Privacy policy

Last updated November 2, 2026

DailyNotes is a free personal notes app. This page describes what we store when you create an account or write notes.

Account

We collect the email address and password you use to sign up. Passwords are stored as hashes by our authentication provider, Supabase Auth. We use them to sign you in, reset your password, and send confirmation email.

Notes

Your lists, categories, and note records are stored in a Postgres database hosted by Supabase. Each row is tied to your user id. Other accounts cannot read your notes through the app.

Note text, including older versions and recently deleted versions, is encrypted before it is saved. The database stores that ciphertext, so someone with access to the database sees encrypted text rather than your notes. The app decrypts a note on the server when you load it, using an encryption key kept separate from the database. List and category names are stored unencrypted so the app can organize notes.

Deleted notes and lists

Deleting a note, a version of a note, or a list moves it to Recently Deleted. It stays on your account for 30 days, and you can restore it during that time. You can permanently delete it from Recently Deleted before those 30 days end. After 30 days it is removed and cannot be restored. Deleting your account removes Recently Deleted items along with the rest of your notes.

What we do not do

We do not sell your notes or email. We do not use your notes to train models. We do not show ads. We do not charge for the app or store payment details.

Account deletion

You can delete your account from the account menu. Deletion removes your auth user and the notes stored for that user.

Contact

Questions about this policy: support@dailynotes.io. Related page: terms of use.