1. A clear starting point
Noted is developed and operated by an independent developer under the BeeWorks Studio brand. This policy explains how information is handled when you use the iPhone app and this website. Contact Noted at support@beeworksapps.com for privacy questions or requests.
2. Information you choose to provide
Noted can hold your account email and sign-in identifiers; optional profile information such as name, birthday, gender and avatar; and the financial records you enter or import. Financial records may include account names, last-four card/account identifiers, balances, transactions, categories, budgets, goals, assets, debts and payment plans. Do not enter your bank password, full payment-card number or security code.
3. Local financial records and your account
The app stores its financial ledger on your device. Signing in supports identity and cloud-powered features; it does not by itself mean your financial ledger is synchronized across devices. Device or operating-system backups, where applicable, are separate from Noted’s cloud processing. Keep exports or backups you need before erasing data or changing devices.
4. Bank messages and app notifications
Noted does not have general access to your iPhone SMS inbox or notification history. You configure Apple Shortcuts to forward selected messages or supported notification content. Forwarded content can contain amounts, merchant/sender names, dates, last-four identifiers and other text included by your bank. When you use automatic analysis, this content is sent securely to Noted’s backend and OpenAI to extract transaction details. You control the automation and may disable it in Shortcuts. Do not forward unrelated personal messages.
5. Voice and AI processing
When you record a voice transaction, the recording is sent to Noted’s backend and OpenAI for transcription and structured extraction. Recordings may contain your voice, names and financial information you speak. To match the transaction, the request also includes saved account names and identifiers, bank names, currencies, account types, category names and the recording date/time. Noted does not intentionally retain voice recordings as permanent audio records; temporary capture files are removed when processing completes or the recording is discarded. Failed/interrupted processing can require temporary files until cleanup. Providers apply their own retention and security policies. AI can make mistakes: check uncertain details before recording.
6. Service providers
Supabase provides authentication, backend functions and associated service infrastructure. Resend may deliver account verification and password-reset emails on our behalf; email delivery involves the recipient address and authentication-message content. OpenAI processes messages and voice submitted for AI analysis. Apple handles App Store purchases, subscription receipts and applicable platform services; Google handles Google sign-in when used. Public market and exchange-rate providers, including GoldAPI, supply reference prices through Noted’s backend. We send market lookup parameters such as currency/metal codes rather than a personal financial ledger for those quotes. GitHub hosts this website through GitHub Pages. The website contact form prepares a draft in your chosen email application. The website does not send or store the form contents on a server. If you choose to send the email, your email provider and BeeWorks Studio’s Google Workspace inbox process its contents, including any name, email address, subject and message you include.
7. Why information is processed
We use information to provide the features you request, authenticate accounts, validate access, prevent misuse, manage subscriptions and usage limits, calculate your views, respond to support requests and troubleshoot failures. Technical request metadata, timestamps, account identifiers and usage counters may be processed for these purposes. Where applicable law requires consent for optional processing, you may withdraw it by stopping that feature. We do not sell personal information or share it for behavioral advertising.
8. Retention and deletion
Financial records remain on your device until you delete them or erase local data. The app’s Message review history is configured for 31-day retention; cleanup occurs when the app runs, and deleting review history does not delete a recorded ledger transaction. Queued captures can remain temporarily for retry. Usage counters and operational logs are retained for service protection and troubleshooting under the backend’s retention settings. Provider backups and legal obligations can affect when deleted data is fully removed. Use Delete my account in the app for account-associated cloud and local deletion; Erase Local Device Data is a separate action. Deleting Noted or its account does not cancel an Apple subscription.
9. Your choices and rights
You can edit or delete local records, export financial history, adjust app permissions, stop automations and request help through the support email. Depending on your location, you may have rights to access, correct, delete or restrict processing of personal information, or complain to your local supervisory authority. We may need to verify identity before handling an account request. Do not email bank credentials or an unredacted financial export unless specifically needed and agreed.
10. Security and international processing
Noted uses platform protections, authenticated backend requests and encrypted transport. No system can guarantee complete security. Service providers may process information in countries other than your own. Applicable provider terms and legal safeguards govern those transfers. Keep your device and account secure, and review the information you choose to send.
11. This website and children
This static website does not include advertising trackers, analytics scripts or marketing cookies. GitHub Pages may process technical access information, including IP addresses, under GitHub’s privacy statement. Opening a direct email link uses your chosen mail application. The contact form opens your chosen email application; you decide whether to send the draft. Support messages are retained as needed to respond and maintain a support record; you can request deletion, subject to legal obligations. Noted is not directed at children under 13; any applicable age or parental-consent requirements still apply.
12. Updates and contact
We will update the date on this page when the policy changes, and provide additional notice where required. For privacy and support, email support@beeworksapps.com. See also GitHub’s privacy statement, OpenAI’s privacy policy and Supabase’s privacy policy.