Legal

Privacy policy

Effective May 15, 2026 · Last updated May 15, 2026

This policy describes how Honest Efforts LLC ("we") handles personal data when you use yestonotes (the "Service"). We aim for plain language. If anything here is unclear, write to contact@yestonotes.app.

The short version

Your captures are yours. Captures are your inputs to the Service — text you type or audio you record. We store them so the Service works for you; we don't sell them, share them with advertisers, or use them to train models.
AI never rewrites your text. Our AI groups your captures by topic; it doesn't modify your words.
Audio is transient. Voice recordings are temporary — used only to convert speech to text. The audio is transcribed in seconds, then immediately discarded. We keep only the resulting text.
You can leave at any time. Email contact@yestonotes.app from the email you signed up with, and we'll handle your data-export or account-deletion request manually.

What we collect

From you, directly:

Email address, name, and authentication credentials — handled by Clerk (see "Third-party processors" below).
Captures: the text you type, or the audio you record (which we transcribe to text and then discard).
Payment information — handled by Stripe; we don't see or store full card numbers.

Automatically, when you use the Service:

Timestamps on your captures, the topics our AI assigns, and any edits or state changes you make.
Server logs (IP address, request time, route) for security and debugging. Retained for up to 30 days.
Subscription state from Stripe (active / canceled / past due) via webhook.

We do not collect: contact lists, location, browser-fingerprint data, advertising identifiers, or third-party tracking cookies.

How we use it

To operate the Service: store your captures, classify them, surface them in the views, etc.
To bill you for your subscription.
To respond to support requests you send us.
To detect abuse or security threats and to comply with legal obligations.

Audio handling

Audio recordings are sent to a transcription provider to convert speech to text. The transcript is returned in seconds, and the audio file is discarded immediately after. We don't archive, listen to, or review your recordings.

AI processing

When you save a capture, its text is processed by our AI provider to group it by type and topic. The AI does not modify your words — it only sorts and groups them. We do not authorize our AI providers to use your data for training their models.

Third-party processors

We use the following services to operate yestonotes. Each receives only the data needed to perform its function:

Clerk — authentication and user identity. Receives: your email address, password (hashed by Clerk, never visible to us), and any social-login tokens. Clerk privacy policy.
Stripe — payment processing. Receives: payment-method information you provide on Stripe's hosted checkout. We see only the resulting subscription state and customer ID, never card numbers. Stripe privacy policy.
Neon — database hosting. Stores: your captures, signals, topics, subscription state. Encrypted at rest. Neon privacy policy.
OpenRouter (running Anthropic / Meta models) — AI classification. Receives: the text content of your captures, briefly, to compute the classifier output. Not retained for training. OpenRouter privacy policy.
Groq — audio transcription. Receives: your audio recordings, briefly, to compute the transcript. Audio is discarded after transcription. Groq privacy policy.
Vercel — hosting, content delivery, and aggregate traffic analytics. Receives: standard web-server request metadata (IP, user agent, etc.) to serve the app, plus anonymized, cookie-free page-view counts via Vercel Analytics. Vercel privacy policy.

We don't share your data with anyone else without your consent, except where required by law.

Cookies & analytics

We use only the cookies strictly necessary to keep you signed in (managed by Clerk). We don't use advertising cookies or third-party trackers.

We use Vercel Analytics for aggregate, anonymized traffic insights — counting page views and visitors without building per-user profiles. Vercel Analytics is cookie-free, does not identify individual users, and does not share data with third parties.

Data retention

Your captures and account data are retained as long as your account is active.
Server logs are retained for up to 30 days, then deleted.
Audio recordings are discarded within seconds of transcription — never persisted.
If you delete your account, all your captures and personal data are removed from our database within 30 days, except where legal obligations (e.g., tax records for paid subscriptions) require longer retention of specific records.

Your rights

You have the right to:

Access a copy of your data — email contact@yestonotes.app from your account email to request it.
Correct inaccuracies — most data (captures, topic names, etc.) is editable directly in the app.
Delete your account and all associated data — email contact@yestonotes.app from your account email.
Object to specific processing, or withdraw consent — same address.

We respond to verified requests within 14 days.

Security

We use industry-standard security practices, including encryption in transit and at rest. No system is perfectly secure, but we treat security incidents seriously and will notify affected users within 72 hours of a confirmed breach.

Children

yestonotes is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has provided us data, email contact@yestonotes.app and we'll delete it.

Changes to this policy

We'll update this policy as our practices evolve. Material changes will be communicated by email to your account address at least 14 days before they take effect.

Contact

Questions, requests, or concerns: contact@yestonotes.app.