Privacy Policy

Last updated: March 31, 2026

1. Who We Are

Kunote ("the Service", "we", "us", "our") is operated by Andras Sebo, an individual acting as the data controller for all personal data processed through kunote.app. You can reach us at info@kunote.app.

2. Data We Collect

2.1 Account Data

When you create an account or sign in, we collect your email address. When you sign in with Google or GitHub, we also receive your display name and profile picture from those providers. This is the only data we receive from Google or GitHub — we do not request access to your contacts, calendar, files, or any other data.

2.2 Content Data

We store the content you create: text notes and their metadata (title, creation date, last modified date, tags), photos you upload, and sketches you draw.

2.3 Technical Data

We collect error reports through Sentry when something goes wrong in the app. These reports include your browser type, operating system, an anonymised user identifier, and a technical stack trace. We collect anonymised page-view analytics through Umami — this system does not use cookies and does not track you across sites. We also collect aggregated page performance metrics through Vercel Speed Insights.

3. How We Use Your Data

We use your account data to authenticate you and operate your account. We use your content data exclusively to provide the note-taking service to you — to store, sync, and display your notes, photos, and sketches. We use technical data to diagnose and fix bugs and to improve the performance of the service. We do not use your data to serve advertising or for any marketing profiling. We do not sell your data.

The legal basis under GDPR for processing your account and content data is the performance of a contract with you (Article 6(1)(b) GDPR). The legal basis for processing technical diagnostic and analytics data is our legitimate interest in maintaining a working, improving service (Article 6(1)(f) GDPR).

4. Google and GitHub OAuth — Limited Use

When you sign in with Google or GitHub, we receive only your email address, display name, and profile picture. This information is used solely to create and identify your Kunote account. It is not shared with third parties and is never used for advertising purposes.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can review that policy at developers.google.com/terms/api-services-user-data-policy.

5. Third-Party Processors

Supabase stores your account data, content, and files in the European Union (Frankfurt, Germany). Google and GitHub handle OAuth authentication when you choose to sign in through those providers. Sentry processes error reports for bug diagnostics and is based in the United States — data is transferred under Standard Contractual Clauses (SCCs) as required by GDPR Chapter V. Umami provides privacy-friendly, cookie-free analytics. Vercel hosts the application and collects aggregated performance metrics.

All processors have signed data processing agreements with us or operate under their own GDPR-compliant frameworks.

6. Data Retention

Your data is retained for as long as your account is active. When you delete your account, all associated data — including notes, photos, sketches, tags, and account information — is permanently and immediately deleted from our systems. Deletion is irreversible; no restoration is possible after your account is deleted.

7. Your Rights

If you are in the European Economic Area, you have the right to access the personal data we hold about you, to correct inaccurate data, to request erasure of your data, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent where processing is based on consent.

You can delete your account and all its data directly from within the app at any time. For any other rights request, contact us at info@kunote.app and we will respond within 30 days.

You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence.

8. Cookies

Kunote does not use advertising or tracking cookies. A single session cookie is used strictly for keeping you signed in. Umami analytics operate without any cookies.

9. Children's Privacy

Kunote is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided data to us, please contact us at info@kunote.app and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. If changes are material, we will notify you through the app. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your rights, contact:

Andras Sebo Email: info@kunote.app Website: kunote.app