We believe transparency is essential. Below is a detailed explanation of what data we collect, why we collect it, and how we protect it.
We store your email and profile details to keep your account secure, enable sign-in, and let you personalise your presence.
Every internote and map you create is stored so you can access, edit, and share your work from anywhere at any time.
We track which content resonates with you to show better recommendations and help you discover exactly what you're looking for.
We save your learning progress and uploaded files so you can pick up where you left off and maintain your complete history.
Welcome to Internote ("we," "us," "our," or "Internote"). We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. If you don't agree with our practices, please do not use our service.
This policy applies to all information collected through the Internote platform, including our website and any integrated services. We do not control third-party services linked from our platform, and you should review their privacy policies separately.
Service Delivery — To provide, maintain, and improve Internote's functionality, including storing your content, processing interactions, and enabling collaboration.
Personalisation — To deliver personalised recommendations, search results, and featured content based on your interests and engagement.
Analytics — To understand how users interact with the platform, identify trends, and prioritise feature development (all analysis is aggregated and non-identifying).
Communication — To send account-related notifications (password resets, sharing notifications) and, if you opt in, updates about new features.
Legal Compliance — To comply with laws, regulations, and legitimate legal requests.
Security — To detect, prevent, and address fraud, abuse, and security incidents.
Where Data Is Stored — All data is stored on Supabase, a secure PostgreSQL database platform hosted on AWS infrastructure. Data is stored in encrypted form in transit and at rest.
Access Controls — We use row-level security (RLS) policies to ensure you can only access your own data. Administrative access is strictly limited and monitored.
No Third-Party Sharing — We do not sell, trade, or rent your personal information to third parties. Your data is never used for advertising or marketing without your explicit consent.
Retention — Your account data is retained as long as your account is active. Upon account deletion, all personal data is permanently removed within 30 days. Public content you created may remain visible in archives if other users have saved or shared it.
Access — You can view all your profile information in your account preferences at any time.
Correction — You can update your profile information directly through your account settings.
Deletion — You can delete individual content items at any time. You can also permanently delete your entire account, which removes all associated personal data.
Export — Contact us to request a copy of your data in a portable format.
Opt-Out — You control the visibility of all your content (public/private). You can also opt out of non-essential communications in your preferences.
Authentication — We use secure, httpOnly cookies to maintain your authentication session. These cookies contain an encrypted access token and are essential for the service to function.
Vercel Analytics — We use Vercel Analytics to track page performance metrics and user interactions (Web Vitals). This helps us identify performance issues and improve your experience. Vercel Analytics does not use cookies and respects your privacy.
No Invasive Tracking — We do not use invasive analytics cookies (like Google Analytics) or tracking pixels to build behavioural profiles for advertising. We analyse aggregated data to improve the platform, not to track individuals.
Private Content — Internotes and maps marked as "private" are only visible to you and anyone you explicitly share them with. Private content is not searchable and does not appear in public discovery features.
Public Content — When you publish content as "public," it becomes searchable and may appear in recommendations, featured sections, and community discovery. Public content can be viewed by anyone on the internet.
Shared Content — When you share content directly with other users, they gain the permission level you specified (view or edit). You can revoke access at any time.
Internote is not intended for users under 13 years old. We do not knowingly collect data from children under 13. If we become aware that we've collected data from a child under 13, we will delete it immediately. Parents or guardians who believe their child has provided information should contact us at privacy@internote.co.
We may update this Privacy Policy occasionally to reflect changes in our practices or for legal reasons. We will notify you of material changes by updating the date at the bottom of this policy and, if required by law, by sending you an email. Your continued use of Internote following changes constitutes your acceptance of the updated policy.
If you have questions about this Privacy Policy, concerns about your data, or wish to exercise your rights, please contact us:
Email: privacy@internote.co
Support: support@internote.co
Last updated: March 1, 2026