Last updated: July 31, 2026
Kodeo Notes is provided by Kodeo Labs Ab, business ID 3122668-6, with an address at Småholmavägen 3 B 1, 22150 Jomala, Finland (“Kodeo”, “we”, “us”, or “our”).
This Privacy Policy explains how Kodeo Notes handles information when you use Notes Free, Notes Pro, or Notes Anywhere.
Notes Free and Notes Pro do not require an account.
Your notes, folders, settings, and preferences are stored locally on your device. Kodeo does not upload this content to its servers unless you choose to enable Notes Anywhere.
Deleting the app, clearing its storage, losing your device, or otherwise removing local app data may permanently delete locally stored notes unless you have created a backup.
Depending on your device and operating-system settings, app data may also be included in backups provided by Apple, Google, or another device backup provider. Those backups are controlled by the relevant provider and are subject to its privacy practices.
Notes Anywhere allows you to access and synchronize your notes across supported devices.
When you use Notes Anywhere, we process the following information:
We use this information to create and secure your account, send sign-in codes, provide synchronization, manage your subscription, and communicate with you about important service-related matters.
Notes Anywhere uploads and stores encrypted vault data, including:
This content is encrypted on your device before it is uploaded. It is decrypted only on devices where your vault has been unlocked using your passphrase, recovery key, or locally remembered cryptographic material.
Kodeo’s servers do not receive your passphrase or a usable unencrypted vault key. We are therefore unable to read, search, or manually recover your decrypted note content or folder names.
If you lose both your passphrase and your recovery key, we may be unable to recover your encrypted content.
End-to-end encryption does not cover all information associated with the service. To operate Notes Anywhere, we may process limited unencrypted metadata such as:
This metadata allows the service to identify records, synchronize changes, resolve conflicts, and operate your account. It does not include the readable contents of your encrypted notes or readable folder names.
When you connect to Notes Anywhere, our systems and service providers may process limited technical information, including:
We use this information only to provide the service, diagnose errors, prevent abuse, protect accounts, enforce rate limits, and maintain service reliability.
We do not use this information for advertising or behavioral profiling.
Your vault passphrase is used locally to unlock your encrypted vault.
If you choose Keep notes unlocked on this device, protected cryptographic material may be stored locally on that device so that your vault can be unlocked automatically.
Using Lock notes locks access to the vault until you enter your passphrase again, but may not remove remembered cryptographic material from the device. Using Forget this device removes the remembered cryptographic material.
Anyone who has access to an unlocked device may be able to access the notes available on that device. You are responsible for keeping your devices, passphrase, and recovery key secure.
Kodeo Notes uses RevenueCat to manage purchases, subscriptions, and access to paid features.
RevenueCat may process information such as:
When you are signed in to Notes Anywhere, purchase information may be associated with your Kodeo account so that your entitlement can follow your account across supported devices.
RevenueCat processes this information on our behalf to validate purchases, prevent purchase fraud, provide subscription functionality, and produce purchase-related reporting.
Purchases made through an app store are also processed by Apple or Google under their respective privacy policies. Kodeo does not receive your complete payment-card information from Apple, Google, or RevenueCat.
You can review RevenueCat’s privacy policy on RevenueCat’s website.
Notes Anywhere uses Resend to send sign-in and account-related emails.
The email provider receives the information needed to deliver those messages, including your email address and the contents of the service email.
We do not use your email address for marketing unless you separately and explicitly choose to receive marketing communications.
The Kodeo Notes web application may use Cloudflare Turnstile or similar security services to distinguish legitimate requests from automated abuse.
These services may process technical information such as your IP address, browser information, and interaction signals for security and fraud-prevention purposes.
We use trusted service providers to operate Notes Anywhere. These may include:
These providers may process information only as needed to provide their services to us or as otherwise described in their own privacy policies and legal terms.
We may also disclose information where reasonably necessary to comply with applicable law, respond to lawful requests, protect users, investigate abuse, or establish or defend legal claims.
We do not sell or rent personal information.
Where the General Data Protection Regulation or similar law applies, we rely on the following legal bases:
Some service providers may process information outside the European Economic Area, including in the United States.
Where required, we use legally recognized safeguards for international transfers, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.
Notes and settings used only with Notes Free or Notes Pro remain on your device until you delete them, clear the app’s data, remove the app, or otherwise remove the local storage.
Kodeo does not control copies stored in device backups or files you have exported.
We retain your account information and encrypted synchronization data while your account remains active and for as long as needed to provide Notes Anywhere.
Cancelling a subscription does not automatically delete your account or encrypted data.
When you delete your account:
Technical and security logs are ordinarily retained for up to 7 days, unless they are needed for a longer period to investigate abuse, a security incident, or a legal claim.
You can delete your Notes Anywhere account and associated server data from Settings > Account > Delete account in the Kodeo Notes web app.
You can also find account deletion instructions at kodeo.io/notes/delete-account or request deletion by contacting support@kodeo.io.
Deleting your account permanently deletes the encrypted copy stored by Kodeo after the applicable deletion and backup periods. It does not necessarily remove copies stored locally on your devices, in device backups, or in files you have exported.
Deleting your account does not automatically cancel subscriptions managed by Apple or Google. These subscriptions must be cancelled separately through the relevant app store.
Depending on where you live, you may have the right to:
Because note content and folder names are end-to-end encrypted, we cannot provide their decrypted contents directly from our servers. You can access or export readable content after unlocking your vault on an authorized device.
To exercise your rights, contact us at support@kodeo.io. We may need to verify that you control the relevant account before fulfilling a request.
We use technical and organizational safeguards designed to protect account information and encrypted data, including encryption in transit, access controls, rate limiting, and end-to-end encryption for supported vault content.
No service or storage method can be guaranteed to be completely secure. You should use a strong, unique passphrase, protect your recovery key, and secure every device on which your vault is unlocked.
We may update this Privacy Policy when the service, our providers, or applicable legal requirements change.
When changes are significant, we will provide reasonable notice through the app, website, email, or another appropriate method. The date at the top indicates when the policy was last updated.
Kodeo Labs Ab
Småholmavägen 3 B 1
22150 Jomala
Finland
Email: support@kodeo.io