Privacy Policy — MyNotesHelper

1. The short version

Your notes live on your devices and in your own cloud storage. Our server carries them between your devices, sealed, and deletes them once collected.
There are exceptions: the AI features; reminder titles sent by text or email; details about a note, such as its dates, and the default tags you choose for each way in; and a few others. Every one is listed below, in plain words.
We do not sell your data, show ads, use third-party analytics, track you across websites, or train AI models on your notes. We count how the service is used, from our own records, as totals.

2. Who we are

MyNotesHelper is provided by Logos Legacy Venture, LLC, a Missouri limited liability company, 1200 Lake St Louis Blvd #1056, Lake St Louis, MO 63367, United States. Contact: mail@logoslegacy.com.

We decide how your personal data is used, and we are responsible for it.

3. What we hold, why, and for how long

What	Why	Kept
Your account: the identifier, name, email and picture your sign-in provider gives us; when you joined and last visited; your public key and your key locked with your recovery phrase; your time zone and settings	To run your account	Until you delete the account
AI-feature consent: which version of the AI explanation you accepted or rejected, and when you accepted, rejected or switched off	To show what you agreed to	While the account exists. If you had switched AI on and then delete your account, we keep a minimal record for 3 years from the deletion, only to defend a legal claim: a scrambled account reference, which cannot be read back into your account id and which only we can match to you if a claim is made, the version you accepted, and when you accepted, switched off and deleted. No name, no email. Then it is deleted. If you never switched AI on, nothing is kept
Sessions	To keep you signed in	Up to 30 days, ending sooner if the session is not used for 14 days, or when you sign out
Notes and attachments waiting for your devices	To carry them to your devices, including notes sent by text, WhatsApp, email or your own scripts	Deleted as soon as your device collects them, and in any case after 30 days. An attachment is deleted together with its note. Up to 200 items or 500 MB can wait for you; beyond that, new items are refused until a device collects
Your hosted vault (only for accounts we have set up to sync through our server)	Sync	Until you delete the account
Phone numbers and email addresses you link	So messages you send from them reach your account	Until you unlink them or delete the account
Reminder schedule: note id, time and channels. For text, WhatsApp or email reminders, also the note's title and where to send it	To deliver the reminder	Until sent, then 30 days
Note details and default tags: the default tags you chose for each way in; and, for notes waiting for your devices, their category, their dates (created, due and reminder times), how the note arrived, whether it is pinned, a checklist or done, and an attachment's file type and size. A note's words, its #tags and sub-tags, its checklist items and attachment names are sealed. When a note arrives by text, WhatsApp or email, we read its #tags once, to file it, and then seal them with its words. The other details are not sealed, and we can read them	To file incoming notes and carry them to your devices	Until changed, or until the note is collected
Operational records: push addresses (at most 8 devices); a scrambled fingerprint of each API key (never the key); short-lived rate and AI-usage counters; a diagnostics log with shortened numbers and addresses and error details; Paddle payment event references	Pushes, API keys, abuse prevention, fixing faults, avoiding double payments	Push addresses and API keys until removed; counters about a day; the diagnostics log keeps only recent entries; payment references 14 days
Usage counts: the date your account first received a note from outside the app, how many notes arrived by each way in, and your answer to "How did you hear about us?" if you chose to give one	To see which features and ways in work. We look at totals, not at you, and never use these to target or price anything for a person	Until you delete the account. Weekly totals are kept, with no identity
Sign-up location check: when you create an account, your IP address is checked against a list of countries under US sanctions	To comply with US sanctions law	Not stored: the check happens once, at sign-up
Messages we could not accept (for example, when credits have run out): the sender's number or address, partly hidden, and the reason. If the sender is linked to your account, up to the first 500 characters of the message are kept sealed to your key, so we cannot read them; otherwise none of the text is kept	So we can tell you what happened if you ask, and to spot abuse	30 days
Credits, plan and payment history (what was bought, never card details)	To provide what you paid for	Until you delete the account
Link addresses in your notes	Our server fetches the page to show a preview	Not logged. Previews are cached on your device for 7 days
Technical logs: IP address and browser details in our host's logs; error logs that may contain your account identifier	Running the service securely	Our host's standard retention, typically days to weeks

We never hold your recovery phrase, and we cannot read notes that are sealed to your key.

4. When your words are readable by someone other than you

Sealed means we hold ciphertext and have no key. These are the cases where something is not sealed:

The AI features (the assistant, summaries and reading a photo). Reminder phrases you type are read on your device, and are not sent.
- When you use an AI feature, the notes, page text or image involved go through our server to OpenAI (United States), in readable form. When you ask the assistant, each note it sends carries its tags. For a summary or a photo, the note's tags reach our server only to be checked against the list below, and go no further. The app sends only the notes a question needs. A request that needs none sends the question alone. A question about everything can send most or all of your library. While answering, the AI may ask the app for more of your notes.
- You can list tags whose notes are never sent to AI. Every AI request carries that list, and our server refuses one that includes a listed tag. We do not keep the list: it is stored only in your own settings, sealed.
- Our server keeps none of the content. If a request fails, it records the error, not your notes. OpenAI does not use the content to train models, and keeps it for up to 30 days to detect abuse.
- The assistant can act on your notes when you ask: for example, create, edit, tag, pin, trash, set due dates, add calendar entries or set reminders. Each change comes with an Undo, and the assistant never deletes anything for good.
- AI answers can be wrong.
- They are off until you accept a short explanation. You can reject it, and you can switch them off at any time in Settings; if you reject or switch them off, the AI features are not shown. If the explanation changes, you are asked again before anything is sent.
Notes you send by text, WhatsApp or email, or from your own script or the API. Your carrier, Twilio, Meta (for WhatsApp) and the mail providers carry messages readable before they reach us. A script or the API sends over an encrypted connection, but our server receives the words readable. We seal them all on arrival.
Reminder titles for text, WhatsApp or email reminders. Push notifications and the in-app bell carry no text.
Note details (section 3): a note's words and tags are sealed, but not its dates and the other details around it, nor the default tags you choose for each way in.
Your backups.
- Your backup in your own Google Drive or OneDrive, and a backup file you download, are sealed to your account: only your devices, or your twelve words, can open them.
- If you choose readable backups in Settings, new backups hold your notes as plain text, and anyone who can open that cloud account or file can read them. Export a readable copy writes such a file whenever you ask.
- Every backup carries your key, locked by your twelve words. A backup file made before backups were sealed carries it unlocked: keep any such file somewhere only you can reach, or delete it.
Notes that cannot be sealed. If a note arrives before your account has a key, or sealing fails on our server, we refuse it, and we never store it unsealed. A note sent by your own script or the API is refused with a message saying why. A note sent by text, WhatsApp or email is not delivered, and today you are not told, so open the app once after signing up, before sending notes in that way.
Link previews.
- Our server receives the link and fetches the page, so the site normally sees our server, not you.
- If our server cannot reach the page, your device may fetch it directly, as an ordinary visit would, sending any cookies your browser holds for that site. The site can then see your device's address and know you are signed in there.

5. Who else receives data

Bluehost (hosting, United States);
OpenAI (AI features);
Twilio and Meta (text and WhatsApp);
our mail host (email capture and email reminders);
Paddle, our reseller and merchant of record. Paddle takes your payment details under its own privacy notice; we never see your card;
Google and Microsoft (sign-in, under their own terms). Your backup goes to your own Google Drive or OneDrive, written by your device;
your browser's push service (Google, Mozilla or Apple, depending on your browser). It learns that we woke your device, and when. It does not learn what for. The message we send is empty, and your device works out what is due from its own notes, so a device that has not synced may wake and find nothing to say;
Google Fonts (typefaces; sees your IP address);
DB-IP, whose free country database we use for that check. We send DB-IP nothing: the lookup is local. IP Geolocation by DB-IP.
jsDelivr and Hugging Face, only if you switch on meaning-based search.

We do not sell or share personal data for advertising. We disclose data only if the law requires it, and we cannot disclose what is sealed.

6. Where your data is processed

We are based in the United States, and our server and most of our providers are there. Your data is processed in the United States.

7. Your rights

Wherever you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to our use of it, or to receive it in a portable form. Your full library is already in your backup, which your devices or your twelve words can open.

Delete your account: in the app, under Settings → Delete account. When you do, everything held on the server for your account is deleted: your account, notes and attachments waiting for your devices, linked phone numbers and email addresses (and any linking code in progress), reminders, API keys, push addresses, sessions on every device, hosted vault, refused messages, and usage counters. Section 8 lists what it cannot reach.
Anything else: email mail@logoslegacy.com. We reply within one month.
Complaints: tell us first, and we will try to put it right. You may also contact the consumer or data-protection authority where you live.
Where the law of your country gives you further rights, we honour them.

We make no decisions about you by automated means that have legal or similarly significant effects.

8. What deleting your account does not remove

The copy on your devices, until you sign out or uninstall.
Your own cloud backup.
Paddle's sale records.
Our providers' short-lived logs, including OpenAI's 30-day abuse logs.
The minimal AI-consent record, for 3 years, if you had switched AI on (section 3).

9. Cookies and storage on your device

Cookies: two, both ours. mnh_session keeps you signed in. mnh_signin exists only while you sign in, for at most 15 minutes, to make sure the sign-in that finishes is the one you started. Scripts cannot read either.
Browser storage: the app keeps your library, the key that unlocks it, your settings, link previews and a short diagnostics log in your browser's storage on that device. They are not encrypted there, so anyone who can use that browser profile can read them. Sign out on a device you share.
Third-party cookies: Google, Microsoft and Paddle may set their own when you sign in, back up or pay.
There is no advertising or analytics cookie.

10. Children

MyNotesHelper is not for anyone under 16.

11. Security

Connections use HTTPS, and notes are sealed as described above.
No service is perfectly secure, and ours is a small service on shared hosting.
To report a security problem, or a sign that someone else is using your account, email mail@logoslegacy.com with "Security" in the subject. Tell us what you saw and when. Do not send your notes, anyone else's data or any password, and do not try to reach data that is not yours to show the problem.
If a breach affects your data and puts you at risk, we will tell you, and the authorities where the law requires it.

12. Changes

We change the version and date when this policy changes. A change that meaningfully affects what we collect, or who receives it, is announced before it takes effect, in the app or by email to the address you sign in with.

If a change affects the AI features, you are asked to accept again before they send anything.

13. Contact

mail@logoslegacy.com · Logos Legacy Venture, LLC, 1200 Lake St Louis Blvd #1056, Lake St Louis, MO 63367, United States.