Privacy policy

Who runs NoteCal

NoteCal is an independent notes and tasks app operated by Charlie. For privacy questions or requests, contact Charlie through imcharlie.co.

What we collect and why

When you sign in, our authentication provider, Auth0, supplies an account identifier, your email address, and, when available, your name and profile picture. We use this information to identify your account, display your profile, and keep your notes associated with you.

We store the notes, tasks, dates, images, and other content you choose to add, along with save timestamps and earlier versions. This lets you save your work, open it across devices, and recover earlier versions.

Our hosting and authentication providers may process technical information such as IP addresses, browser details, request timestamps, and error information to deliver, secure, and troubleshoot the service.

Google sign-in

If you choose Google sign-in, NoteCal requests only basic identity information: your name, email address, profile picture, and the identifier needed to sign you in. We do not request access to your Gmail, Google Calendar, or Google Drive.

Google account information is used for sign-in and your account profile. We do not sell it, use it for advertising, or use it to train AI models. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Where your data is stored

NoteCal is hosted on Vercel, uses Auth0 for authentication, and stores account records and saved notes in a Neon PostgreSQL database. These providers process data needed to run their services. The application and database are hosted in the United States, and providers may process data in other countries.

Notes are associated with your account and require sign-in to access through the app. They are not end-to-end encrypted. Hosting and database administrators can access stored data where needed to operate the service.

Google also serves web fonts and, when applicable, your profile picture. Loading these resources can share network information, such as your IP address, with Google.

Cookies and browser recovery copies

Sign-in uses cookies to keep your session secure. Your browser also stores appearance preferences and recovery copies of notes, including unsaved changes. These copies help you recover work if a save is interrupted.

Signing out does not necessarily remove browser recovery copies. On a shared device, clear NoteCal’s site data in your browser after use. Clearing site data removes local recovery copies and preferences; it does not delete notes already saved to your account.

NoteCal uses Vercel Web Analytics for visits and PostHog for product use, including adding entries, completing tasks, searching, and saving or recovery outcomes. Vercel analytics does not use analytics cookies. PostHog uses a first-party cookie and browser storage with a randomly generated browser identifier to connect visits across NoteCal’s landing page and app and understand repeat use. The cookie expires after 90 days and is refreshed during use; browser storage remains until cleared. This identifier is not linked to your sign-in account.

We send action categories and outcomes, without note content, search terms, account identifiers, email addresses, images, or filenames. We remove query strings and URL fragments from analytics page URLs. PostHog session recordings and automatic click collection are disabled, and its analytics respects your browser’s Do Not Track setting. These providers receive network requests and may process data in the United States. NoteCal does not include advertising trackers.

Sharing and use of your notes

We use your content to provide NoteCal’s saving, editing, and recovery features. We do not sell your notes or use them for targeted advertising. Data may be processed by the service providers described above, or disclosed when necessary to comply with a legal obligation or protect the service and its users.

Keeping, exporting, and deleting data

You can edit or remove content in the app and download a notes export. Removing a note or task from the calendar can leave earlier versions in saved note history and browser recovery copies. There is currently no automatic expiry for saved note history.

To request deletion of your account and its stored notes and history, or ask for access to your account data, contact Charlie through imcharlie.co. We may ask you to verify that the account is yours. Account deletion is handled by request rather than an in-app button. Browser copies must also be cleared on each device, and provider backups or security records may remain for their applicable retention periods.

Changes to this policy

We will update this page when NoteCal’s data practices change and revise the date above. Contact us if you have questions about a change or how your data is handled.