Privacy Policy

Last updated: July 2026

OneSay:Notes ("the app", "we") is a note-taking app with voice input, hand-drawing, reminders and optional cloud sync. This policy explains what data the app handles, where it goes, and the choices you have.

1. Information We Collect

• Account information (only if you sign in): your email address, display name and a user ID. Sign-in is available by email/password, Google Sign-In, or Sign in with Apple.
• Note content: text, checklists, sketches, photos, voice recordings, tags, categories and reminder times that you create in the app.
• Voice data: audio you record using the voice input feature, and the text transcribed from it.
• App settings: language, theme, background, reminder preferences and app-lock settings.
• Subscription status: whether you hold an active premium subscription, and the associated purchase token used to verify it.

We do not collect advertising identifiers, location, contacts, calendar data, or browsing history. The app contains no third-party analytics or advertising SDKs.

2. How We Collect Information

• On your device: all notes are written to a local database first. If you never sign in, your notes never leave your device except where you use a feature described in Section 3.
• On our server: if you sign in, your notes are synced to our server so you can restore them on another device. Sync is tied to your account.
• Local backup files: the backup/export feature writes a JSON file to your device storage. It is shared only if you export or share it yourself.

3. Third-Party AI Service - Alibaba Cloud DashScope

To provide speech-to-text and smart organising of what you say, the app uses a third-party generative AI service: Alibaba Cloud DashScope (the Qwen / Tongyi Qianwen family of models, including its real-time speech recognition service).

What data is sent to DashScope:

• Your voice recording - streamed to the speech recognition service to be converted into text.
• The transcribed text - sent to the language model so it can be organised into a note title and body, or parsed into a reminder.
• Your device time zone and current local time - so that relative phrases such as "remind me at 8am tomorrow" can be resolved into an actual date and time.

Purpose: the data is used solely to perform the AI processing you requested for that action.

Training: data sent to DashScope is not used to train or improve the AI models. It is processed only to fulfil your current request.

Consent: the first time you use a feature that sends data to the AI service, the app shows an in-app consent dialog that names DashScope as the recipient, lists exactly what will be sent, and asks for your permission before any data is transmitted. You can withdraw this consent at any time under Me > Settings & help > AI data sharing. While consent is withdrawn, voice recognition and AI organising are disabled - recording still works and stays on your device, and typing notes by hand is unaffected.

Third-party protection: DashScope processes data under its own data and security policies. We do not authorise DashScope to use your content for any purpose other than providing the AI processing we request. For details, see the provider's security and privacy notice.

4. How We Use Information

• Provide the core features: creating, editing, organising and searching your notes.
• Deliver the reminders you schedule.
• Sync and restore your notes across your devices when you are signed in.
• Provide AI-powered transcription and parsing, subject to your consent (Section 3).
• Verify your premium subscription status.

5. Data Sharing

We do not sell your data, and we do not share it for advertising. Your data is shared only with:

• Alibaba Cloud DashScope - the data described in Section 3, and only after you grant consent.
• Google Play / Apple - for payment processing and subscription verification. Your payment details are handled entirely by the store; we never receive or store them.
• Google / Apple sign-in - if you choose to sign in with those accounts, they confirm your identity to us; we receive your email address and display name.

6. Data Security

Data transmitted between the app and our servers, and between the app and DashScope, is protected using encrypted (HTTPS/TLS) connections. Notes stored on your device are held in the app's private storage area; you can additionally lock individual notes with the app-lock feature.

7. Data Retention

We retain your account and synced notes while your account is active. Data sent to DashScope is processed for the current request only and is not retained by us for AI training. Deleting a note removes it from your device and, on the next sync, from our server. Uninstalling the app removes all locally stored data from your device.

8. Your Choices

• AI consent: grant or withdraw consent for AI data sharing at any time under Me > Settings & help > AI data sharing.
• Use without an account: you can use the app without signing in; nothing is synced to our server in that case.
• Export or delete: you can export or delete any note inside the app at any time.
• Delete your account: see Account deletion, or email us using the address below.
• Permissions: microphone, camera, photo library and notifications are all requested only when the relevant feature is used, and can be revoked in your device settings.
• Subscriptions: manage or cancel through your Google Play or Apple ID account settings.

9. Children's Privacy

The app is intended for users aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to This Policy

If we change what data is collected, who it is shared with, or how it is used, we will update this page and the "last updated" date above. Material changes affecting third-party data sharing will also be surfaced in the app before they take effect.

© 2026 OneSay:Notes. All rights reserved.