Privacy Policy

Effective date: June 20, 2026

1. Information We Collect

• Email address — used to create and authenticate your account.
• Handwriting stroke data — the handwritten content of your notes and comments, stored as stroke data along with the images rendered from it.
• Device tokens — push notification tokens so we can deliver notifications you've enabled.
• Profile information — your handle, display name, avatar, bio, and handwritten signature.
• Usage analytics — product-usage events such as app sessions, notes viewed, and onboarding events.

To help keep the community safe, we may process the text content of your handwriting (using on-device handwriting recognition) for moderation. Any extracted text is stored for that purpose and is never shown to other users.

2. How We Use Your Information

• Provide the service — publish your notes, render your handwriting, build your feed, and operate core features.
• Send notifications — deliver the push and in-app notifications you've turned on.
• Moderate content — review reports, screen content, and enforce our Terms of Service and Community Guidelines.

3. Third-Party Services

We rely on a small number of trusted providers to run NotTyped:

• Supabase — database, authentication, and storage. Data is hosted in the United States.
• Apple — Sign in with Apple (authentication) and the Apple Push Notification service (APNs) for notifications.

We do not sell your personal data.

4. Data Retention

We keep your information for as long as your account is active. When you delete your account, your data is removed as described below.

5. Account Deletion

You can delete your account at any time from Settings → Account Actions → Delete account in the app. When you do, all of your data is removed within 30 days.

6. Children's Privacy

NotTyped is not directed to children, and we do not knowingly collect personal information from children under 13, in accordance with the Children's Online Privacy Protection Act (COPPA). An age gate blocks users below the minimum age from creating an account. If you believe a child has provided us with personal information, contact us at support@nottyped.app and we will delete it.

7. Your Rights

EU / EEA users (GDPR)

If you are in the European Union or European Economic Area, you have the right to access the personal data we hold about you, to request its deletion, and to receive a portable copy of your data.

California users (CCPA)

If you are a California resident, you have the right to know what personal information we collect about you and the right to request its deletion. We do not sell your personal data.

To exercise any of these rights, email us at support@nottyped.app.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app.