Your privacy.
Your notebooks belong to you
Notixa stores your notes, handwriting, documents and imported media on your device. Cloud account services use Clerk for authentication and Cloudflare Workers, D1 and private R2 storage for notebook synchronization and media when enabled. The current app no longer connects to the legacy Supabase service. Exports you choose to share leave Notixa through the destination you select.
Information used to run the service
Clerk processes account identifiers, email and authentication information for sign-in and access to your notebooks. If you choose Google or Apple sign-in, that provider supplies the identity information you authorize; Apple may provide a private relay email address. Notebook content, folder structure, images, documents and any existing recordings are processed by Cloudflare to provide synchronization when enabled. Notixa does not currently include advertising or cross-app tracking. We do not claim end-to-end encryption.
Permissions are your choice
Photos and camera access are used only for media you choose to insert or scan. Face ID or device authentication can protect access to the app; Notixa does not receive your biometric template. Imported files and exports use the system document picker. Microphone access is optional and used to record audio you choose. Speech recognition is optional and uses on-device processing only for supported languages and devices; recordings are not sent to a transcription service. Saved recordings may still synchronize through Cloudflare when cloud sync is enabled.
Purchases
When memberships become available, Apple processes App Store payments. Notixa does not receive your payment card number. RevenueCat and our Cloudflare backend process purchase status, account identifiers and transaction identifiers to provide, restore and manage membership access.
Optional study AI
When study AI is available, you choose an excerpt and explicitly agree to send that text and your question to Cloudflare Workers AI. Notixa does not automatically upload a whole notebook for AI. The AI request ledger stores a source hash, generated output and usage information, rather than the raw source text. Generated answers can contain errors; verify them against the original material. Monthly credits, processing limits and application-wide spending caps apply. Audio transcription uses the separate on-device feature and does not use Workers AI.
Your choices and retention
You can export notebooks, back them up and delete notebook content in the app. Cloud-enabled accounts can export cloud metadata and referenced files and request permanent account deletion from Settings → Account after identity verification. Deletion is processed asynchronously and removes the Clerk login and associated Cloudflare content. Local copies and exports remain on your devices or chosen destinations; delete those separately. Sync conflict backups preserve prior local versions. Items in Trash can be retained for 30 days before permanent removal. Operational error counters are retained for 30 days and alert records for 90 days without note contents. Deleting an account does not cancel an Apple subscription; manage it in your Apple account. Contact support for assistance.
Contact and updates
Questions about your information: notixa.app@gmail.com. This policy describes the current implementation and must be reviewed before release, when providers change, or when new data is collected. Last updated October 26, 2026.