NoteBound

Privacy Policy

Effective date: August 19, 2026

This Privacy Policy explains what information NoteBound collects, how it is used and shared, how long it is kept, and the choices you have about your information.

1. Who we are

NoteBound is a consumer notes app for iOS. It is operated by Chreia Labs, LLC (“NoteBound,” “we,” “us,” or “our”).

For purposes of applicable data protection laws, Chreia Labs, LLC is the controller of the personal information described in this Privacy Policy where that concept applies.

2. Information we collect

We collect information that is necessary to provide NoteBound’s account, syncing, sharing, profile, and subscription features.

Account and profile information

When you create or use a NoteBound account, we may store:

You can create an account using an email address and password, Sign in with Apple, or Sign in with Google.

If you use Sign in with Apple and choose Hide My Email, Apple may provide NoteBound with a private relay email address instead of your regular email address.

We do not store your password in plaintext. Authentication is handled by our authentication provider (Supabase).

Your display name and @handle are searchable by other NoteBound users so that users can find each other and share notes. Other signed-in users who search for people can see your handle, display name, and avatar.

If you add a profile photo, it is uploaded to our cloud storage and served through a public URL.

Notes and other user content

When you are signed in and use cloud syncing, the following information is stored in our cloud database:

This information is used to sync your NoteBound content across devices and provide the app’s features.

File attachments

Files attached to notes are currently stored only on your device. NoteBound does not currently upload note attachments to our servers. This is different from profile photos, which are uploaded to cloud storage.

Sharing information

If you share a note with another NoteBound user, we store information needed to provide that sharing feature, including:

The users you choose to share with can see the content you share with them. If you give another user edit access, that user can edit the content covered by that permission.

Subscription information

NoteBound offers an optional NoteBound Plus subscription for $9.99 per month or $99.99 per year.

Purchases are processed through Apple’s In-App Purchase system. NoteBound does not receive your full payment card number.

We use RevenueCat to determine subscription status. We also store subscription information on our servers, such as:

This information is used to determine which NoteBound features and limits apply to your account.

Information stored on your device

NoteBound also stores certain information locally on your iOS device, including:

Multiple accounts can be listed on one device, although only one account is signed in at a time. Authentication session tokens are stored in the iOS Keychain on your device.

Note exports

You can export your notes as a JSON file using the iOS system share sheet. The exported file includes notes and notebook structure. It does not currently include attachment files.

The exported file remains on your device unless you choose to send, save, or share it somewhere else. If you choose to send the file to another person, app, or service, that destination will receive the file.

3. Photo library access

NoteBound requests access to your photo library only if you choose to set a profile picture. We do not otherwise access your photo library.

NoteBound does not request or use location, contacts, microphone, camera, App Tracking Transparency permission, or the IDFA for advertising or tracking.

4. How we use information

We use the information described above to:

We do not use your information for third-party advertising.

5. How we share information

We share information only as needed to provide the features described in this Privacy Policy.

Other NoteBound users

Your display name and @handle are searchable by other NoteBound users. When you choose to share a note, the users you select receive access to the content you chose to share, subject to the viewing or editing permissions you grant.

Supabase

We use Supabase for authentication, our cloud database, and cloud file storage for profile photos. Our Supabase services are hosted in the United States.

Apple

We use Apple for Sign in with Apple (if you choose it), distribution through the App Store, and Apple In-App Purchase processing. Apple processes NoteBound Plus purchases. We do not receive your full payment card number.

Google

We use Google for Sign in with Google if you choose that sign-in method.

RevenueCat

We use RevenueCat to check and manage subscription status for NoteBound Plus.

6. Advertising, analytics, tracking, and sale of information

NoteBound does not currently use third-party advertising, third-party analytics SDKs, or third-party crash-reporting SDKs.

NoteBound does not use App Tracking Transparency or the IDFA.

We do not sell personal information.

7. Data retention and account deletion

Your NoteBound account and synced cloud notes remain stored until your account is deleted.

You can delete your account in the app from Profile → Delete account. You may also email support@notebound.app.

When you delete your account in the app, we delete the cloud account and associated cloud data, including your profile, synced notes, shares, avatar, and entitlements. On the device where you complete deletion, we also remove that account’s local notes, attachments, and session.

Signing out does not delete your cloud account or synced cloud data. Notes stay on that device, scoped to the account, so they can sync again after the next sign-in.

Removing an account from the list of accounts stored on a device only removes that listing (email, display name, handle) from the device. It does not delete the cloud account, synced cloud notes, or local note files.

Uninstalling NoteBound removes the app’s on-device notes and attachment files stored in the app sandbox.

If you used NoteBound on more than one device, remaining local copies on other devices may stay until you uninstall the app on those devices or those files are otherwise cleared.

NoteBound Plus billing is handled by Apple. Deleting your NoteBound account does not cancel an Apple subscription. If you do not want to keep paying, cancel NoteBound Plus in your Apple ID subscription settings.

8. Your privacy rights and choices

You can delete your account in the app, or contact us at support@notebound.app to request deletion of your NoteBound account and associated cloud data.

Depending on where you live and which privacy laws apply, you may also have rights concerning your personal information. You may contact us at the same email address to request access to or deletion of personal information associated with your NoteBound account, or to exercise other rights available to you under applicable law.

European users

If you are located in the European Economic Area, United Kingdom, or another jurisdiction where applicable data protection law grants similar rights, Chreia Labs, LLC acts as the controller of the personal information described in this Privacy Policy where applicable. You may contact support@notebound.app to request access to or deletion of your personal information or to exercise other rights available to you under applicable law.

California users

We do not sell personal information. If applicable California privacy law gives you additional rights regarding your personal information, you may contact us at support@notebound.app to make a request.

9. Children’s privacy

NoteBound is not directed to children under 13. We do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13, we will delete that account and associated cloud data as soon as reasonably practicable and stop using that information.

10. International data transfers

NoteBound uses Supabase for authentication, cloud database services, and cloud storage for profile photos. Our Supabase services are hosted in the United States.

If you use NoteBound from outside the United States, information that NoteBound stores through Supabase will be transferred to and processed in the United States.

11. Changes to this Privacy Policy

We may update this Privacy Policy as NoteBound changes. If we make material changes, we will update the effective date at the top of this page. The updated policy will be posted at https://notebound.us/privacy. Continued use of NoteBound after the updated policy is posted constitutes acceptance of the revised policy, except where applicable law requires additional notice or consent.

The effective date at the top of this policy identifies the version currently in effect.

12. Governing law

This Privacy Policy is governed by the laws of the United States, without regard to conflict-of-law rules, except where applicable privacy or consumer-protection law provides otherwise.

13. Contact us

If you have questions about this Privacy Policy, want to exercise applicable privacy rights, or want to request deletion of your NoteBound account, contact:

Chreia Labs, LLC
Email: support@notebound.app
Website: https://notebound.us

This page is provided for transparency about how NoteBound works. It is not legal advice.