Privacy Policy

monoznote is operated by Changwon Hwang(“we”, “us”). We decide how the personal information described below is handled, and we are responsible for protecting it. You can reach us at hello@monoznote.com.

Account details. You sign in with Google. When you do, Google shares a basic profile with us: your email address, your name, your profile picture, and the identifier Google uses for your account. We store these in Supabase, Inc., together with the dates you signed up and last signed in. We never see or receive your Google password.

Your notes.We store the title and body of every note you write, and the dates you created and last edited it. The body is kept twice: once as you formatted it, so bold, lists, checkboxes, and math look the same when you open the note again, and once as plain text. Recommendations and explanations use only that plain text, which includes the words you wrote and the written form of any math, not the formatting marks or whether a checkbox is ticked. We also store a numerical representation of the plain text (an “embedding”) that makes note recommendations possible. Alongside the embedding we keep a little technical bookkeeping: the name of the model that produced it and a fingerprint of the text it was based on, so we can tell when a note needs to be processed again. If you connect two notes, we store that connection separately from the text: which notes you joined, not a sentence inside either note. Notes you import from a Markdown file are stored the same way as notes you write. Exporting Markdown saves a copy on your device. We do not send that file to anyone else.

Requirements drafts.When you ask us to write a product requirements draft from notes you picked, we store the draft's title and text, when it was created and last edited, and which of your notes it was written from. If you later delete one of those notes, we drop the link to it and do not keep its title. An unnamed record that a note was used stays on the draft.

Explanation use and Pro interest. When a free account asks why a note is related and we are able to answer, we store the time of that request so we can apply a limit. If the request fails, we delete that time. We do not store these times for a Pro account, and we do not show you how many explanations you have left. When a free account asks for a requirements draft and we are able to write it, we store the time of that request the same way, up to two drafts in any 24 hours. We show how many of those two are left. The count looks back 24 hours from now, not to midnight. A failed draft does not count. We do not store these draft times for a Pro account. We record that an account is Pro only when it is; we do not keep a separate record that an account is free. We do not take payment yet. If you press the Pro button, we store that click and the time — and your account, if you are signed in — so we can tell whether people want Pro before payments open.

Visit statistics. We collect anonymous usage data through Vercel Web Analytics on every page of monoznote, including the pages you use after signing in. This may include the pages you view, the site that referred you, your approximate country or region, and your browser or device type. It is aggregated and is not linked to your account or to the content of your notes.

Server logs. Like any website, our hosting and database providers record standard technical logs when your browser or our servers make a request — typically an IP address, a timestamp, and the result of the request. These are used to keep the service running and to investigate errors and abuse, and they are kept only for a short period by those providers.

We do not collect payment details, we do not use advertising or cross-site trackers, and we do not sell or rent your information to anyone.

Account details: to create your account, keep you signed in, and make sure that only you can reach your notes. Our legal basis is the performance of our contract with you: without an account there is nothing to sign in to.

Notes:to store what you write, to show you related notes while you type, and, when you rest on one of those notes, to explain the connection in a sentence or two. We also use the embeddings we already store to place your notes on a meaning map. We do not keep the map's coordinates. When you ask, we write a requirements draft from the notes you picked and keep that draft for you. This is also part of providing the service you asked for. The timestamps of successful requests from free accounts let us keep that limit fair. A record that an account is Pro keeps that account from being limited. Clicks on the Pro button tell us when it is worth opening payments. Our legal basis for those clicks is our legitimate interest in deciding whether to offer a paid plan.

Visit statistics: to understand how the site is used so we can improve it. Our legal basis is our legitimate interest in operating and improving a small product, balanced against the fact that this data is anonymous and aggregated.

We only send you email that the service requires, such as a reply to a request you sent us. We do not run marketing campaigns or newsletters.

monoznote recommends notes by comparing their meaning rather than their keywords, can say in a sentence or two why a past note came up, and can draft a requirements document from notes you pick. Each of these steps sends note text from our servers to OpenAI, L.L.C.. Only the plain text is included: your name, email address, and account identifier are not sent.

Finding related notes. The plain text of a saved note, and of the draft you are typing, is sent to OpenAI, L.L.C. and turned into an embedding. Saved notes are embedded when you save them, so they can show up in recommendations right away. A background schedule retries any saved note whose embedding did not get stored. Changing only the formatting does not send the note again. Drafts are processed as you write, but only once the draft is long enough for a comparison to be meaningful; very short drafts are never sent anywhere. The resulting embeddings are stored alongside your notes in Supabase, Inc. and are used only to rank your own notes for you and to place them on your meaning map.

Explaining a match. If you rest the cursor on a related note, we send the plain text of your current draft and of that one past note to OpenAI, L.L.C. for a short explanation of how they overlap. We do this only for the note you are looking at, not for every recommendation on the page. If a free account has reached its limit, we do not send the notes for that request. We do not save the explanation. It is shown while you are looking at that note and then discarded.

Writing a requirements draft. When you choose notes and ask for a draft, we send the title and plain text of each chosen note to OpenAI, L.L.C.. We send only the opening portion of each note, and only up to a fixed number of notes. Your name, email address, and account identifier are not included. Unlike an explanation, the draft that comes back is saved in your account. If a free account has already used both drafts in the last 24 hours, we do not send the notes for that request. Hovering a note on the meaning map does not send that note anywhere. It only shows text we already stored for you.

OpenAI, L.L.C. processes this text on our behalf under its API terms, which state that data submitted through the API is not used to train its models. We do not use your notes to train any model of our own.

Supabase, Inc., in the United States, stores your account details, notes, the connections between them, requirements drafts, embeddings, explanation timestamps, draft request times, and Pro records. OpenAI, L.L.C., also in the United States, receives note text to build embeddings, to write the short explanations above, and to draft a requirements document from notes you selected. Vercel, Inc. hosts the site and provides the anonymous visit statistics, and may process that data in the United States or other regions where it operates. Google LLC handles sign-in.

If you are in the United Kingdom or the European Economic Area, these transfers to the United States are made under the Standard Contractual Clauses offered by these providers, where that law requires them.

Each of these companies acts as our processor: they may handle your information to run the service on our behalf, and have no independent right to use it for their own purposes.

We keep your account details and notes for as long as your account exists. When you ask us to delete your account, the account and every note, connection, requirements draft, embedding, and related record attached to it are permanently deleted, normally within 30 days. Deleting a single note removes it, its embedding, and any connection that included it straight away. A requirements draft you already made stays. We drop the link to the deleted note and do not keep its title. An unnamed record that a note was used stays on the draft. Deleting a draft removes that draft and the record of which notes it used straight away. Explanations of why a note is related are not stored on our side at all. For a free account we keep the time of each successful explanation and each successful requirements draft for as long as the account exists, and we delete those times with the account. We do not keep those times for a Pro account. A record that an account is Pro stays while it is Pro and is deleted with the account. A press of the Pro button is kept so we can decide when to open payments. If you were signed in, that click is deleted with your account. If you were not, we keep the click without an account attached to it.

Backups taken before a deletion may keep a copy for a short period before they expire in the ordinary course. Anonymous visit statistics are retained by Vercel in aggregated form according to its analytics retention practices; we do not store raw visit logs on our own servers.

Notes, the connections between them, and requirements drafts are private to your account. Our database enforces this with row-level security, so a signed-in user can only read and write rows that belong to their own account. Traffic between your browser, our servers, and our providers is encrypted in transit.

There is no public sharing, no team access, and no feature that shows your notes to another user. We access note content ourselves only if you explicitly ask us to, for example when you report a problem we cannot reproduce.

We use the cookies needed to keep you signed in. They are set when you authenticate and are cleared when you sign out. We do not use advertising cookies, and Vercel Web Analytics does not use cookies to identify you.

You can ask us to show you the information we hold about you, correct it, export it, restrict how we use it, object to our use of it, or delete it. Where we rely on your consent, you can withdraw it at any time; withdrawing consent does not affect anything we did lawfully before you withdrew it.

Email hello@monoznote.com from the address you signed in with and we will act on your request without undue delay, and in any case within one month.

If you are in the United Kingdom or the European Economic Area, you also have the right to lodge a complaint with your local data protection authority. If you are in California, you have the right to know what we collect, to request deletion, and not to be discriminated against for exercising those rights; we do not sell or share personal information as those terms are defined there.

monoznote is not directed to children. If you believe a child has given us personal information, contact us and we will delete it.

If we change how we handle your information, we will publish an updated version on this page with a new effective date, so the current version is always the one you see here. If a change materially affects information we already hold, we will make reasonable efforts to tell you before it applies, for example in the app or by email.