← Back to Novyx VaultPrivacy Policy
Last updated: March 2026
What We Collect
Account data: Email address, display name, and authentication provider (Google, GitHub, or email/password). This is stored in Supabase and used solely for authentication.
Notes (cloud mode): When using cloud mode, your notes are stored in Supabase with row-level security. Only you can read your own notes. In desktop mode, notes stay on your local filesystem and never leave your machine.
AI Memory (Novyx): When you use AI features, conversation context and memories are stored server-side via the Novyx API. This enables persistent memory across sessions. Each user has an isolated memory space.
Analytics: We use Vercel Analytics, which collects anonymized page view data. No personal information or note content is included in analytics.
What We Do NOT Collect or Store
AI provider API keys: Your OpenAI, Anthropic, or other AI provider API keys are stored in your browser's localStorage only. They are sent to our server to proxy AI requests but are never persisted on our servers or in any database.
Note content for training: We do not use your notes or AI conversations to train any models. Your content is yours.
How Data Is Protected
All data in transit uses HTTPS/TLS. Supabase provides encryption at rest for stored data. Row-level security policies ensure users can only access their own data. The Supabase service role key is used server-side only and never exposed to clients.
Third-Party Services
Supabase: Authentication and cloud data storage. See
Supabase Privacy Policy.
Novyx: AI memory and feature gating. See
novyxlabs.com.
AI Providers: When you use AI features, your prompts are sent to whichever provider you configure (OpenAI, Anthropic, etc.) using your own API key. Their privacy policies apply to that data.
Vercel: Hosting and anonymized analytics. See
Vercel Privacy Policy.
Data Retention
Your data is retained as long as your account is active. You can delete individual notes, clear AI memories through the Memory Dashboard, or request full account deletion. On account deletion, all associated data is permanently removed from Supabase.
Your Rights
You can export all your notes at any time via the app's export feature. You can view and delete your AI memories through the Memory Dashboard. You can delete your account and all associated data.
Changes
We may update this policy. Continued use after changes constitutes acceptance. Significant changes will be communicated through the app or via email.
Contact
Questions about your data? Reach us via
GitHub Issues or at the Novyx Labs website.