Notiverse Privacy Policy
Last updated:
Notiverse (“the app”, “we”) is a notes, tasks and files workspace published by Yasir Hamdan Alghamdi, trading as Yasir Dev Studio, Riyadh, Saudi Arabia. Yasir Dev Studio is the data controller. This policy explains exactly what the app collects, where it is stored, who it is shared with, and how to delete it.
1. Data we collect
| Category | What it is | Why |
|---|---|---|
| Account | Email address, display name, profile photo, and the sign-in provider you chose (email/password, Google, or Apple). Held by our authentication provider. | To create your account and sync it across devices. |
| Your content | Notes, tasks, reminders, tags, folders, drawings, PDFs and their annotations, images, video and audio recordings you add. | This is the product. Stored on your device always; in the cloud only with cloud sync, which is part of the paid plans. |
| Registered devices | A standing list of the devices signed in to your account — a per-install identifier, device name and model, operating system and app version, when the device claimed a sync slot, and when it was last active. | To enforce the device limit on your plan, and to let you see and remove your own devices in Settings → Devices. A device you stop using releases its slot after 30 days. |
| Push notification token | A push messaging token issued per device by the platform's notification service. | To deliver reminders, and to tell your other devices that something changed so they can sync. It is deleted when you sign out on that device. |
| Purchases | Subscription status (Free / Pro / Ultra), AI credit balance and purchase history. Handled by the app store you bought from and by our subscription management provider. | To unlock what you paid for. We never see your card details. |
| Diagnostics | Crash reports and stack traces, with file paths, web addresses and anything quoted removed on your device before they are sent; how long key screens and actions take; usage statistics — which features and screens are used, never what you write in them. Usage statistics are tied to an app-instance identifier, not to your account. | To find and fix crashes, keep the app fast, and understand which features are used. Collected only as your region and your choices in Settings → Help → Privacy choices allow (section 5). |
| Device & technical | Device model, OS version, app version, language, an app-instance identifier, and IP address as seen by our servers. | Compatibility, abuse prevention and app integrity attestation. |
| Support correspondence | The emails you send us, your address, and our replies. | To answer you, and to keep a record of what was asked and decided. Kept for 24 months, then deleted. |
| Problem reports | What you write when you use Report a problem, a screenshot if you attach one, the app version and device, and — only if you leave Include diagnostics on — the list of screens you opened recently. | To investigate the problem you reported. Kept 12 months, then deleted automatically (section 10). |
We do not collect an advertising identifier. The app ships no ad SDK, serves no ads, and the Advertising ID permission is explicitly removed from the Android build.
2. Device permissions
Each is requested only when you first use the feature that needs it, and each can be refused — the app stays usable without any of them.
- Camera — to take a photo for a note, scan a QR code, or capture an image for text extraction.
- Microphone — to record an audio note or to dictate text.
- Notifications & alarms — to deliver reminders at the time you set.
- Biometrics — to unlock the app. Your fingerprint or face never leaves your device and is never seen by us; the OS only tells the app yes or no.
- Attaching photos, video and audio — this asks for no permission at all on a current device. Attaching goes through the operating system's own file and photo picker, which hands the app only the one file you chose. The app does not hold the granular media-read permissions on Android — they are stripped from the build on purpose — and it never requests read access to your photo library on iOS. We see only the files you pick. The app cannot, and does not, browse, enumerate or scan your library.
- Saving a file back to your gallery — this is the one that asks. On iOS it is the add-only photo permission, which permits writing to your library and not reading it. On Android 9 and older it is the legacy storage permission; on Android 10 and newer no permission is needed.
3. Where your data is stored
Your data is processed and stored on infrastructure located in Saudi Arabia and in other countries, including in Europe. We select regions for reliability and performance and may change them; the safeguards described in section 4, Crossing a border, apply wherever your data is processed.
Broadly: your notes, tasks and their metadata, the files you upload, and the backend processing that serves them are hosted in the Gulf region. Live collaboration — presence, cursors, and the note content being edited during a session — is carried on infrastructure in Europe for the life of the session. Section 4 sets out every case in which data leaves the region, and the legal basis for it.
An account is required on every plan, including Free — so your account record (section 1, first row) always exists in the cloud. Your content is a separate matter. On the Free plan, your notes, tasks and files stay on your device and are never uploaded to our cloud: cloud sync is part of the paid plans, not a setting a Free account can turn on. The only exceptions, on every plan, are the two AI cases in section 6 — a photo or recording you send to an AI feature, which is uploaded briefly so it can be processed, and the images and audio you create with AI, which are kept in your account's library. (If you had a paid plan before, the cloud copy it made is kept for a limited time — see section 10.)
Cloud backup is not cloud sync. The app's cloud backup feature saves a backup copy of your notes to a cloud storage account of your own, which you connect yourself — not to our cloud. That copy is held by the provider of your storage account, under its own terms; we do not receive it, and you manage or delete it in that account.
4. Crossing a border
Six things leave the Gulf region, and only these six:
- Live collaboration. While two or more people have the same shared note open, that note is edited through a server in Europe: your display name, your live cursor position, and the content of the note itself pass through it, so everyone sees the same text as it is typed. The note's permanent home stays in the Gulf region — the European infrastructure holds only the live session, which is written back and cleared when it ends. This happens automatically when you collaborate on a shared note; if you would rather your content did not leave the Gulf, do not share the note.
- AI features. Only what you submit — and, for Ask Notiverse, your notes and tasks — only when you invoke one. See section 6.
- Purchases. Our subscription management provider holds your subscription state outside the region.
- Account deletion. One backend step that erases your data when your account is deleted runs outside the region. It reads and deletes; it never copies your content anywhere, and it exists only to make deletion complete.
- Diagnostics and usage statistics. Crash reports, performance timings and usage statistics (section 1) are processed in the United States. They never contain your notes, tasks or files. In some regions they are collected only if you allow them; everywhere, you can turn them off in Settings → Help → Privacy choices (section 5).
- Sign-in, notifications and app services. Signing in, delivering push notifications, app-integrity checks and the app's remote configuration run on our cloud provider's global infrastructure, so where they are processed is not limited to the Gulf region.
- Saudi Arabia. Transfers outside the Kingdom are made under Article 29 of the Personal Data Protection Law, which permits a transfer that is necessary to perform a contract to which you are a party, or to which you have consented, provided it does not prejudice national security or Saudi Arabia's vital interests, and provided the level of protection is adequate. We limit each transfer to what the feature actually needs.
- EU and UK. Transfers to the United States rely on the EU–US Data Privacy Framework and its UK extension, under which our provider is certified, with the Standard Contractual Clauses in the data processing terms we accept as a fallback. Other transfers rely on those Standard Contractual Clauses, together with the safeguards they require.
5. Why we are allowed to use your data
Under the GDPR every use of personal data needs a legal basis. Under the Saudi PDPL the equivalent grounds apply. Here is ours, feature by feature:
| Basis | What it covers |
|---|---|
| Contract GDPR Art. 6(1)(b) |
Creating and running your account · cloud sync of your notes and files · sharing a note with people you invite · subscriptions, AI credit balances and purchase restoration · sending you service messages. |
| Consent GDPR Art. 6(1)(a) |
Sending your text, images or audio — and, for Ask Notiverse, your notes and tasks (section 6) — to an AI provider · camera, microphone and notification permissions · sending a problem report, with a screenshot or diagnostics if you choose. Each is off until you turn it on, and each can be turned back off. Live collaboration is not listed here: it is part of sharing a note, which runs on the contract basis above, and the transfer it involves is described in section 4. |
| Legitimate interests GDPR Art. 6(1)(f) |
Preventing abuse, fraud and quota circumvention · reviewing reports of abusive content · app integrity attestation · keeping the service secure and working. We have weighed these against your interests and use the least data that does the job. |
| Legal obligation GDPR Art. 6(1)(c) |
Keeping purchase and tax records, and responding to lawful requests. |
Diagnostics and usage statistics rest on a basis that depends on where you are:
| Where you are | Basis |
|---|---|
| The European Economic Area, the United Kingdom, Switzerland, Turkey, Canada, India and South Korea | Consent (GDPR Art. 6(1)(a) and the local equivalents). Nothing is collected until you allow it on the one-time privacy screen; both purposes start switched off. |
| Saudi Arabia | Legitimate interests under the Implementing Regulations of the Personal Data Protection Law — keeping the app working and improving it — weighed against your interests. |
| Everywhere else | Legitimate interests, or notice where local law asks only for notice. |
Wherever you are, Settings → Help → Privacy choices has two switches — Share usage analytics and Send crash reports — and turning either off stops that collection from that moment. Turning off crash reports also discards any report not yet sent. None of this is ever used for advertising, and the app uses no advertising identifier.
You can withdraw consent at any time — turn the feature off in the app, or revoke the permission in your device settings. Withdrawing consent stops the processing from that point on; it does not undo what was lawfully done before, and it does not affect anything resting on a different basis. Nothing you refuse locks you out of the app.
6. AI features
AI features are optional and run only when you invoke them. When you do, the specific text, image or audio for that request is sent to the relevant provider through our servers. The features that do this are summaries, grammar and structure help, Ask Notiverse, text extraction from images, text-to-speech, audio transcription and dictation.
Our AI providers are in the United States and Europe, so using an AI feature transfers that request outside your region. Each request carries only what it needs — with one exception, Ask Notiverse, which works from all of your notes and tasks (below). We never send your account credentials. We use paid API tiers whose terms do not permit the provider to train models on the inputs we send. If you never use an AI feature, nothing is ever sent to them.
Ask Notiverse and your notes. To answer questions about your notes, Ask Notiverse builds a search index of all your notes and tasks. To build it, the app sends their text, in short passages, to one of our AI service providers, which turns each passage into a list of numbers that describes its meaning; the index itself is kept on your device. This happens only after you turn on AI features, and only when you open or use Ask Notiverse; after that, only new or changed passages are sent. Turning AI features off in Settings → Help → Privacy choices stops it, and nothing more is sent from that moment.
Photos and recordings you send, and what you create. When you send a photo to text extraction, or a recording to transcription or dictation, the file is uploaded to our cloud so it can be processed. On a plan without cloud storage, it is uploaded for that purpose only and deleted automatically, normally within two days. Images and audio you create with AI are different: they are saved to your account's AI Library in our cloud on every plan, including Free, so you can use them again, and they stay there until you delete them or your account.
No automated decisions are made about you. AI features generate text, audio and suggestions for you to read and act on. They do not make decisions that produce legal effects concerning you or similarly significantly affect you, within the meaning of Article 22 of the GDPR. Nothing in the app profiles you or scores you.
7. Who else receives data
We share data only with processors that run the service. We do not sell data, and we do not share it for advertising.
| Category | What they receive |
|---|---|
| Cloud infrastructure and hosting | Account data; your content only with cloud sync on a paid plan; and your AI creations, plus the photos and recordings you send to an AI feature while they are processed (section 6) |
| Subscription and purchase management | Account identifier, purchase and entitlement events |
| Diagnostics and usage statistics | Crash reports, performance timings and usage statistics (section 1), as your region and Settings → Help → Privacy choices allow. Never your content. Usage statistics are not linked to your account. |
| AI processing | Only the specific content you submit to an AI feature, at the moment you use it — and, for Ask Notiverse, your notes and tasks to build its search index (section 6) |
| App stores | Purchase and refund records, under their own privacy policies. If you ask Apple for a refund: how much of that purchase you used, how long you have had your account, and your total purchases and refunds with us, so Apple can decide the request |
We use paid API tiers whose terms do not permit the provider to train models on the inputs we send.
For the current list of named providers, email privacy@notiverse.net.
People you invite also see part of your account — see section 8. They are not a processor; they are people you chose.
We may also disclose data where we are legally required to, or to protect the rights and safety of our users.
8. Sharing a note — what the other members see
Inviting someone to a note reveals some of your identity to them. Exactly this much:
- Your display name — in the member list, and on activity such as “edited this”.
- Your profile photo, if you set one.
- Your email address — shown to the other members of that note, on the second line of the member list, so people can tell two similar names apart. If you would rather your email were not visible to collaborators, do not join shared notes.
- Your role (owner, editor, viewer) and when you joined.
Invitations are sent by email address, so inviting someone confirms to the sender whether that address already has a Notiverse account. Nothing else about your account — your other notes, your plan, your devices — is ever visible to a collaborator.
Reporting. Any member of a shared note can report it — or specific people in it — to us. We then keep the report (who sent it, the reason and any details they add) and our servers save a copy of the relevant part of the note as it was at that moment: the parts written, edited or deleted by the people reported, with who wrote each one. We use this only to review the report and act on it, which can mean removing content, removing someone from a note or suspending an account, and — where the law requires it — passing it to the authorities. The people reported are never told who reported them, and nothing in the note changes.
9. This website
notiverse.net is a small static site served by our cloud hosting provider.
- Hosting logs. Our hosting provider records the standard web-server details of each request — IP address, user agent, the page requested, and the time. We use them only for security and to keep the site up. Their retention is covered in section 10.
- No analytics, no cookies, no trackers. The site sets no cookies at all. It runs no analytics of any kind, no tag manager, and no advertising pixel. There is no consent banner because there is nothing to consent to.
- What is stored in your browser. Your language choice, in
localStorage, so the page opens in the right language next time. It never leaves your browser, and clearing site data removes it. - The account-deletion page. notiverse.net/delete-account is readable without signing in. To actually delete an account it loads our authentication provider's SDK and asks you to sign in and then confirm your identity again. That sign-in is held for the tab only and is discarded when you close it.
10. How long we keep it
- Your content — until you delete it or delete your account. The cloud copy follows the same rule while you have a paid plan; if the plan ends, see When a paid plan ends below. Deleted items sit in Trash until you empty it or its retention period ends, then are removed.
- Account data — until you delete your account.
- Photos and recordings sent to an AI feature on a plan without cloud storage — deleted automatically, normally within two days (section 6).
- Your AI creations — until you delete them from your AI Library or delete your account.
- Registered devices — a device entry is removed when you sign out on that device or remove it from Settings.
- Usage statistics — up to 14 months.
- Crash reports — 90 days.
- Performance timings — up to 60 days.
- Problem reports — 12 months, then deleted automatically, screenshot included; sooner if you delete your account.
- Support emails — 24 months from the last message in the thread.
- Purchase records — as long as required for tax and accounting.
- Reports of abusive content — the report and the saved copy of the reported content: 12 months, then deleted automatically, unless we need them longer to deal with a legal claim or a request from the authorities.
- Server logs — 30 days. Website request logs and backend function logs both contain your IP address. They are used only for security, abuse prevention and diagnosing faults, and are deleted automatically after 30 days.
When anything is deleted from our cloud storage — by you, by the automatic deletions above, or when a plan's cloud copy is deleted — a copy is kept for up to 7 more days only so that an accidental deletion can be undone. Nobody can read it during that time, and it is then removed for good.
When a paid plan ends
A paid plan ends when it expires, when a cancellation runs out, or when it is refunded. Syncing then stops. The copies on your devices are not touched and keep working. The cloud copy is kept, read-only, for 12 months from the day the plan ended. During that time you can download it to any device signed in to your account (in the app: the Sync page → Download my data), or subscribe again and syncing resumes exactly as it was. Items in your cloud Trash are kept for at least 30 days after the plan ends. People you shared items with keep read-only access for 3 days; the items then lock until you subscribe again.
We tell you in the app at least 90 days before deletion, and again 30 days and 7 days before. When the 12 months are over — or later, if a notice reached you late, because you always get the full notice period — the cloud copy of your notes, tasks, files and attachments, including those you shared with others, is permanently deleted. Your account, your purchases and AI credits, your AI creations and the copies on your devices are not affected. If you subscribe again later, what is on your devices is uploaded again.
Moving to a smaller paid plan while you use more cloud storage than it includes deletes nothing. Everything already uploaded stays, and you can still download it; new uploads pause until you are back under the new plan's limit.
11. Deleting your account
You can delete your account and all associated data from inside the app (Settings → Account), or from the web at notiverse.net/delete-account. This permanently removes your notes, files, tasks and account record from our systems, as well as your problem reports and any screenshots you attached to them, subject to the backup window above. It cannot be undone, and it does not cancel a store subscription — cancel that separately in Google Play or the App Store.
12. Security
Traffic is encrypted with TLS in transit and encrypted at rest by our infrastructure provider. Access is enforced server-side by security rules and by verified sign-in — a client cannot grant itself access to another account's data. Encrypted backups use AES-256-GCM with a key derived from your passphrase; we cannot recover that passphrase, so if you lose it the backup cannot be opened. The optional app lock (PIN or biometric) is enforced on your device.
13. If there is a breach
If personal data is exposed, lost or accessed without authorisation, we will investigate immediately and contain it. Where the law requires it we will notify the Saudi Data & AI Authority (SDAIA), and any other competent supervisory authority, within the period that law sets — 72 hours under the GDPR. Where the breach is likely to cause you serious harm, we will tell you directly, and we will say plainly what happened, what was affected, and what you should do.
14. Children
Notiverse is not directed to children under 13 (or the equivalent minimum age where you live), and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
15. Your rights
Depending on where you live — including under Saudi Arabia's PDPL and the EU/UK GDPR — you may have the right to access, correct, export or erase your data, to object to or restrict processing, to withdraw consent, to data portability, and to complain to your data protection authority. In Saudi Arabia that authority is SDAIA; in the EU or UK it is your national one.
The app gives you export and deletion directly, with no need to ask. For anything else, write to privacy@notiverse.net and we will respond within the period the law requires — 30 days under the PDPL, one month under the GDPR. We may need to verify who you are first, and we will not charge you for a reasonable request.
Where a controller outside the EU or UK offers services to people inside it, the GDPR requires a representative there. We have not appointed one. Until we do, write to the address above — it reaches us directly, and we answer within the periods stated.
16. If you are in the United States
This section is for residents of California and of other US states with comparable privacy laws.
We do not sell your personal information, and we have not sold it in the past 12 months. We do not share it for cross-context behavioural advertising. We serve no advertising at all, we collect no advertising identifier, and we run no ad SDK — so there is nothing to sell and no one to share it with. We do not knowingly sell or share the personal information of anyone under 16.
Under the CCPA/CPRA you may request to know what we collect and why, to have it deleted, to correct it, and to receive a portable copy — and you may not be discriminated against for asking. The categories we collect, the purposes and the recipients are set out in sections 1, 5 and 7 above; we do not use or disclose sensitive personal information beyond what is needed to provide the service.
To exercise any of these rights, or to have an authorised agent do it for you, write to privacy@notiverse.net. You can also delete everything yourself, without asking, at notiverse.net/delete-account.
17. Changes
If this policy changes materially we will update the date above and notify you in the app before the change takes effect.
18. Contact
Yasir Hamdan Alghamdi, trading as Yasir Dev Studio, Riyadh, Saudi Arabia
Privacy questions, data rights requests and privacy complaints:
privacy@notiverse.net
Everything else: support@notiverse.net