Privacy Policy

monoznote is operated by Changwon Hwang(“we”, “us”). We decide how the personal information described below is handled, and we are responsible for protecting it. You can reach us at hello@monoznote.com.

Account details. You sign in with Google. When you do, Google shares a basic profile with us: your email address, your name, your profile picture, and the identifier Google uses for your account. We store these in Supabase, Inc., together with the dates you signed up and last signed in. We never see or receive your Google password.

Your notes.We store the title and body of every note you write, the dates you created and last edited it, and a numerical representation of its text (an “embedding”) that makes note recommendations possible. Alongside the embedding we keep a little technical bookkeeping: the name of the model that produced it and a fingerprint of the text it was based on, so we can tell when a note needs to be processed again.

Visit statistics. We collect anonymous usage data through Vercel Web Analytics on every page of monoznote, including the pages you use after signing in. This may include the pages you view, the site that referred you, your approximate country or region, and your browser or device type. It is aggregated and is not linked to your account or to the content of your notes.

Server logs. Like any website, our hosting and database providers record standard technical logs when your browser or our servers make a request — typically an IP address, a timestamp, and the result of the request. These are used to keep the service running and to investigate errors and abuse, and they are kept only for a short period by those providers.

We do not collect payment details, we do not use advertising or cross-site trackers, and we do not sell or rent your information to anyone.

Account details: to create your account, keep you signed in, and make sure that only you can reach your notes. Our legal basis is the performance of our contract with you: without an account there is nothing to sign in to.

Notes: to store what you write and to show you related notes while you type. This is also part of providing the service you asked for.

Visit statistics: to understand how the site is used so we can improve it. Our legal basis is our legitimate interest in operating and improving a small product, balanced against the fact that this data is anonymous and aggregated.

We only send you email that the service requires, such as a reply to a request you sent us. We do not run marketing campaigns or newsletters.

monoznote recommends notes by comparing their meaning rather than their keywords. To do that, the text of a note, and the draft you are currently typing, is sent from our servers to OpenAI, L.L.C. and converted into an embedding using the text-embedding-3-small model.

This happens in two situations. Saved notes are processed in the background on a recurring schedule, so a note you write today becomes available for recommendations shortly afterwards rather than the instant you save it. Drafts are processed as you write, but only once the draft is long enough for a comparison to be meaningful; very short drafts are never sent anywhere.

Your draft reaches OpenAI, L.L.C. by way of our own server, which needs to see the text in order to forward it. Only the note text is included in these requests: your name, email address, and account identifier are not sent to OpenAI, L.L.C..

The resulting embeddings are stored alongside your notes in Supabase, Inc. and are used only to rank your own notes for you. OpenAI, L.L.C. processes this text on our behalf under its API terms, which state that data submitted through the API is not used to train its models. We do not use your notes to train any model of our own.

Your account details, notes, and embeddings are stored on servers operated by Supabase, Inc. located in the United States. Note text is processed by OpenAI, L.L.C., also in the United States. The site itself is hosted by Vercel, Inc., which additionally provides the anonymous Web Analytics described above and may process that data in the United States or other regions where it operates. Sign-in is handled through Google LLC.

If you are located outside the United States — for example in the United Kingdom or the European Economic Area — this means your information is transferred abroad and held under the laws of another country. Where that transfer is subject to UK or EU data protection law, it is made under the Standard Contractual Clauses offered by each of these providers.

Each of these companies acts as our processor: they may handle your information to run the service on our behalf, and have no independent right to use it for their own purposes.

We keep your account details and notes for as long as your account exists. When you ask us to delete your account, the account and every note, embedding, and related record attached to it are permanently deleted, normally within 30 days. Deleting a single note removes it and its embedding straight away.

Backups taken before a deletion may keep a copy for a short period before they expire in the ordinary course. Anonymous visit statistics are retained by Vercel in aggregated form according to its analytics retention practices; we do not store raw visit logs on our own servers.

Notes are private to your account. Our database enforces this with row-level security, so a signed-in user can only read and write rows that belong to their own account. Traffic between your browser, our servers, and our providers is encrypted in transit.

There is no public sharing, no team access, and no feature that shows your notes to another user. We access note content ourselves only if you explicitly ask us to, for example when you report a problem we cannot reproduce.

We use only the cookies needed to keep you signed in. They are set when you authenticate and are cleared when you sign out. We do not use advertising cookies, and Vercel Web Analytics does not use cookies to identify you.

You can ask us to show you the information we hold about you, correct it, export it, restrict how we use it, object to our use of it, or delete it. Where we rely on your consent, you can withdraw it at any time; withdrawing consent does not affect anything we did lawfully before you withdrew it.

Email hello@monoznote.com from the address you signed in with and we will act on your request without undue delay, and in any case within one month.

If you are in the United Kingdom or the European Economic Area, you also have the right to lodge a complaint with your local data protection authority. If you are in California, you have the right to know what we collect, to request deletion, and not to be discriminated against for exercising those rights; we do not sell or share personal information as those terms are defined there.

monoznote is not directed to children. If you believe a child has given us personal information, contact us and we will delete it.

If we change how we handle your information, we will publish an updated version on this page with a new effective date, so the current version is always the one you see here. If a change materially affects information we already hold, we will make reasonable efforts to tell you before it applies, for example in the app or by email.