Who operates the service
Chat with Notes is operated by Tashfeen Ahmed. This policy covers the iPhone app, its API, and this website. Contact tashfeen@black.com.pk with privacy questions or requests.
Information we process
- Imported notes: note text, titles, creation and modification dates, and a search index of that text.
- Conversations: questions you send, generated answers, note-source references, conversation history, and suggested questions.
- Account and connection data: a randomly generated account identifier, authenticated session, import progress, usage allowance, and optional automatic-refresh connection.
- Feedback and support: messages you submit in the app or send to our support address, including your email if you contact us.
- Technical information: information needed to deliver and protect the service, such as IP addresses, request timing, error codes, and usage totals. Apple may separately provide TestFlight crash and beta feedback information.
The beta creates a device-linked account without requiring an email or password. Reinstalling the app or losing the stored session may prevent account recovery.
How the Notes connection works
You start a Shortcut that copies up to 10 notes per run. Refreshing can add new notes and update imported copies. Importing older notes adds to your connected library. Changes in Apple Notes reach the app only when a Shortcut runs.
Automatic refresh is optional and requires a separate iPhone automation. It can import the latest 10 edited notes, including new notes. You can disable it in Settings. Deleting a note in Apple Notes does not delete its previously imported copy here.
We do not edit or delete originals in Apple Notes. The current version supports readable text, not locked notes, images, scans, handwriting, or attachments.
AI processing and service providers
To answer questions, relevant note excerpts and recent conversation context are sent through OpenRouter to the configured AI provider, currently a Google Gemini model. Daily suggestions also use brief excerpts from recent imported notes. Provider routing may change as the service develops.
Our API requests use OpenRouter’s setting that excludes providers permitted to collect data for training. This is not a promise of zero retention across every provider. Providers may process or retain information for service operation, security, abuse prevention, or legal obligations under their policies. See OpenRouter’s data-handling documentation and Google’s privacy policy.
Hetzner hosts our application server in Germany. Cloudflare provides domain-name services. The website and API are served from our Hetzner server. Apple distributes the beta through TestFlight and provides system services. Requests may be processed in countries other than your own.
We do not sell your notes or use them for advertising. We do not train our own AI model on your notes.
Microphone and speech
Dictation starts when you tap the microphone and grant permission. Your device’s speech-recognition service may use Apple’s servers. Chat with Notes does not save audio recordings or send audio to OpenRouter. Only the text you choose to send becomes a chat message. You can revoke microphone and speech permissions in iPhone Settings.
Why we use this information
We process information to import and search notes, provide AI answers and suggestions, preserve chat history, maintain account access, handle feedback, enforce usage limits, and protect the service. Where data-protection law requires a legal basis, we rely on providing the service you request, your permission for optional device features, legitimate interests in security and maintenance, and applicable legal obligations.
Storage, retention, and deletion
Imported notes and chats remain in your account until you disconnect or delete it. Disconnecting removes the imported library and conversation history and revokes the Notes connection. Account deletion also removes the active account, feedback, free-trial usage records, and associated connection credentials. Minimal Apple transaction and subscription allowance records remain without the deleted account association to support restores, refunds, billing integrity, and applicable record-keeping obligations. These records contain no note or chat text. It does not change your original Apple Notes.
Deleting in the app removes data from the active application database. Temporary recovery backups may retain earlier copies until they are removed during maintenance; in-app deletion does not instantly erase those separate files. Contact us if you need assistance with retained backup copies. Service-provider records are governed by their own retention policies and applicable law.
Connections use HTTPS and account-scoped access controls. Imported content is readable by the server for search and AI processing; this service is not end-to-end encrypted. No internet service can promise absolute security.
See Delete account for the steps. Removing the app from your iPhone alone does not delete server data.
Website and payments
This website does not set advertising cookies or use third-party marketing analytics. Our hosting and domain-name providers process technical information needed to deliver and secure the website. Email links open your own mail app; no message is sent until you send it.
Chat with Notes includes two successful AI replies, then offers Plus through Apple’s in-app purchases. Apple processes payment details; we do not receive your card number. Our server verifies signed Apple transactions and processes product identifiers, original transaction identifiers, expiration and refund status, account associations, and AI usage totals to provide your subscription. TestFlight uses Apple’s sandbox and does not charge real money.
Your choices and rights
You can stop importing, disable automatic refresh, revoke device permissions, disconnect notes, or delete your account. Depending on where you live, you may also have rights to access, correct, export, restrict, or object to processing of your personal information, withdraw consent where it applies, and complain to your local data-protection authority.
Contact tashfeen@black.com.pk to make a request. We may need to verify control of the account. Do not email note contents, passwords, API keys, or session tokens. Because the beta does not associate an email with every account, an email address alone may not identify your account.
Children and policy changes
The service is not directed to children under 13, or a higher minimum age where local law requires it. If you believe a child provided personal information, contact us. We may update this policy as the app develops; the date above identifies the current version. Material changes will be communicated in the app or through an appropriate service notice.