Privacy Policy

1. Who we are

Tavora Notes is provided by Tarnivo Labs LLC ("we", "us"). We are responsible for the personal information described here, which we collect through the Android app, the web app at tavoranotes.com and this website. You can reach us about privacy at support@tavoranotes.com.

2. What we collect

If you use the Android app without an account

Your notes stay on your device and we receive none of them. Two features rely on services built into Android: handwriting search uses Google's handwriting recognition, which works on the device, downloads its language models from Google and sends Google performance and usage statistics about those features; and voice notes are transcribed by your device's speech-recognition service, which, depending on the device and its language packs, works offline or sends the audio to its provider, such as Google.

Account information

Your name, email address and a hashed version of your password. If you sign in with Google, we receive your name, email address, profile picture and Google account identifier from Google; we never see your Google password.

Content you sync

When cloud sync is on, or when you use the web app: your notes, handwriting, typed text, pages and canvases, folders, collections and tags, journal entries, calendar events, to-dos and alarms, voice recordings and transcripts, files and PDFs you add to notes, and the PDFs you keep in Your files with the changes you make to them.

Content you send to a feature

The questions, note content and attachments you send to Tavora AI, the documents you send to an online PDF tool, and a PDF you choose to send so its own words can be changed in the web app.

Plans and payments

Your plan, its status and dates, the country and currency it was bought in, records of payments and refunds, and when you asked a plan bought on this website to start at once. Card details are handled by our payment processor on this website, by Google Play in the Android app, and by Apple for anything bought through Apple; we do not receive or store full card numbers. For a purchase in an app store, the store tells us which plan it is for and whether it is paid, and gives us a purchase reference that we keep to check it.

Devices, sessions and logs

The devices signed in to your account, so you can see and sign them out; a history of sign-ins (the time, IP address and device) to protect your account; a record of the days you used the Service; and technical logs such as IP addresses, browser or app versions, times and errors, which we use to keep the Service secure and working.

Usage counters

How much of your AI allowance, generated images and PDF tool jobs you have used this month, and how much cloud storage, so we can apply your plan's allowances.

Sharing

When you share a note or a folder, we keep the email addresses you invite, the role you give each person, and when they joined and last opened a note. For a public link, we count how often it is opened and keep when it was last opened; we do not record who opened it, beyond the technical logs described below.

Reports and blocks

If you report a shared note, folder, link, person or AI answer, we keep your report and what you wrote in it, with a copy of what it is about: the note's title and the start of its text (for a folder, the titles of its notes) and the reported person's name and email address, or the AI answer and the question before it. If you report a link without an account, we keep the name and email address you give us, if any, so we can tell you what we decided. If you block someone, we keep who you blocked, with the name and email address they had then.

Problem reports

If you use Report a problem in the app, we keep what you write, the topic you choose, any screenshots you add (at most two), the part of the app you were in, the app's version, your browser or device type and language, and a one-way hash of your IP address rather than the address itself. Screenshots are saved as new images, without the location or other data a picture file can carry. A screenshot shows whatever was on your screen, so leave out anything you would rather we did not see. Only the people who handle support can open a report.

Saved signatures

Signatures and initials you save stay on your device. On a paid plan you can turn on Keep my signatures in my Tavora account to use them on your other devices; it is off until you turn it on, and we note when and on which device you did. We then keep each signature as a picture, encrypted with a key made for your account alone, and only you can open it when signed in. Turning it off deletes them from our servers straight away; each device keeps its own copies.

Messages

What you write to us when you ask for help, and our replies.

Usage data

Which features of the apps you use and when, never what you write. Section 6 explains it.

We do not use advertising identifiers or third-party analytics or tracking tools, and we do not collect your location or contacts.

3. How we use it

To provide the Service: sync, the web app, Tavora AI, the PDF tools and your plan's features.
To create and secure your account, sign you in, and prevent fraud and abuse.
To take payments, apply allowances and keep the records the law requires.
To send service email, such as address verification, password resets and important changes to the Service or these policies. We do not send marketing email.
To answer your messages and fix problems you report.
To review reports, protect people from abuse, and act on content that breaks our rules.
To find faults and improve reliability, using logs and error reports.
To see which features are used and how, so we can decide what to improve, using usage data.

We do not sell your personal information, share it for advertising, or use your content to build profiles about you.

4. Legal bases

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

Contract: to provide the Service you signed up for, including the features you choose to use, such as sync and Tavora AI.
Legitimate interests: to keep the Service secure, prevent abuse, review reports, fix faults, answer messages and learn which features are used (usage data), in ways you would expect.
Legal obligation: to keep payment and tax records and to respond to lawful requests.
Consent: where we ask for it, such as for microphone access. You can withdraw it at any time.

5. Tavora AI

Tavora AI runs only when you ask it something. The content of that request (your question, the part of your notebook you chose and anything you attach) is sent to third-party AI providers so they can produce an answer.

Some of our AI providers may use the requests they receive to train and improve their models. Keep passwords, identity or payment numbers, health information and other people's confidential information out of AI requests. Content you never send to Tavora AI is never shared with an AI provider.

We keep your AI conversations in your account so you can return to them, until you delete them or your account. We also log each request's time, model, size and cost for 30 days to apply allowances and find faults, recording the account as a salted hash rather than your account ID. AI and Your Data has the details.

6. Usage data

The apps record how they are used: which screens, features and tools you use (for example which pen or PDF tool), how often, when and for how long, and whether it worked. Each record also carries the app's version, the device type (phone, tablet or computer), the language and time zone, your plan, your approximate country and a random identifier for the app on that device.

It never includes what you write or draw, the names or contents of your notes and files, what you search for, or what you ask Tavora AI.

We use it to keep Tavora working and to decide what to improve, relying on our legitimate interests. When you are signed in, it is linked to your account. Detailed records are kept for 90 days and daily summaries for 13 months; totals that identify no one may be kept longer. Deleting your account deletes the usage data linked to it.

To stop it, turn off Share usage data in Settings, in the Android app or on the web. Nothing more is recorded, and records not yet sent are deleted. Signed in, the choice applies to your account; signed out, to that device.

We share personal information only with the service providers that help us run the Service, and only as far as each needs. They may use it only to provide their service to us, except that some AI providers may use requests to train their models, as section 5 explains.

Hosting and storage providers, whose servers run the Service and its database, deliver and protect our website, and store your files, voice recordings and attachments.
Our email provider, which sends our service email and receives mail sent to our support address.
Google, for Sign in with Google and Google Play purchases if you use them, and for the Android features described in section 2.
Our payment processor, which receives your name, email address, billing address and payment details to take a payment on this website. It is the merchant of record for the purchase: it also works out tax, sends receipts and answers payment questions, and handles your details under its own privacy policy.
Apple, for purchases made through Apple, if we offer our app on Apple devices and you buy there.
AI providers, for Tavora AI requests and document translation, as AI and Your Data explains.

When you share a note or a folder, the people you invite can read it and, if you let them, edit it; they see your name and email address, and you see theirs. Anyone who has a link you make can read the note, the files attached to it and your name, until the link expires or you turn it off. What others add to a note you shared stays in your note, in your account. If you report a shared note, folder, link or person, they are not told who reported them, and if you block someone, they are not told either. For a copyright complaint, the person who complained and the person who shared may receive each other's names and contact details, as the Terms of Service describe.

The online PDF tools other than translation, and changing a PDF's own words in the web app, run on our own servers. We may also disclose information when the law requires it, to protect the rights and safety of people or of the Service, or to a company that takes over our business, which would remain bound by this policy. We report apparent child sexual abuse material, with the account details needed, to the National Center for Missing and Exploited Children, as US law requires.

In the web app, live transcription of a voice note uses your browser's own speech recognition, which some browsers, such as Chrome, carry out on their maker's servers.

8. International transfers

We are based in the United States, and our providers process data in the United States and other countries. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on the safeguards the law provides for, such as the European Commission's standard contractual clauses, where they are required.

9. How long we keep it

Your content stays until you delete it. A note you move to Trash stays there for 30 days, then it is deleted from your devices and our servers. A deleted note can still be recovered for 30 days after that, and is then gone.
Earlier versions of a note are kept for 30 days, at most 40 for each note, so you can restore one; they stay for those 30 days after the note is deleted too. Copies kept so that edits made on two devices can be combined are deleted 14 days after a device last needed them, or when the note is deleted.
When you pause cloud sync, your synced content stays as it was until you turn sync back on or delete it.
When you delete your cloud copy in the apps' settings, sync stops and your synced content is no longer shown on the web or through shared links. It is kept for 30 days so you can change your mind, and is then deleted from our servers. Copies in backups are deleted as those backups expire, within a further 30 days. Notes on your devices are not affected.
When a paid plan or the free trial ends, cloud sync stops and your synced content, with the signatures you kept in your account, is kept for 30 days. During that time you can still read it in the web app and download all of it as a ZIP file, and if you resubscribe, everything is kept. We email you when the plan ends, 7 days before the deletion and 1 day before it. After 30 days, your synced content is deleted from our servers, and copies in backups are deleted as those backups expire, within a further 30 days. Nothing is deleted while a plan is still paid, in an app store's grace period, or paused or on hold in the store. Notes on your devices are not affected.
When you move to a smaller plan, nothing is deleted. If your synced files are larger than the new plan's storage, new uploads wait until there is room again; your notes keep syncing.
When you delete your account, we delete your account, synced content, AI conversations, the signatures you kept in your account, the problem reports and other reports you made, and the people you blocked. Copies in backups are deleted as those backups expire, within 30 days. Deleting your account explains how, with or without the app.
Documents sent to an online PDF tool, and their results, are deleted within a day.
A PDF you send to change its own words in the web app is deleted when you download the result or leave it, and at the latest 30 minutes after your last change. If the PDF has a password, the password is used only to open it and is not stored.
PDFs you add so Tavora AI can answer questions about them are kept for 30 days, or, on Premium with cloud sync on, in your cloud library until you delete them.
The AI usage log is kept for 30 days.
Sharing: who a note or folder is shared with is kept while it is shared. An invitation stays until it is accepted, declined or removed, or the sharing stops.
Reports are kept for up to a year. Reports about an account are kept for that time even if the account is deleted, so that abuse cannot be erased by deleting an account. What we report to the National Center for Missing and Exploited Children is kept for a year, as US law requires.
Problem reports, with any screenshots in them, are kept for up to a year so we can look into the problem and answer you, and are then deleted.
Signatures you keep in your account stay until you delete them or turn the option off, and are deleted with your synced content 30 days after a paid plan or the trial ends.
Sign-in history is kept for 180 days, and the record of the days you used the Service for 400 days.
Usage data is kept in detail for 90 days and as daily summaries for 13 months.
Payment notifications from our payment processor and the app stores are kept for 90 days.
Payment records are kept for as long as tax and accounting law requires.
Logs are kept only as long as they are needed for security and troubleshooting.
Support messages are kept as long as needed to help you and keep a record of what we agreed.

10. Security

We protect your information with encrypted connections (TLS), hashed passwords, sign-in cookies that scripts cannot read, a database that cannot be reached from the internet, and access limited to the people who need it. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

11. Your rights and choices

Depending on where you live, you have the right to access your personal information, correct it, delete it, receive a copy of it, object to or restrict how we use it, and withdraw consent. You can use many of these rights yourself:

Keep your notes on your device by leaving cloud sync off, switch it off at any time, choose what each device syncs, or delete your cloud copy from the apps' settings.
Download your synced notes and files as a ZIP file from Settings in the web app, at any time, including in the 30 days after a plan ends.
Do not use Tavora AI for anything you would rather keep to yourself.
Turn off Share usage data in Settings to stop usage data.
Delete notes, AI conversations or your whole account from the apps (how to delete your account).

For anything else, including a copy of your data, write to support@tavoranotes.com from the email address on your account. We will answer within 30 days, and may need to confirm it is you. We will not treat you differently for using these rights. You may also complain to the data protection authority where you live.

If you live in a US state with a consumer privacy law, such as California, you have the rights that law gives you, including to know, correct and delete your information. We do not sell or share personal information as those laws define it.

If you live in Türkiye, you have the rights in article 11 of the Law on the Protection of Personal Data (No. 6698), and you may complain to the Personal Data Protection Authority (KVKK).

12. Cookies and local storage

We use only cookies that are strictly necessary, and none for advertising or analytics:

A session cookie and a refresh cookie, set when you sign in, keep you signed in. Scripts cannot read them.
tavora_session, which records only that this browser is signed in, so tavoranotes.com opens your notes instead of this website. It is removed when you sign out.

The web app also keeps your preferences, such as the theme, and data it needs to work in your browser's storage. While Share usage data is on, that includes the usage records not yet sent and the app's random identifier for this browser; turning it off deletes them. The pages of this website set no cookies of their own and record no usage data.

13. Children

Tavora Notes is not meant for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has an account, write to support@tavoranotes.com and we will delete it.

14. Changes to this policy

If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect. The date at the top always shows the current version.

15. Contact

Privacy questions and requests: support@tavoranotes.com. Tarnivo Labs LLC, Albuquerque, New Mexico, USA.