notePrivacy, in plain words.
Notebot is made by one person. This page says everything Notebot records. Last updated 7 October 2026.
What Notebot records about you
When you sign in with Google, Notebot keeps the name, email address and profile picture that Google shares, and which provider you used. Once a day while the app is open it records a check-in: your account id, the Notebot version and the operating-system version. That is the complete list.
This is stored in a database hosted by Supabase, in a project only we can open. It is used to know how many people are testing the beta, to reach you if something important changes, and to ask what broke. It is never shared, sold, or added to any mailing list.
What Notebot never sees
- Your notes, the files you drop in, your recordings and photos. They stay in the folder you chose on your computer.
- What you read, write or search. Reading never touches the network, and neither does drilling the questions already in your notes.
- Your AI key. It is stored in a file on your computer that only your account can read, and sent only to the company it belongs to: Google for a Gemini key, Anthropic for a Claude key, OpenAI for an OpenAI key.
What goes to your AI provider, and when
Notebot writes with Google's Gemini API by default; if the key you pasted is Anthropic's or OpenAI's, the same requests go to that company's API instead, and nothing goes to the others. To write a note, Notebot sends the text and images of the slides you dropped, the transcript of your recording (made on your computer), and your photos to that API under your own key. Nothing is sent until you press Run.
When you ask Drill for new questions, Notebot sends the text of the chapters you chose; when you ask it to check a written answer, the question, the section it is about and your answer; when you ask AI help to explain a passage, the passage, its section and, if the note kept them, the matching slides' text. Each goes to the same API under your key, only when you ask. Drilling the questions already in your notes sends nothing.
The provider's handling of these requests is governed by its own API terms: Google's Gemini API terms, Anthropic's commercial terms or OpenAI's business terms. Notebot asks OpenAI not to store the requests it sends.
Updates
Once a day the app asks GitHub whether a newer version exists. That request carries no account information.
This website
notebotapp.com uses Vercel Web Analytics to count visits. The same host also measures how fast the pages load for you (Vercel Speed Insights): timings, not identities, and nothing about what you do in the app. It sets no cookies and does not identify you.
Deleting your account
Ask, and it is deleted the same day, with every check-in row. Open an issue and we'll take care of it. Signing out in the app (the monogram at the bottom of the rail, then Sign out) removes the session from your computer; your notes are untouched either way.
Changes
If any of this changes, this page changes first and the app tells you at the next sign-in.