Privacy policy
This policy explains how NoteAway collects, uses, stores and shares personal information.
Information we process
We process account details such as your name, email address, sign-in identifier, session information and subscription status. Before account creation, setup answers may be saved on your device so you can resume. If you use Google sign-in, Google provides your account identifier, name, email address, verification status and profile image, where available.
Household content may include responsibilities, contacts, document details, attachments, financial amounts, handover settings and messages you prepare. Optional reminder features process a verified email address, delivery status and scheduling choices. We also process limited security, access and error records needed to operate and protect the service.
How we use information
We use information to provide and secure NoteAway, save and share content as you direct, authenticate users, process subscriptions, send messages you opt into, provide support, prevent abuse, diagnose failures and comply with legal obligations. We do not sell personal information.
Local and cloud storage
On iOS and Android, local household data is encrypted and its key uses platform secure storage. The browser version uses browser-managed storage and should not be treated as equivalent to a native device keychain. Creating an account alone does not upload a local household; you must choose to create a shared cloud copy.
Shared content and attachments are encrypted in private Cloudflare storage with keys managed by NoteAway. Account, access and household metadata is stored separately. This is not end-to-end encryption: authorised service operations can decrypt cloud content when necessary to provide or support the service.
Sharing and service providers
We share information only as needed with providers that help operate NoteAway, including Cloudflare for hosting, storage and email delivery; Google when you choose Google sign-in; and Paddle for checkout, billing, taxes and subscription management. Paddle collects the payment information required for checkout; NoteAway receives transaction, customer and subscription identifiers but not full card details.
We also disclose content to people you invite or nominate, according to the access choices you make. Revoking access blocks future server requests but cannot recall copies already downloaded. We may disclose information where required by law or to protect users and the service.
International processing and retention
Service providers may process information outside your country. We use provider safeguards and contractual protections where applicable. We keep account and cloud content while your account or shared household remains active, and retain limited billing, security, backup and legal records only as long as reasonably needed for those purposes or required by law.
Your choices and rights
You can update content, control sharing and reminders, export encrypted backups, delete cloud households, and close your account in the app. Depending on where you live, you may also have rights to access, correct, delete, restrict or object to processing, or complain to a data-protection authority.
Security and children
We use encryption, access controls, rate limits and other safeguards designed to protect information. No system is completely secure, so keep your device, credentials, recovery code and encrypted backups safe. Paid accounts are intended for adults and NoteAway is not directed to children under 18.
Changes and contact
We may update this policy as the service or legal requirements change. Material changes will be communicated in the app or on this page. For privacy questions, deletion requests or complaints, email noteaway@send.illumi.co.za.