Privacy notice

We store the notes, recordings and tasks you create, because that is the product. We do not sell them, we do not use them to advertise to you, and we do not let other users see them. You can remove them from the app, ask us to erase them for good, and ask us for a copy.

Wherever Note is operated by Sympl. For UK GDPR purposes we are the data controller for the personal data described here. If you want to reach us about anything on this page — including any of the rights below — email us at privacy@besympl.com.

Your account. Your email address, a display name, and an encrypted form of your password. We never store your password in a form we can read.

What you put in. The notes you write, the voice recordings you make, the text transcribed from those recordings, the tasks you create, the lists and spaces you organise them into, and any files you attach.

Basic technical records. Sign-ins and significant account events, so we can investigate problems and abuse. This includes limited technical information such as timestamps.

For running your account and providing the app, our lawful basis is performance of a contract with you. For keeping the service secure and preventing abuse, our lawful basis is our legitimate interests. Where we ever rely on consent — for example, your browser asking permission to use the microphone — you can withdraw it at any time.

Recording only happens when you deliberately start it. Your browser or phone will ask for microphone permission first, and you can refuse or revoke it — the rest of the app still works.

Recordings are stored privately, scoped to your account, and are not publicly accessible.

Be aware of how deletion currently works. Deleting a note in the app hides it: it disappears from your lists and searches, but the recording behind it is retained on our storage and is not erased at that point. If you want a recording actually deleted, email us at privacy@besympl.com and we will erase it. We are building self-service erasure into the app; until it is there, asking us is the way to get it done.

Your content is isolated to your own account. Other users of Wherever Note cannot see it. If you later choose to turn your personal account into a shared workspace and invite colleagues, the people you invite will see the content in that shared workspace — that is the point of inviting them, and it only happens because you did it.

We use a small number of service providers to run the product, principally our hosting and database provider (Supabase, with your data held in the EU, eu-west-1) and our application hosting provider (Vercel). They process data on our instructions and are not permitted to use it for their own purposes.

We do not sell your personal data, and we do not share it with advertisers.

We keep your content for as long as your account exists. Deleting a note or task in the app hides it from the live service; as described above, the recording behind a deleted note is retained until you ask us to erase it. Where content is erased, residual copies may persist in encrypted backups for a limited period before being overwritten in the ordinary course.

If you ask us to close your account, we delete your content. Limited records may be retained where we are legally required to keep them.

Under UK GDPR you have the right to access your data, to have inaccurate data corrected, to have your data erased, to restrict or object to how we use it, and to receive a copy in a portable format. To exercise any of these, contact us and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.

If we change this notice in a way that materially affects you, we will tell you rather than quietly updating the date at the top.