Privacy

Last updated: August 2026

Notata is built on a simple idea: your life’s record belongs to you, on your device. Nothing leaves your phone unless you actively choose to send it. This page explains exactly what that means in practice — including the specific occasions when something does travel, and where it goes.

What we collect

Nothing automatically. Notata contains no analytics, no crash reporting, no advertising SDK, and no tracking of any kind — there is no background telemetry to switch off, because none was ever built. We cannot see your moments, your photos, or your location history.

Three optional features do involve data leaving your phone, each one only when you trigger it: sharing a moment with someone in your Trusted Circle, generating a Trip Story, and sending a feedback email. Each is described in full below. If you use none of them, nothing you record ever reaches us or anyone else.

Where your data lives

Everything you record in Notata — moments, photos, notes, trips, people, ratings, your home location — is stored in a local database on your iPhone. There is no cloud sync and no copy of your journal on our side. It is never uploaded or transmitted in the background.

Network requests the app makes

A few features fetch public information at the moment you use them. These requests include coordinates but carry no account, name, or identifier that ties them to you:

• Weather — when you mark a moment, current conditions are fetched for that location.
• Address lookup — coordinates are turned into a street address, and place-name search is powered by OpenStreetMap.
• Nearby places — Wikipedia is queried for articles near the marked location, if you have that feature enabled.

These lookups happen only when triggered by your actions, and the responses are stored on your device with the moment they belong to.

Accounts and sharing

Notata does not require an account. You only need one if you want to share moments with another Notata user — the Trusted Circle. If you never use sharing, no account is created and nothing in this section applies to you.

You sign in with Sign in with Apple or with a link sent to your email address. When you have an account, our server holds your email address (or the private relay address Apple supplies), a display name you choose, and the list of people you have connected with. It does not hold your journal.

When you share a moment, Notata makes a snapshot of that one moment — its photos, place name, date, weather, and note — and uploads it so the person you chose can receive it. Photos are downscaled and stripped of their EXIF metadata before upload. Only the people you shared it with can read it. To let them know it arrived, a push notification is sent via Apple’s notification service, which requires storing a device token.

To be precise about the limits: shared moments are protected in transit and at rest by our hosting provider, but they are not yet end-to-end encrypted, which means we hold the technical ability to access them. We do not, and end-to-end encryption for shares is planned. Revoking a share removes the recipient’s access to it; if they had already imported it into their own moments, that copy is theirs and cannot be recalled.

Accounts, connections, and shared moments are stored using Supabase, which hosts our database and file storage. You can delete your account and everything you have shared at any time from Settings → Account.

Trip Story

Trip Story is an optional feature that writes a short narrative of a trip you have already logged. Before the first one is generated, a consent screen states exactly what will be sent. Generating a story sends that trip’s notes, place names, dates, weather, and nearby landmark names to Anthropic, the makers of Claude. Your photos are never sent. The finished story is cached on your device, and nothing is retained off your phone by us.

While the feature is in beta, these requests go directly from your phone to Anthropic using an API key you supply once, held in your device’s keychain and excluded from backups. Those requests are governed by Anthropic’s own privacy terms. A hosted version that removes the need for your own key is in progress, and this page will be updated before it ships.

Subscriptions

Notata is a paid app. Payment is handled entirely by Apple through the App Store — we never see your card details. RevenueCat processes your App Store receipt to tell the app whether your subscription is active; it receives an anonymous identifier and your purchase history for Notata, and nothing from your journal.

Permissions

Notata asks for access to your location (to mark where you are), your photo library (to attach photos and find trips, if you choose), your camera (to take photos in the app), health data (to record daily step counts, if enabled), and — only if you use sharing — notifications, so you can be told when a moment arrives. Each permission is used solely for the feature it powers, and the app works if you decline any of them.

Backups and exports

You can export your entire history as a single file at any time. That file is created on your device and handed to you — where it goes next is your choice alone. If you use iCloud backup for your phone, your Notata data is included in your own iCloud backup under Apple’s protections; we have no access to it. Notata also copies photos it holds internally into your own iCloud container so they survive moving to a new phone — your iCloud account, not our servers.

Support email

If you choose to email support@getnotata.com, we receive whatever you decide to send — that’s the only way information ever passes from you to us, and it never happens automatically.

Changes

If a future feature ever changes any of the above, this page will describe it plainly before you can turn it on, and anything that sends data off your phone will always be opt-in and stated on screen at the moment you choose it.

Contact

Questions? support@getnotata.com