Effective date: October 30, 2026
NoteRecall is designed around files and storage accounts you control. NoteRecall provides optional website accounts. The account service does not receive local notes. NoteRecall does not sell personal data, serve advertising, or include third-party analytics in the application.
The NoteRecall website
Public information pages are static. The website also provides optional account registration and login. It does not accept note content or intentionally set analytics or advertising cookies.
The site is delivered by Cloudflare. Like other web infrastructure providers, Cloudflare may process standard network and request information needed to deliver, protect, and operate the site, such as IP addresses, request times, requested URLs, and browser information.
Optional accounts and login
When you register or sign in, the account service stores the verified email address, permanent user ID, registration metadata, authentication and session records, and any authorization grants in Cloudflare D1. These records support account identity, login, session validation, abuse prevention, and access checks. They do not include local notes or connected-storage credentials.
If you choose an optional login password, the account service stores a salted password hash, not your original password. Email-code login remains available. Setting or resetting a password requires a separate email code and revokes that account's existing sessions.
Resend receives the recipient email address and one-time login or password code to deliver the requested email; it does not receive your password. Website login uses a necessary session cookie to maintain the signed-in session. Logging out revokes that session and clears its cookie; it does not delete the account or local notes.
Feedback and questions
You can leave a private message without signing in. We store your message, chosen contact name, optional email address, selected language, receipt time, and handling status in a dedicated Cloudflare D1 database. Authorized staff use these records to review feedback and follow up when you provide an email. Your name and email do not create an account or verify your identity.
We request Asia-Pacific placement for the feedback database. This is a location preference, not a guarantee of storage in a particular country or a restriction on Cloudflare's global processing. Cloudflare Turnstile processes verification and standard browser/network information to protect the form. Our feedback rate limits retain a window-specific keyed hash and expiring counter instead of a raw IP address. Counters expire after 60 seconds and are removed on later submissions or daily cleanup.
Feedback is retained for 180 days from receipt and then removed by daily cleanup, regardless of handling status. Closing a message does not delete it early. Deleted information may remain in Cloudflare recovery history for up to 30 further days. To request earlier deletion, contactsupport@noterecall.app and provide enough details to identify your message; we verify the matching submission before deleting it. Please avoid including sensitive information in messages.
The NoteRecall application
NoteRecall stores your notes as ordinary Markdown files in workspaces you choose. A workspace can also contain images, audio recordings, video, and other files that you add. Search indexes, recall scheduling and review history, todo information, preferences, recent-file information, and other supporting application data are maintained on your device to provide the app's features.
When you use a local workspace, the workspace remains on your device or in a folder managed by tools you choose. NoteRecall does not require you to upload local notes to a NoteRecall account.
Files, photos, media, and microphone access
The application requests file access so that you can open and manage the local workspace you select. It reads and changes files only to perform actions you request, such as browsing, searching, editing, moving, or deleting workspace content. On Android, local workspace support may require broad file access because the current workspace engine operates on ordinary filesystem paths. The app-owned default workspace remains available without granting that optional access.
If you choose an image or other media file, NoteRecall accesses the item you select so it can be inserted into a note or workspace. If you choose to record audio, NoteRecall requests microphone access and saves the resulting recording into the workspace. The microphone is not used until you start a recording.
Optional connected storage
If you connect a cloud workspace, NoteRecall sends requests directly to the provider you configure to list, download, create, update, move, and delete workspace content. Supported connections can include OneDrive, Google Drive, Dropbox, Baidu Pan, WebDAV, and S3-compatible storage. Cloud use is optional. Your provider processes workspace content, account identifiers, network information, and request metadata under its own terms and privacy practices.
Authorization tokens, app passwords, access keys, secret keys, and similar cloud credentials are stored using the operating system's secure credential storage. They are used only to connect to the provider you selected and are not stored in NoteRecall workspace files or sent to NoteRecall's website.
Notifications and reminders
If you enable reminders, the application stores the reminder schedule on your device and uses operating-system notification and restart facilities to deliver it. NoteRecall does not send reminder content to a NoteRecall server.
Diagnostics and support
The application may create local diagnostic logs to help identify problems. These logs remain on the device unless you choose to share them when requesting support. Please inspect files before sending them and avoid including sensitive material.
If you contact support by email, the information you send—including your email address and message—will be used to respond to the request and maintain necessary support records.
Retention and deletion
Account records remain stored in this first version. Self-service account deletion is unavailable. Send account-data requests tosupport@noterecall.app.
Local workspace files remain until you change or delete them. Application settings, indexes, logs, review data, and cached cloud working copies remain on the device until they are replaced, removed through the application where that option is available, or the application data is cleared or uninstalled. Removing a cloud workspace from NoteRecall removes its local registration, credentials, and cache; it does not delete the provider's copy unless you explicitly perform a delete operation on that content.
To remove data held by a connected provider, use NoteRecall's file actions or the provider's own controls. To remove an authorization grant or provider account, use the provider's account settings. Support correspondence is retained only as reasonably needed to answer the request, maintain business records, and meet legal obligations.
Use by children
NoteRecall is a general-purpose productivity application and is not specifically designed for children. Children may use it with the guidance of a parent or guardian. A parent or guardian should assist with support requests and avoid including unnecessary personal information in messages or attachments.
Policy changes
This page will be updated if the website or application begins handling information in a materially different way. The effective date above identifies the current version.
Contact
Questions about this policy can be sent tosupport@noterecall.app.