JJ Notes LogoJJ Notes
Back to JJ Notes
JJ NotesJJ Notes
Privacy Policy

JJ Notes Privacy Policy

Last Updated & Effective Date: September 28, 2026

Local-First by Default, Private Forever

JJ Notes is engineered so your notes, files, stickies, and voice recordings live locally on your device in IndexedDB. You can use the app completely anonymously without creating an account. We never sell your personal data or use your private thoughts to train artificial intelligence models.

1. Information We Collect

A. Local Mode (Without an Account)

When you use JJ Notes in your web browser or progressive web app (PWA) without signing in, all note content, folder hierarchies, markdown files, spreadsheets, mind maps, sticky notes, and audio transcripts are saved exclusively in your browser’s local storage (IndexedDB). None of this data is transmitted to or stored on our servers.

B. Cloud Sync & Registered Accounts

If you opt to register a free account to sync notes between devices (e.g. laptop and smartphone) or collaborate with team members, we collect:

  • Account Credentials: Your email address and secure authentication token managed via Supabase Auth.
  • Synced Workspace Data: Note text, titles, folder structures, tags, and timestamps necessary to keep your devices in sync.
  • Collaboration Data: Project membership roles, project names, and invited teammate email addresses.

C. Audio & Voice Dictation

When you use the Quick Capture voice feature or Meeting Transcriber, your device’s microphone is accessed only after your explicit permission. Real-time speech recognition utilizes standard Web Speech API technologies on your local system whenever possible. Voice audio is never stored or monitored without your initiation.

2. How We Store and Protect Your Data

For users with cloud sync enabled, backend storage is powered by Supabase with enterprise-grade PostgreSQL infrastructure:

  • Row Level Security (RLS): Strict database policies guarantee that each user can only read, write, and delete their own notes and projects.
  • Encryption in Transit: All communications between your client device and cloud endpoints are secured with Transport Layer Security (TLS 1.3/HTTPS).
  • Local Encryption & Offline Cache: Offline data remains cached on your device and reconciles automatically upon reconnecting.

3. Artificial Intelligence & Third-Party Processing

JJ Notes provides optional AI utilities, including Note Summarization, Quick Capture Clean Up, Title Generation, and Text-to-Speech (Read Aloud via ElevenLabs):

  • AI features are triggered only on explicit user request (e.g. clicking "Clean Up", "Summarize", or "Read Aloud").
  • Only the text snippet necessary for that specific action is processed.
  • Your personal notes and thoughts are never used to train public foundational AI models.

4. Cookies and Tracking

JJ Notes does not use third-party advertising cookies, cross-site trackers, or commercial data brokers. We utilize strictly necessary local storage items and session cookies strictly to:

  • Maintain your active authentication session when logged in.
  • Store your UI preferences (light/dark theme, sidebar width, font size).
  • Save offline notes in browser IndexedDB.

5. Your Rights: Export, Erasure & Account Deletion

You maintain 100% ownership over your data at all times. In accordance with global data protection laws (including GDPR and CCPA):

  • Right to Export: You can export your entire notebook anytime as Markdown (.md), HTML, or a single compressed ZIP file via the Settings panel.
  • Right to Erase: You can delete any note, folder, or sticky note permanently from your local device and cloud backups.
  • Right to Account & Data Deletion: You can permanently delete your registered account and purge all synchronized cloud records directly from the Settings page.

6. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your personal data, please contact the JJ Notes team at support@jjnotes.com.