Privacy Policy
What we collect, why, and what you can do about it.
Last updated: 30 September 2026
This policy explains what personal data Neu Notes collects, why, who else handles it, and the choices you have. Neu Notes is made by Samastam in India and can be used from anywhere. In this policy "we" and "us" means Samastam, and "you" means anyone who uses the website, the web app or the mobile app.
In short
- We collect what we need to run your account: your email, your password (stored only as a hash), your notes and files, and your plan.
- We don't show ads, we don't sell your data, and we don't use analytics or tracking cookies.
- Your notes are yours. We use them only to sync, search, back up and export them for you.
- You can export everything at any time and delete your account in Settings.
What we collect
| Your account | Email address, a display name (by default the part of your email before the @), your password as a one-way hash, and, if you turn on two-step sign-in, its secret and your backup codes (stored as hashes). |
|---|---|
| Your notes | Everything you put into Neu Notes: notes, notebooks, stacks, tags, saved searches, attachments, and notes you import from .enex, Markdown or HTML files. This includes text we read from images and PDFs so you can search them (see Reading text in images). |
| Sign-in sessions and devices | For each signed-in session: the IP address and the browser or device type (user agent) it signed in from, and when. For each device or browser extension you connect: a token (stored as a hash) and when it was last used. |
| Your plan | Whether you're in the free trial or subscribed, which plan, the currency, when it renews or ends, and the store you bought it in. We never receive or store your card or bank details; the payment provider handles those. |
| Emails with us | What you write when you contact support, and a record of the emails we send you (such as sign-up confirmation, password reset, export links and renewal reminders). |
We don't ask for your location, contacts, phone number, date of birth or any sensitive personal data. If you choose to write sensitive information into a note, it is stored like the rest of your notes and used only to provide the service.
What stays on your device
Neu Notes keeps a full copy of your notes on your device so it works offline. On the web this is your browser's storage for https://app.neunotes.samastam.xyz; on your phone, the app's storage. The website and app also remember small settings on your device, such as your theme, the currency shown on the pricing page and unsaved drafts. None of this is used to track you. Signing out removes your notes from that device once they're safely in your account.
Cookies
We use one kind of cookie: the sign-in cookie that keeps you signed in to the web app. It is needed for the service to work, so there is nothing to opt into or out of. We use no advertising, analytics or third-party tracking cookies, and the website loads no third-party scripts.
How we use your data
- To provide Neu Notes: create your account, sign you in, sync your notes between your devices, store your files, make them searchable, and export them when you ask.
- To keep your account safe: check sign-ins, run two-step sign-in, limit repeated attempts, and investigate abuse.
- To handle your plan: know whether your account can write, and email you 7 days before each renewal.
- To talk to you: send the emails the service needs and answer your questions. We don't send marketing email or newsletters.
- To meet the law: keep records we are required to keep and respond to lawful requests.
We don't read your notes. We don't use them to train AI models, to profile you or to target ads. People at Samastam look at account data only when you ask us to (for example in a support request), or when it is needed to keep the service secure or to meet a legal obligation.
Reading text in images
To make scans, photos and PDFs searchable, their images are sent once to a text-recognition service (Google Cloud Vision) and the text it finds is saved with your note. The service processes the image on our behalf only and doesn't keep it for its own use. Imported notes whose .enex file already carries recognised text are not sent.
Why we're allowed to use it
We use your data because you asked us to provide Neu Notes to you by creating an account (our agreement with you, the Terms of Service), because you consented, because we have a legitimate interest in keeping the service secure and working, or because the law requires it. Where we rely on your consent, you can withdraw it at any time; the simplest way is to delete your account.
Who else handles your data
We use a small number of service providers to run Neu Notes. They process data only on our instructions and only to provide their service to us.
| Dodo Payments | Web payments. Dodo Payments is the merchant of record: it sells you the subscription, takes your payment, calculates tax and issues your receipt, under its own privacy policy. We receive your plan, its status and your currency, never your card details. |
|---|---|
| Google Play and RevenueCat | Purchases made in the Android app. Google handles the payment; RevenueCat tells us whether your subscription is active. |
| Cloudflare | Serves the website and the web app, and stores your attachments (R2). |
| Fly.io | Runs our servers. |
| Neon | Hosts our database, which holds your account and notes. |
| Postmark | Sends our emails and, if you use it, receives the notes you email in. |
| Google Cloud Vision | Reads text in images and scanned pages so you can search them. |
We don't sell or rent your personal data, and we don't share it for advertising. We disclose data to others only if you ask us to, if the law or a valid legal order requires it, to protect people's safety or our rights, or as part of moving Neu Notes to another company (for example to Neuron, the company we plan to set up). In that case this policy, or one at least as protective, continues to apply and we'll tell you first.
Where your data is kept
Our providers run in data centres in several countries, including the United States and the European Union, so your data may be stored or processed outside the country you live in, including outside India. We choose providers that protect data with safeguards recognised by law, such as the European Commission's Standard Contractual Clauses, and we transfer data only where the law allows it.
How long we keep it
| Your account and notes | As long as you have an account. Notes you delete go to Trash until you empty it or restore them. |
|---|---|
| When you delete your account | Your account, notes and sessions are deleted from our database at once. Attachments and export files are removed from storage within 30 days. Copies in our providers' backups are overwritten on their normal cycle, within 30 days. |
| Export files | 7 days after we email the link, then deleted. |
| Payment records | Kept for as long as tax and accounting law requires. |
| Support emails | Up to 2 years after the conversation ends, unless you ask us to delete them sooner. |
If your trial or subscription ends, your account turns read-only and we keep your notes so you can still open, search and export them. We don't delete a read-only account on our own; you decide when to delete it.
Your rights and choices
Wherever you live, you can:
- See and get a copy of your data: export all your notes in Settings › Export (ENEX, HTML or Markdown), or ask us for a copy of the account data we hold.
- Correct it: edit your notes and account details in the app, or ask us.
- Delete it: delete your account in Settings › Delete account, or ask us.
- Withdraw consent and object to or limit how we use your data.
- Nominate someone to act for you if you die or can't act yourself (a right under Indian law).
- Complain: to us first, and if you're not satisfied, to your data protection authority. In India this is the Data Protection Board of India; in the EU or UK, your local supervisory authority.
If you live in California or another US state with a privacy law, you have the rights above, including to know, delete and correct your data. We don't sell or share personal data for targeted advertising, so there is nothing to opt out of, and we'll never treat you differently for using your rights.
To make a request, email support@samastam.xyz from the address on your account. We may ask you to confirm it's you. We reply within 30 days.
Security
Every connection uses HTTPS, our database and file storage are encrypted at rest, passwords are stored only as hashes, and two-step sign-in is available. Your notes are not end-to-end encrypted, except text you lock with your own passphrase. The security page says exactly what is and isn't encrypted. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how we use your data in a meaningful way, we'll email you at least 30 days before it takes effect.
Contact us
For any privacy question or request, write to support@samastam.xyz. Neu Notes is made by Samastam, India.
Grievance Officer
Grievance Officer, Samastam: support@samastam.xyz. We acknowledge every complaint within 48 hours and resolve it within one month.