Privacy Policy

Effective 27 September 2026

Younote is operated by Yazool AB, a company registered in Sweden. Yazool AB is the data controller for the personal data described here. This policy explains what the app collects, where it is kept, and which other companies see it. It is written to describe what the software actually does rather than to cover every eventuality in the abstract.

What we collect

  • Your account. When you sign in with Apple, the email address Apple shares with us (which may be an Apple relay address) and your name if you choose to share it. If you sign in with an email code instead, that address.
  • Your notes. The text you type, the recordings you make, the photos you take and the files you upload, together with their transcripts and the summaries, minutes, checklists, titles and custom tabs generated from them.
  • Usage counts. How many recordings you made this month and how many minutes were transcribed or spent in a live session — the numbers the free plan’s limits are measured against. Not what was said.
  • Basic technical data. What is needed to serve a request — an IP address in server logs, and the app version for support purposes.

We do not collect contacts, location or advertising identifiers, and there is no third-party analytics or advertising SDK in the app.

Why we are allowed to process it

Under the GDPR, each thing we do rests on a legal basis:

  • Performing our contract with you — storing and showing your notes, transcribing your recordings, generating the summaries and tabs you ask for, and keeping your account working.
  • Our legitimate interests — keeping the service secure, diagnosing faults, and preventing abuse. We do this in a way we believe does not override your rights, and you can object.
  • Your consent — access to the microphone, camera and photo library, which you grant when the app asks and can withdraw at any time in your device settings.

Where your notes are stored

Notes, transcripts and generated tabs are stored in our database at tea.successta.com. Recordings, photos and uploaded files are kept there as attachments. Each account can read only its own notes: the database enforces it, and the app checks it again on every read.

What is sent to AI providers

The features that read or write text for you run on AI models we do not host ourselves:

  • OpenAI — audio from a recording, for transcription, and your voice during a live session with the assistant.
  • OpenRouter — note text, to write a title, description, summary, minutes, tasks or custom tab; a photo, to read the text out of it; text from a PDF or document; and your messages to the assistant. OpenRouter passes each request to a company that hosts the model (currently DeepSeek V4 Flash for text and an OpenAI model for photos). We only allow hosts that commit to keeping nothing and training on nothing — zero data retention.
  • If OpenRouter is unavailable, the same request goes to OpenAI instead.

When you ask the assistant something, it is given a list of your notes — each one’s title, date, a one-line description and some keywords — and it opens a note in full only when it needs to answer you.

Under OpenAI’s API data usage policies and OpenRouter’s privacy policy, content sent through their APIs is not used to train models. Those are their commitments rather than ours, and their policies are the authority on them.

What is never saved

Assistant conversations are not stored. The turns of a chat and of a live voice session exist in memory for as long as the thread is open and are gone when you close it — they are not written to the database and we cannot read them back. Only recordings, photos, files and typed text become notes.

Permissions the app asks for

  • Microphone — to record a note and to hold a live conversation with the assistant.
  • Camera — to photograph text you want turned into a note.
  • Photos — only for the images you pick yourself.

Each is asked for at the moment it is first needed, and the app keeps working without them apart from the feature concerned.

Keeping and deleting

Your notes stay until you delete them. Deleting a note removes it and its attachment from our database. You can delete your account yourself, from the account menu on the web or the account sheet in the app: that erases every note, recording, photo, file and tab you made, your usage records and the account itself, and, if you signed in with Apple, removes Younote from your Apple ID. Backups made before the deletion age out on their own schedule. Deleting the account does not cancel a subscription; cancel that in the App Store or Google Play.

You can ask for a copy of your data, or for it to be corrected or deleted, by writing to the address below.

Purchases

If Younote offers a paid subscription, the payment is taken by Apple or Google, and we use RevenueCat to tell us whether your subscription is active. RevenueCat receives the store’s purchase receipt and an identifier for your app account.

We never see your card number or billing address. Those stay with the store.

Who else sees it

Only the providers needed to run the app: OpenAI and OpenRouter, and the model hosts OpenRouter uses, as described above; Apple, if you sign in with Apple; our hosting and database providers; and the email provider that delivers a sign-in code. We do not sell your data, we do not share it for advertising, and we do not give it to anyone else except where the law requires it.

When something breaks, an error report goes to Sentry so we can fix it. A report carries what failed, where in our code, your device and app version, and an identifier for your account. It does not carry your notes, recordings, photos or files.

Sending data outside the EU

We are based in Sweden, and some of the providers above process data in the United States — OpenAI, OpenRouter and Sentry in particular — and a model host OpenRouter picks may be elsewhere again. Where that happens, the transfer relies on the European Commission’s Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. That is the mechanism those providers commit to in their own terms.

Your rights

If you are in the EU or the UK, you have the right to ask us for a copy of your personal data, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time without affecting what we did before you withdrew it.

Write to support@yazool.net and we will answer within one month.

If you think we have handled your data badly, you can complain to the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), or to the authority where you live.

Security

Traffic is encrypted in transit, sign-in is through Apple or a one-time code rather than a password you might reuse, and each account is scoped to its own data at the database level. No service can promise perfect security, and you should keep your own copies of anything irreplaceable.

Children

Younote is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

Changes to this policy

If this policy changes, the effective date at the top changes with it, and we will tell you in the app if the change is significant.

Contact

Yazool AB, a company registered in Sweden; our postal address is available on request. Questions, or a request about your data: support@yazool.net.