Privacy Policy

WhiteNote · updated October 11, 2026

WhiteNote is an AI task assistant. We respect your data and collect only what is needed for the app to work. We don’t track you, show ads, or use third‑party analytics. Without an account your tasks stay on your device; sync, shared lists and the AI assistant require signing in.

What we process

• Account — when you sign in with Apple or Google we receive your email address (or an Apple “Hide My Email” relay address) and a stable account identifier from that provider. Your name stays on your device and is shared only as the author name on comments you post in shared lists. For Sign in with Apple we also keep an encrypted Apple token so we can revoke Apple sign‑in when you delete your account.
• Tasks — synced to our server so they are available on all your devices, including notes, addresses, dates and reminders. Stored encrypted at rest (AES‑256‑GCM). The server can decrypt them so smart features work (e.g. departure reminders). This is “encryption at rest”, not end‑to‑end or “zero knowledge”.
• Calendar — only with your permission. The app can add tasks with a date to your iPhone Calendar and, when you ask, import calendar events as tasks. Imported events become regular tasks and are synced like any other task.
• Assistant chat — the text of your conversation is synced to our server so it follows you across devices, stored encrypted at rest like tasks. Photos and files you attach are kept on your device; they pass through our server to Anthropic only to produce a reply and are not stored on our server.
• Shared lists — lists you share, their tasks and comments are stored on our server (content encrypted at rest) so that list members can see them. See “Shared lists” below.
• Location — only with your permission, for “time to leave” reminders. For a task with an address and a due time, the app sends your device’s current coordinates, the task’s address and the arrival time to our server, which asks the Google Routes API for the travel time with live traffic. This is used only to calculate the estimate and is not stored on our server. If you allow “Always” access, the estimate is refreshed in the background when you move a significant distance (for tasks due in the next few hours).
• Frequent places (optional “Smart place suggestions”) — places you visit are detected and stored on your device only and are never synced to our server. The one exception: if you tap Ask Claude for insights in Settings → My frequent places, a short summary — place names, number of visits, usual hour and place type, no coordinates — is sent to Anthropic via our server (with your AI consent).
• Voice input — transcribed by Apple speech recognition (on your device or by Apple); only the resulting text is used. We don’t record or store audio.
• Notifications — your push notification token and a per‑install device identifier, so sync updates reach the right devices. Reminders themselves are scheduled on your device.
• AI usage counters — the number of assistant requests per day, to enforce fair‑use limits.

Task, chat, shared‑list and comment content is encrypted by us (AES‑256‑GCM) before it is stored. Other records, such as your email address and list names, are kept in Cloudflare’s database, which Cloudflare encrypts at rest. Our hosting provider may keep short‑lived technical logs (such as IP address and request time) for security and troubleshooting.

AI assistant (Anthropic)

The assistant is powered by Claude, made by Anthropic. Nothing is sent to Anthropic until you give explicit consent on the in‑app consent screen. You can withdraw consent at any time in Settings → AI assistant & data («ИИ‑ассистент и данные»); the assistant then stops answering, while tasks, reminders and widgets keep working. Requests go through WhiteNote’s server, which forwards only the content needed for the reply — never your account identifier, email or name.

What is sent to Anthropic:

• Messages — the text you send (voice input is sent only as text), quotes, and recent chat history (up to the last 50 messages).
• Photos and files — photos, PDFs and text files you attach in the chat or send to WhiteNote through the Share sheet.
• Tasks — titles of tasks you attach to a message; and when you ask the assistant to show or change tasks, their titles, categories, due dates and completion status (including events imported from Calendar). Task notes and addresses are not included.
• Addresses from links — the address and coordinates of a place from a Google Maps link you paste into the chat.
• Date and time — your device’s current date, time and time zone, so that “tomorrow” or “in an hour” is understood correctly.
• Frequent places — only when you tap Ask Claude for insights (see above).

Not sent to Anthropic: your GPS location, voice recordings, and your account data (email, name).

Anthropic processes this data only to generate the reply. Under Anthropic’s commercial API terms, it is not used to train their models.

Shared lists

When you share a task or a list by link, anyone who has the link can join it. Its tasks and comments are visible to all members of that list. Comments show the author’s profile name (or their email address if no name is set). The list owner sees the members — with a partially hidden email address — and can remove them. You can report objectionable content and block users right in the app. Reports are reviewed within 24 hours; we may remove the content, remove the user from the list, or ban the account. A report includes an encrypted copy of the reported content so we can review it.

Who data is shared with

• Anthropic (Claude) — only after your consent: the data listed above, to produce the assistant’s reply.
• Google — Routes API for travel time (it receives the start coordinates and the destination address from our server, not your identity); Google sign‑in (if you use it). When you paste a Google Maps link, the app opens that link to read the address.
• Apple — Sign in with Apple, push notification delivery, in‑app subscriptions, speech recognition, and Apple Maps (address lookup, place names and routes on the map). Subscriptions are processed by Apple; we never receive your payment details.
• Cloudflare — backend hosting and data storage.

We do not sell your data, use it for advertising, or track you across apps and websites. The app contains no advertising or third‑party analytics SDKs.

Retention & deletion

Data is kept while your account is active. When you delete a task or a chat message, its content is erased from our server (only an empty marker remains so your other devices remove it too). You can delete your account at any time in Profile → Delete account:

• Delete now — immediately and permanently erases your account and all associated data on our server: tasks, chat, device tokens, usage counters, lists you own (with their tasks and comments), reports and blocks. Your comments in other people’s lists are erased too.
• Delete in 30 days — schedules the deletion; you can cancel it in Profile until that date. After 30 days the account and all its data are permanently erased.

In both cases Sign in with Apple access is revoked right away. Data stored only on your device (such as frequent places and local copies of tasks and chat) is removed when you delete the app.

Contact

Privacy questions or requests: support@whitenote.app