account is open. You can permanently delete the account in Account & Membership in the app. On completion, we delete the account and associated personal information except invite-program eligibility records and limited records that law requires us to keep.
  • Sign-in credentials: sign-in state remains in the device Keychain until you sign out, delete the account, or the credentials expire.
  • Purchase records: NonoNotes retains transaction and subscription status needed to provide and verify membership. Apple retains App Store purchase records under its policies. Deleting a Nono account does not automatically cancel a subscription managed by Apple.
  • Invite program: eligibility, referral, and reward records are retained as needed to provide rewards, handle disputes, and prevent repeat claims. Because each account can receive an invitee reward only once, deleting or re-registering an account does not reset the necessary eligibility record.
  • Cloud backups: until you delete them, subject to the selected provider’s retention policy. Disconnecting authorization alone does not delete cloud files.
  • Cloud authorization: authorization data on your device remains until you disconnect the service or it expires. The NonoNotes account service does not retain Google Drive or OneDrive access credentials, or Baidu Netdisk authorization codes or access credentials after processing. Uninstalling the app may not revoke access at the provider; also revoke it in the provider’s account settings to fully remove access.
  • Web data: until you clear history and website data or uninstall the app.
  • Classroom collaboration: transfers stop when the session ends; content copies saved by participants may remain.
  • In-app feedback and support email: may be retained with your account to handle the request, reply, maintain security, and meet legal obligations. It is deleted with the account except for limited records required by law. Account-independent anti-abuse records are retained for no more than 30 days.

09 · YOUR CHOICES

Your privacy choices and rights

You can control most data directly through your device and chosen providers:

  1. Core note-taking does not require sign-in. You can sign out or permanently delete your Nono account in Account & Membership in the app.
  2. View or cancel Nono Unlimited in Apple subscription settings. Deleting your Nono account, signing out, or uninstalling the app does not automatically cancel the subscription.
  3. Revoke camera, photo, microphone, speech recognition, or local-network permission in iPad Settings under Privacy & Security.
  4. Turn off automatic backup or disconnect Google Drive, OneDrive, or Baidu Netdisk in NonoNotes Settings.
  5. Delete backup files in the relevant drive and revoke NonoNotes in that provider’s connected-app settings.
  6. Delete history, bookmarks, or all website data in the built-in web tool.
  7. Delete content and empty Trash in the app; Trash is permanently cleared within 30 days. Uninstalling removes content and settings managed by the app.
  8. Stop or leave classroom mode to end transfers between nearby devices.
Account deletion does not remove data stored elsewhere: deleting your Nono account does not automatically delete notes on your device, backups in a third-party drive, or Apple purchase records, and it does not reset the invite program’s one-time eligibility record. Manage each item in its respective location.

Depending on where you live, you may have rights to access, correct, delete, copy, restrict, or object to processing of personal information, withdraw consent, lodge a complaint, or appeal a decision. For data controlled by a third-party service, use that provider’s controls. For support communications and other information we actually hold, email us to make a request. We may need to verify it and will respond within the period required by applicable law.

10 · CHILDREN

Children and younger users

NonoNotes is a general productivity and learning tool and is not directed specifically to children under 13 or the applicable age of digital consent. We do not knowingly collect children’s personal information without appropriate consent.

Users below the applicable age of digital consent should use connected features, cloud backup, and support communications only with authorization from a parent, guardian, or school. Users under 14 in mainland China should use these features with the consent and guidance of a parent or other guardian. If you believe a child has sent us personal information without appropriate consent, contact us below.

11 · INTERNATIONAL TRANSFERS

International processing

If you choose a cloud provider or website based outside your country or region, submit in-app feedback, or email us across borders, related data may be processed outside your country or region. The provider you choose determines processing locations and transfer arrangements, so review its policy and account settings before connecting.

12 · SECURITY

How data is protected

We use technical and organizational measures appropriate to the nature of the data and processing risks, and limit processing to what is needed for the features you choose. No electronic storage or network transmission can be guaranteed completely secure. Protect your device with a passcode, secure your cloud accounts, avoid sharing sensitive content in untrusted classroom sessions, and keep the operating system and app updated.

13 · CHANGES

Changes to this policy

We may update this policy when NonoNotes features, providers, or applicable law change. A new effective date will appear at the top. If a change materially affects your rights or how data is handled, we will provide notice where applicable through an in-app message, release notes, or another prominent method, and request consent again when required by law.

14 · CONTACT

Questions? Contact us

Operator: NonoNotes
Contact us for privacy requests, data rights, product support, and security concerns.

support@nononotes.com

Your use of the Services is also subject to the NonoNotes Terms of Use.