← Back

Privacy Policy

Data controller

David Gimenez Escude — david@kreamedia.com

Data we collect

We store the data the service needs to work: email address, password (encrypted) and, if you fill them in, your name, nickname, bio and social links.

Also the content you create: notes, tasks, places, links, books, time entries, billing periods, and the files you upload (images and documents).

Precise location

Photos taken on a phone usually carry the GPS coordinates of where they were taken. When you upload a photo, AppNoted reads those coordinates from the file's metadata and stores them alongside the item, to six decimal places, so it can be placed on the map.

The image served to other people is converted to WebP, which drops the metadata, so the coordinates do not travel inside the photo. They are stored as item data and you can remove or change them by editing it.

AppNoted does not access your device location: it never asks for that permission and does not track where you are. The only location stored is the one already inside the photos you choose to upload, or the one you type in when creating a place.

Content you choose to publish

AppNoted is private by default. If you mark an item as public it appears in Discover, visible to anyone. If you generate a share link for a collection, whoever has that link can view it without an account, and you can revoke it at any time.

When an item is published we strip its coordinates, except where the item is a place and the location is the content.

Where data is stored, and who processes it

Data and files are hosted on Hetzner servers in the European Union (Germany and Finland). Hetzner also provides the mail service used to send verification and password reset messages. Maps are provided by Mapbox, which receives what you type when searching for an address.

There is no other third party: no analytics, no advertising, no tracking.

Waiting list

If you leave your email on the home page, we store it along with the language you were reading the page in, so we can tell you when there is room and do it in your language. Nothing else: not your IP, not your browser, not where you came from. That address is not used for anything else and you can ask us to delete it by writing to david@kreamedia.com.

How long we keep it

For as long as you have an account. You can delete it from Settings or at appnoted.com/delete-account; you will be asked for your password. Deleting it removes your files from storage and then all of your data: items, collections, time entries, billing periods, notifications and followers. No copy is kept pending, no grace period, and it cannot be undone.

Database backups are kept for a limited time for technical reasons and are overwritten as they rotate.

Use of data

Your data is used exclusively to provide you with the AppNoted service. We do not sell, share, or transfer your personal data to third parties for commercial purposes.

Cookies and tracking

AppNoted does not use tracking cookies, third-party analytics tools, or advertising. We only use browser local storage (localStorage) to maintain your session and preferences.

Security

Passwords are stored encrypted. Communications are made over HTTPS. We apply reasonable security measures to protect your data.

Your rights

You may exercise your rights of access, rectification, deletion, and data portability by contacting david@kreamedia.com. We will respond within the legally established timeframe.

Updates

This policy may be updated. The date of the last update is indicated below.

Last updated: August 17, 2026