Privacy Policy
Effective Date: August 26, 2026
🔒 Privacy First Principle: EpicNotes is built with an offline-first architecture. Your notes, tasks, and personal data are stored locally on your device by default. We do not sell your personal information or use your private notes to train AI models.
1. Information We Collect
EpicNotes minimizes data collection to only what is necessary to deliver high-performance note taking, task management, and sync capabilities:
- Local Device Data: All notes, checklist items, tags, and tasks you create reside in a local SQLite database on your macOS computer or Android device.
- Account Information (Optional Sync): If you sign up for cross-device cloud sync, we store your email address and authentication credentials securely via Supabase.
- Shared Links & Web Content: When using the Web Article Import feature or Android Share Intent to import web articles, the provided web link is processed to extract article body text for AI summarization.
- Google Calendar Credentials: When you connect Google Calendar, we securely store the OAuth tokens required to maintain that connection so reminders stay in sync without re-authorizing.
2. How We Use Your Information
Your information is used strictly to provide core application features:
- To store, organize, and display your notes and tasks on your device.
- To enable optional real-time cloud sync across your macOS and Android devices.
- To power AI features (AI auto-tagging, executive summaries, web article import, and natural language date parsing).
- To synchronize scheduled task reminders with your Google Calendar (when enabled by you).
3. AI Processing & Third-Party Services
EpicNotes integrates trusted third-party providers for specific optional cloud features:
- DeepSeek AI API: AI auto-tagging, note summaries, and web article extraction utilize DeepSeek's secure API endpoints over HTTPS. Transmitted note snippets are processed transiently and are not retained or used for public AI model training.
- Supabase: Handles user authentication and encrypted database synchronization for users who opt into cloud sync.
- Google Calendar API: If connected, task due dates are sent over encrypted HTTPS connections to create events on your personal Google Calendar. EpicNotes accesses Google Calendar data only with your explicit permission and uses it solely to create, update, and mark complete your task reminder events. We use Google user data in accordance with the Google API Services User Data Policy, including the Limited Use requirements, and do not transfer Google user data to third parties except as required for this feature.
4. Data Storage, Security & Retention
We take data security seriously:
- Encryption in Transit & at Rest: All network communication (sync, AI requests, calendar integrations) uses TLS/HTTPS encryption.
- Local Control: Deleting a note locally removes it from your SQLite database. Trashed notes can be permanently purged at any time.
- Account Deletion: You may request complete account and synced data deletion at any time by contacting support.
5. Children's Privacy
EpicNotes does not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with personal information, please contact us for immediate removal.
6. Changes to This Privacy Policy
We may update our Privacy Policy periodically to reflect new features or security requirements. Any updates will be posted on this page with a revised effective date.
7. Contact Us
If you have any questions or feedback regarding this Privacy Policy, please contact us at:
📧 Email: epicappsdev@gmail.com
🌐 Website: epicsmartnotes.vercel.app