Neuro Notes Privacy Policy

Neuro Notes is built as a private workspace for Markdown notes, connected materials, and working ideas. Because user notes can contain personal and professional thoughts, privacy is part of the core product.

This policy explains in plain language what personal data may be processed when using Neuro Notes, why it is needed, and how we protect it. The document applies to the Neuro Notes mobile app and related Xiver services.

To run the app, protect accounts, and improve the product, we may need several categories of data. We limit collection to what is necessary to provide the service, diagnose issues, and meet legal obligations.

Each data category is used for a specific purpose related to app operation or user security.

• Service operation: authentication, account support, syncing user settings, and providing access to app features.
• Product improvement: analysis of aggregated feature usage, bug discovery, and development of tools for notes, files, and the AI assistant.
• Communication: responding to requests, notifying users about important changes, restoring access, and supporting users.
• Security: detecting suspicious activity, protecting accounts, investigating incidents, and preventing abuse.
• Legal obligations: maintaining required records, processing lawful requests, and complying with applicable law.
• Marketing: sending news or updates only with consent; users can opt out of such messages.

We do not sell personal data. Sharing is possible only in limited cases when necessary to operate the service, comply with law, or with your consent.

• Service providers: hosting, email delivery, analytics, payment, and infrastructure services that process data only for Xiver's purposes.
• Legal requirements: response to a valid legal request, court order, or authorized authority demand after checking its legality.
• Business changes: in a merger, asset sale, or similar transaction, data may be transferred as part of the service with user notice where required.
• Your consent: if sharing is needed for a purpose not described in this policy, we will request explicit permission.

We support user rights provided by applicable data protection laws, including GDPR, UK GDPR, CCPA/CPRA, PIPEDA, and similar rules.

• Access: you can request a copy of the personal data we hold about you.
• Correction: you can update inaccurate account data or ask us to correct it.
• Deletion: you can request deletion of personal data if we are not legally required to retain it.
• Export: you can request data in a structured, machine-readable format where applicable.
• Marketing opt-out: you can unsubscribe from marketing messages at any time.
• Consent withdrawal: if processing is based on consent, you can withdraw it; this does not affect processing that was lawful before withdrawal.
• Complaint: you can contact your local data protection authority if you believe your rights were violated.

We use reasonable technical and organizational protection measures, including encryption in transit, access controls, security monitoring, and restricted internal team access.

No method of transmission or storage can be absolutely secure. We also recommend using a strong password, protecting your device, and updating the app on time. If an incident affects personal data, we will notify users and competent authorities within legally required timelines.

We retain personal data only for as long as needed to operate Neuro Notes, maintain security, support users, or comply with law.

• Active account data: stored while the account is active; after confirmed account deletion, data is removed within the stated timelines.
• Financial records: may be stored for up to 7 years if required for tax and accounting purposes.
• Marketing preferences: stored until consent is withdrawn or the user opts out.
• Technical and security logs: usually stored for a limited period needed for diagnostics, service protection, and incident investigation.

Although Neuro Notes is primarily a mobile app, we may use cookie-like technologies for session security, diagnostics, and understanding how features are used.

• Necessary technologies: support sign-in, security, and core service operation; without them some features may be unavailable.
• Analytics: used with consent where required to improve the product and find problematic scenarios.
• Preference controls: you can change permissions in app settings or through your device privacy settings.

Neuro Notes may be used for study, so we take children's protection seriously. We do not knowingly collect personal data from children below the applicable age of consent without verified permission from a parent or legal guardian.

If you believe a child provided us personal data without required consent, contact us. We will review the request and take steps to delete the data or stop access where required.

Xiver may store and process data on servers in different countries, including the United States or the European Union, where necessary for reliable service operation.

When transferring data internationally, we use applicable legal mechanisms and safeguards, such as adequacy decisions, standard contractual clauses, or other legally recognized tools.

We may update this policy as Neuro Notes develops, technologies change, or legal requirements evolve. The current version is always available on this page with the last updated date.

If changes materially affect your rights or the way data is processed, we will try to notify you in advance by email, in the app, or through another prominent channel.

For questions about data processing, exercising user rights, or this policy, email [email protected]. To help us process the request faster, include the email or account ID related to the request.