Notes Privacy Policy

Last updated October 9, 2026.

Notes is a notes app for iPhone, published by Nucleus. It can be used without an account, in which case it transmits no data to Nucleus except a problem report that you choose to submit. If you choose to sign in with Nucleus ID, your notes and their attachments are synchronized with your account.

  • Without an account, your notes, folders, attachments and settings are stored on your device only and are never transmitted to Nucleus.
  • Signing in with Nucleus ID is optional. If you sign in, your notes and their attachments are stored in your account so that your devices stay in sync.
  • Hidden notes can be end-to-end encrypted with a passphrase only you know. Encrypted notes and their attachments are stored in your account in a form that Nucleus cannot read.
  • Notes works with other Nucleus apps only if you allow it: plugins that show your Todo lists or Watchlist titles are off until you turn them on, and other apps can see a list of your notes only if you approve it for each app.
  • Notes contains no analytics, advertising, tracking or third-party components.
  • A problem report is transmitted only when you compose and submit it yourself.
  • Notes is published by Nucleus, operated by Jan Kocanda, Czech Republic, who is the data controller. Enquiries: [email protected].

Data on your device

Your notes, checklists, folders, tags, attachments (photos, scans, drawings, voice memos and other files) and settings are stored on your device. Widgets, Siri, Shortcuts and Spotlight read the same data on the device; hidden and locked notes are left out of all of them.

The camera, photo library and microphone are used only when you add a photo, a scan or a voice memo, and only with your permission. Text in scans and transcripts of voice memos are recognized on the device.

If you use the app lock, a locked note or hidden notes, Face ID is handled by iOS. Notes receives only the result of the check and never your biometric data.

A backup you export is a file containing your notes and attachments. It is saved only to the location you choose, and is not transmitted to Nucleus.

Nucleus ID and synchronization

If you sign in with Nucleus ID, Notes receives your handle and display name, and stores your notes, folders and settings, and the files attached to your notes, in your account on our server in the Czech Republic, so that every device you sign in on has the same data.

Nothing else is transmitted. Notes does not receive your email address. You may sign out, disconnect Notes or delete the data and files it stored at any time, and its access ends accordingly. Files that no note uses any more are deleted from your account automatically.

Your Nucleus ID itself is covered by the Nucleus privacy policy. You may delete your account and all data stored with it, including the files of every app, on this page.

Legal basis: performance of the service you requested (GDPR Art. 6(1)(b)).

Hidden notes and encryption

Hidden notes are kept apart behind Face ID. Without encryption, they are synchronized with your account like your other notes.

If you turn on encryption for hidden notes, each hidden note and its attachments are encrypted on your device with a key derived from your passphrase before they are synchronized. The passphrase and the key never leave your devices; your account stores only the encrypted notes and what is needed to check the passphrase. Nucleus cannot read encrypted notes, and cannot recover them if you forget the passphrase.

Working with other Nucleus apps

Notes exchanges data with other Nucleus apps only through your Nucleus ID account, and only after you allow it. Each permission is shown on a Nucleus ID consent page before it is granted, and can be withdrawn by disconnecting the app in your account.

Plugins that show a Todo list or a Watchlist title in a note are off by default. When you turn one on, Notes reads your Todo lists or your Watchlist library from your account to show them, and, for Todo, sends the tasks you check off or add back to Todo. Nothing is read or sent while the plugin is off.

If you allow another app, such as Todo, to see your notes, Notes publishes a list of your notes to your account for that app: each note’s title, a short snippet, its color, folder and checklist progress. Hidden, encrypted, trashed and archived notes are never included, and a locked note is listed by its title only. If you allow an app to add notes, the notes it asks for are created in Notes.

Legal basis: performance of the service you requested (GDPR Art. 6(1)(b)).

Problem reports

A report can be submitted from Settings → Report a problem, or by shaking the device (this can be disabled). No report is transmitted until you select Send.

A report contains the title and description you enter, any screenshots you attach, an email address if you provide one, and the app version, device model, iOS version and language. Notes includes no other data. In particular, none of your notes or attachments are included.

Screenshots may show your notes or other personal details. You are responsible for reviewing them before attaching them to a report.

Reports are stored on our server in the Czech Republic and are accessible only to the Nucleus team. They are used solely to investigate the reported problem and to reply to you. They are not sent by email, disclosed to third parties or used for any other purpose, and are deleted automatically after 6 months.

Legal basis: our legitimate interest in resolving reported problems and responding to you (GDPR Art. 6(1)(f)).

Deleting your data

Deleting a note moves it to the Trash, where it is kept for 30 days and then deleted on all your devices and from your account. Deleting the app removes everything it stored on the device.

Disconnecting Notes in your account and choosing to delete its data removes your notes, attachments and anything it published for other apps from our server immediately. Deleting your Nucleus ID does the same for every app.