Privacy notice

This page is a product-development placeholder and is not final legal advice.

Google and Supabase provide account authentication and process the identity, profile, session, IP, user-agent, and request information required to operate that flow. Vercel serves the application and can process ordinary request metadata.

Protected notes, documents, tasks, media names, album names, and media bytes are encrypted in the browser before local persistence or cloud synchronization. Supabase stores ciphertext together with operational metadata such as identifiers, object types, versions, timestamps, sizes, relationships, share state, storage paths, usage, and quota.

The current site does not intentionally sell personal data or include advertising or behavioral-analytics scripts. Provider logs, backups, retention, account deletion, subprocessors, and user rights still require a reviewed production policy.

Encryption does not hide all metadata and does not protect an unlocked browser from malicious delivered code, extensions, or a compromised device. Read the current Security Model for the exact boundary and unaudited status.