Draft, 31 October 2026. To be checked by a lawyer or commercialista before launch. Text in [brackets] is still to be filled in.
Privacy policy
SortNotes is a notes app that sorts your notes with AI. This page explains what we keep, why, who helps us, and what you can do. In short: your notes are yours, they are never sold, and you can download or delete everything at any time in the app.
Who we are
[Business name], [address], Italy, [VAT number]. Contact: [support@your-domain]. We are the data controller under the GDPR.
What we keep
| What | Why |
|---|---|
| Your name, email and a scrambled form of your password (never the password itself). If you sign in with Google, Apple or another service: the id and email it gives us. | Your account and logging in. |
| Your notes, lists, dates, photos and groups. | The app itself: storing them and syncing them to your devices. |
| Who you share notes or groups with, and their email. | Sharing, which you choose. |
| What you do in the app, without contents: for example "opened the app", "wrote a note", "tapped Get Premium", which version of a screen you saw, and how many AI calls your notes needed. | Understanding what works, testing improvements (A/B tests) and keeping costs low. Never the text of your notes. |
| Feedback you send us. | Reading it and improving the app. |
| If you connect a calendar (Google, Outlook, Calendly or iCloud): a key from that service, or for iCloud an app-specific password, stored encrypted; and the meetings of the next 30 days, which become notes. | Showing your meetings next to your notes, and putting your notes with a date into your calendar. You can disconnect at any time; the meetings then leave SortNotes. |
| If you turn on notifications: an address for your device given by your browser or phone (Apple, Google or Mozilla), and the time of your morning briefing. | Sending your reminders and the briefing. The text is encrypted on its way to your device. |
| Your language and time zone. | Showing the app in your language, naming new groups in it, and sending reminders at the right time. |
| On your device: a login cookie, a random device id, and settings such as Light or Dark mode. | Staying logged in, and testing improvements before you log in. No advertising or tracking cookies. |
The AI
To sort a note, its text and photos are sent to Anthropic's Claude API, which returns a title, a group, a priority and a date. Anthropic processes them for us under its commercial terms and does not use them to train its models. [Check and link Anthropic's current commercial terms and data retention.]
Who helps us (processors)
- Fly.io: runs our server and stores the data, in Frankfurt, Germany (EU).
- Anthropic: the AI that sorts notes (see above).
- Stripe: handles payments for Premium on the web. Your card details go to Stripe, never to us; we keep only your plan and Stripe's customer number.
- [When subscriptions inside the apps launch:] Apple and Google handle payments made inside the iPhone or Android app.
- Resend: sends emails such as password reset links (your email address and the message).
- Sentry: receives error reports from the server (where the error happened and your account number, never the text of your notes or your email).
- Google, Apple, GitHub and others: only if you choose "Continue with…" to log in.
- Google, Microsoft, Calendly, Apple (iCloud): only if you connect your calendar there. SortNotes reads and writes events in your own account with that service.
- AI assistants you connect yourself (for example Claude, ChatGPT or Gemini): only if you make a key for one under your initials. That assistant can then read your notes (and add notes, if you allowed it) under its own terms; remove the key to stop it.
- Apple, Google and Mozilla push services: deliver notifications to your device, encrypted, only if you turn notifications on.
- Google Calendar, Apple Calendar, Outlook: only if you add a note or your calendar link to them yourself.
We have data processing agreements with them where the GDPR requires it. [Confirm and list transfers outside the EU, e.g. Anthropic in the US, with the safeguards used.]
How long we keep it
- Your account and notes: until you delete them or your account.
- Premium backups: 30 days each.
- When you delete your account: notes, photos, backups, shares, sign-ins, connected calendars and notification settings are deleted at once. Usage statistics are kept without any link to you. Details: Delete your account.
Your rights
You can see, correct, download and delete your data. In the app: ⬇ Download all my notes and Delete my account are under your initials. You can also write to [support@your-domain], object to processing, or complain to the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it).
Children
SortNotes is for people aged 16 and over. Younger children can use it only with a parent's consent and account. [Check the age for Italy and for the app stores.]
Security
All connections are encrypted (HTTPS). Passwords are stored only in scrambled form (scrypt). Only you and the people you share with can see your notes.
Changes
If this policy changes in an important way, we tell you in the app first.