Last updated: 14 August 2026
NotesMD is a local-first notes app. Your notes live on your device. This policy explains the limited data the app handles and the choices you have. It is written to meet the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).
The data controller is the individual operator of NotesMD, based in Switzerland. Contact: [email protected].
Your notes, their attachments (images, PDFs, audio), groups, reminders and settings are stored locally in your browser/app storage (IndexedDB and localStorage). They are not sent to our servers. Notes you "lock" are encrypted on your device with a key derived from your PIN; their body and attachments are stored as ciphertext (the title stays visible so you can find the note).
Signing in is optional and enables backup, cross-device sync, and higher AI limits. When you sign in we receive, from Google, your name, email address, profile picture, and your Google account identifier (sub). We use these to identify your account and to key your backup, AI quota, and reminder notifications.
drive.appdata permission, backups are written to a hidden, app-private folder inside your own Google Drive. Only this app can access that folder; the operator cannot see or read it. You can revoke access at any time in your Google Account settings.Our backend (a Cloudflare Worker) never stores note content. It holds only:
sub);When you use AI chat, image text extraction (OCR), or audio transcription, the relevant text, image, or audio is sent through our server to Google Gemini and the result is returned to you. This is the one place note content leaves your device. We do not store the content of these requests; only the daily counter above is kept. Google processes these requests under its own terms.
Consent (Google sign-in, AI features, feedback); and our legitimate interest in preventing abuse and keeping the service working (e.g. IP-based rate limiting). You can withdraw consent by signing out, not using AI, or not sending feedback.
We do not sell your data or share it for advertising. Data is processed only by the infrastructure providers needed to run the app: Google (sign-in, Drive backup you control, and Gemini for AI) and Cloudflare (hosting and the backend). No third-party analytics or ad SDKs are included.
AI counters expire in ~2 days; feedback in ~180 days; a push subscription is kept until you delete your account data or it becomes invalid. Local notes remain until you delete them. Drive backups live in your own Google Drive and are under your control.
You have the right to access, correct, and delete your data, and to object to or restrict processing. To delete the data our server holds, use Settings → Delete my account data in the app, or visit notesmd.cc/delete-account. This removes your server-side records (AI counter, push subscription, tier). Your local notes and any Drive backup are separate — the app offers to erase local data too, and you can delete a Drive backup from your Google account. You may also contact us at the address above to exercise your rights, and you may lodge a complaint with the Swiss FDPIC or your local EU supervisory authority.
NotesMD is not directed to children under 16 and does not knowingly collect their data.
We may update this policy; the "last updated" date will change and, for material changes, we will note it in the app.