← Back to Home

Privacy Policy

Last updated: November 20, 2025

Introduction

At NinjaNote, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our voice notes application.

If you have any questions about this Privacy Policy, please contact us at hola@ninjanote.app

Information We Collect

Account Information

  • Email address (from Google OAuth)
  • Display name (from your Google account)
  • Profile photo (from your Google account)
  • Preferred language

Content Data

  • Audio recordings of your voice notes (stored in Firebase Cloud Storage)
  • Transcribed text, summaries, titles, and metadata of your notes
  • Tags, categories, folders, and organization data
  • Information about notes shared with other users

Usage Data

  • Device information and push notification subscriptions
  • Notification preferences
  • Credit balance and usage history

How We Use Your Data

  • Process audio recordings through OpenAI Whisper API for transcription
  • Analyze note content with OpenAI GPT-4o for categorization and summarization
  • Store your notes and data securely in Firebase Firestore and Cloud Storage
  • Enable you to share notes with other users
  • Send you email and push notifications about shared notes and reminders
  • Authenticate you via Google OAuth

Third-Party Services

We use the following third-party services to provide our functionality:

OpenAI

Audio transcription and AI-powered categorization

OpenAI has committed to not using API data for model training

View OpenAI Privacy Policy

Google Firebase

Data storage, authentication, and cloud infrastructure

View Firebase Privacy Policy

Google OAuth

User authentication via OAuth 2.0

View Google Privacy Policy

Resend

Email notifications for shared notes and account updates

View Resend Privacy Policy

Stripe

Payment processing for credit purchases (when applicable)

View Stripe Privacy Policy

AI Training and Your Notes

Your notes and audio recordings are NOT used to train AI models. We use OpenAI's API services which have a no-training policy for customer data.

Your content remains private and is only processed to provide you with transcription and categorization services.

Data Retention

  • We retain your data while your account is active
  • When you delete your account, all data is permanently deleted within 30 days
  • Backup copies may persist for up to 30 days for disaster recovery purposes

Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

  • Right of Access: You can request a copy of all your data
  • Right to Rectification: You can update or correct your information
  • Right to Erasure: You can request deletion of your account and all data
  • Right to Data Portability: You can export your data in JSON format
  • Right to Restriction: You can limit how we process your data
  • Right to Object: You can object to data processing

To exercise these rights, contact us at hola@ninjanote.app

Security

We implement appropriate technical and organizational measures to protect your data:

  • HTTPS/TLS encryption for data in transit
  • Role-based access control and user isolation in Firestore
  • Secure authentication via Google OAuth 2.0
  • Automatic daily backups

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place through our use of Google Firebase and compliance with GDPR Standard Contractual Clauses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the 'Last updated' date at the top of this Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: