← Back to Novyx Vault

Privacy Policy

Last updated: March 2026

What We Collect

Account data: Email address, display name, and authentication provider (Google, GitHub, or email/password). This is stored in Supabase and used solely for authentication.

Notes (cloud mode): When using cloud mode, your notes are stored in Supabase with row-level security. Only you can read your own notes. In desktop mode, notes stay on your local filesystem and never leave your machine.

AI Memory (Novyx): When you use AI features, conversation context and memories are stored server-side via the Novyx API. This enables persistent memory across sessions. Each user has an isolated memory space.

Analytics: We use Vercel Analytics, which collects anonymized page view data. No personal information or note content is included in analytics.

What We Do NOT Collect or Store

AI provider API keys: Your OpenAI, Anthropic, or other AI provider API keys are stored in your browser's localStorage only. They are sent to our server to proxy AI requests but are never persisted on our servers or in any database.

Note content for training: We do not use your notes or AI conversations to train any models. Your content is yours.

How Data Is Protected

All data in transit uses HTTPS/TLS. Supabase provides encryption at rest for stored data. Row-level security policies ensure users can only access their own data. The Supabase service role key is used server-side only and never exposed to clients.

Third-Party Services

Supabase: Authentication and cloud data storage. See Supabase Privacy Policy.

Novyx: AI memory and feature gating. See novyxlabs.com.

AI Providers: When you use AI features, your prompts are sent to whichever provider you configure (OpenAI, Anthropic, etc.) using your own API key. Their privacy policies apply to that data.

Vercel: Hosting and anonymized analytics. See Vercel Privacy Policy.

Data Retention

Your data is retained as long as your account is active. You can delete individual notes, clear AI memories through the Memory Dashboard, or request full account deletion. On account deletion, all associated data is permanently removed from Supabase.

Your Rights

You can export all your notes at any time via the app's export feature. You can view and delete your AI memories through the Memory Dashboard. You can delete your account and all associated data.

Changes

We may update this policy. Continued use after changes constitutes acceptance. Significant changes will be communicated through the app or via email.

Contact

Questions about your data? Reach us via GitHub Issues or at the Novyx Labs website.