Privacy Policy

Effective date: November 5, 2026

1. Information We Collect

• Email address — used to create and authenticate your account.
• Handwriting stroke data — the handwritten content of your notes and comments, stored as stroke data along with the images rendered from it.
• Device tokens — push notification tokens so we can deliver notifications you've enabled.
• Profile information — your handle, display name, avatar, bio, and handwritten signature.
• Usage analytics — the steps you complete while setting up your account; the notes you share (which note, the format you picked, and the app you shared it to); and whether you turn on a writing reminder or invite a friend. The reminder's days and time stay on your device, and we don't record who you invite or with which app.

To help keep the community safe, we may process the text content of your handwriting (using on-device handwriting recognition) for moderation. Any extracted text is stored for that purpose and for Discover (below), and is never shown to other users.

To choose what Discover shows you, we keep a list of words, each with a weight, from the recognized handwriting of notes you like, comment on, open, or spend time on in your feed. We keep your top 200.

2. How We Use Your Information

• Provide the service — publish your notes, render your handwriting, build your feed, and operate core features.
• Send notifications — deliver the push and in-app notifications you've turned on.
• Moderate content — review reports, screen content, and enforce our Terms of Service and Community Guidelines.

3. Third-Party Services

We rely on a small number of trusted providers to run NotTyped:

• Supabase — database, authentication, and storage. Data is hosted in the United States.
• Apple — Sign in with Apple (authentication) and the Apple Push Notification service (APNs) for notifications.
• Google — Sign in with Google (authentication), for people who choose "Continue with Google." Google processes your sign-in under its own privacy policy.
• Sentry — crash and performance diagnostics that help us find and fix bugs. Sentry receives error and device/app state data; it is not linked to your identity.

We do not sell your personal data.

4. Data Retention

We keep your information for as long as your account is active. When you delete your account, your data is removed as described below.

5. Account Deletion

You can delete your account at any time from Settings → Account Actions → Delete account in the app. When you do, your data is removed within 30 days, with one exception: if one of your notes or comments went through moderation review, we keep that moderation record, including a copy of the handwriting and its recognized text, with your name and account removed. We keep it so moderation decisions can be checked later, and so deleting an account can't erase evidence of abuse.

6. Children's Privacy

NotTyped is not directed to children, and we do not knowingly collect personal information from children under 13, in accordance with the Children's Online Privacy Protection Act (COPPA). An age gate blocks users below the minimum age from creating an account. If you believe a child has provided us with personal information, contact us at support@nottyped.com and we will delete it.

7. Your Rights

EU / EEA users (GDPR)

If you are in the European Union or European Economic Area, you have the right to access the personal data we hold about you, to request its deletion, and to receive a portable copy of your data.

California users (CCPA)

If you are a California resident, you have the right to know what personal information we collect about you and the right to request its deletion. We do not sell your personal data.

To exercise any of these rights, email us at support@nottyped.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app.