Privacy Policy

• Core note-taking works without an account. Ordinary notes, note media, and most game data are stored locally on your device.
• Signing in does not enable full cloud backup or synchronization of ordinary notes and media.
• Online account, community, payment, and synchronization features send relevant information to the RelicNotes backend.
• Cloud AI is optional. When you choose OpenRouter, the content needed for the requested operation is sent to OpenRouter and the selected model provider.
• We do not sell your personal information for money or use your note contents for targeted advertising.
• You can make a privacy request by emailing [email protected].

This policy applies to relicnotes.com, the RelicNotes desktop application, and RelicNotes-operated online account and community services. It explains information processed by the RelicNotes operator.

Third-party services that you choose to use—such as Google, GitHub, Stripe, OpenRouter, an AI model provider, a local AI server, or YouTube—also process information under their own privacy policies. This policy does not control those independent services.

RelicNotes is local-first. Ordinary notes, folders, tags, media, most game progress, application settings, and your OpenRouter API key are stored in the local application environment rather than in your RelicNotes account profile.

• Local OCR, transcription, translation, embeddings, and supported local-model inference run on your device after any required model download.
• A daily local database backup may be created when the database changes. This is not an off-device backup.
• ZIP exports and game-data backups are created only when you use the relevant export or backup tools.
• Signing out does not delete local data. Uninstalling the app may not remove every local database, media, model, settings, or backup file.

The information processed online depends on the features you use.

• Account information: username, email address, account identifiers, password hash for email/password accounts, verification status, account status, and timestamps. Google or GitHub sign-in also provides an OAuth provider identifier and email/profile information requested through that provider.
• Community content: shared notes and their note blocks, descriptions, tags, collection information, comments, reviews, favorites, feature requests, votes, and community application descriptions.
• Social and optional profile data: friend requests, friendships, notifications, online status, last-active time, and pet or boss progress when those sharing options are enabled.
• Synchronized game data: diamond balance and permanent inventory-slot expansion capacity. Ordinary notes, note media, and ordinary inventory contents are not automatically synchronized as full cloud backups.
• Commerce records: Diamond purchases, quantities, amounts in cents, currency, and Stripe checkout session identifiers. Full card numbers and card security codes are handled by Stripe rather than stored in the RelicNotes commerce database.
• Support communications: your email address and the information, attachments, or diagnostic details you choose to send.

When you visit the website, hosting, security, and analytics providers may process technical information such as requested pages, IP address, browser or device information, timestamps, and approximate location. RelicNotes uses Vercel for website hosting and Vercel Analytics to understand website usage.

When you click a Windows or macOS download, RelicNotes records the selected platform, country, region when supplied by the hosting provider, and click time in its download analytics. The installer is retrieved through the website download service from the release host.

We use this information to deliver and secure the website, understand interest in platforms and pages, troubleshoot failures, and improve RelicNotes.

Cloud AI is optional and requires your configuration. When you use OpenRouter, the content required for that operation can include your prompt, relevant chat history, selected or automatically retrieved note content, flashcard source text, a question and expected answer, your typed answer, image OCR, audio transcripts, or related instructions. That content is sent to OpenRouter and the selected model provider for processing.

• Your OpenRouter API key is stored locally and is used to authenticate your OpenRouter requests. It is separate from your RelicNotes account.
• A properly configured local AI provider keeps prompts and note context on your local AI path. The local server or model software may have its own behavior and logs.
• AI-generated titles can use local processing first and may fall back to OpenRouter when that fallback is configured.
• YouTube embeds, title lookups, external link previews, model downloads, and update checks may contact the relevant external service. Core local note-taking does not require these connections.

• Provide, maintain, and improve the app, website, accounts, downloads, community, and synchronization features.
• Authenticate users, verify email addresses, prevent abuse, secure accounts, and troubleshoot errors.
• Process Diamond transactions, maintain purchase records, prevent fraud, and meet accounting or legal obligations.
• Display community content and optional social profiles to other users as directed by the relevant feature.
• Measure website and download usage and understand which features or platforms need attention.
• Respond to support and privacy requests and communicate about account or service issues.
• Enforce the Terms of Service and protect users, RelicNotes, and the public.

Where data-protection law requires a legal basis, we rely on one or more of the following:

• Contract: to provide accounts, community features, Diamond purchases, and other services you request.
• Legitimate interests: to secure and improve the service, prevent abuse, understand usage, and respond to inquiries, where those interests are not overridden by your rights.
• Consent: for optional processing where required, including certain third-party or cloud features. You may withdraw consent for future processing.
• Legal obligations: to maintain required records, respond to lawful requests, and comply with applicable tax, accounting, consumer, or other laws.

We may share information with service providers that support hosting, databases, email delivery, analytics, authentication, payments, security, and customer support. They receive information needed to perform services for us or for you.

• Shared community notes, usernames, comments, reviews, and optional pet or boss profiles may be visible to other users according to the feature and your settings.
• Google, GitHub, Stripe, OpenRouter, model providers, YouTube, or a local AI server receive information when you choose the relevant integration.
• Information may be disclosed to comply with law, valid legal process, safety needs, or enforcement of our agreements.
• Information may be transferred as part of a merger, financing, reorganization, or sale of assets, subject to applicable law and appropriate notice.

We do not sell personal information for money. We do not provide ordinary local note contents to advertisers.

RelicNotes does not currently use advertising cookies on the public website. Website analytics, hosting, security, and linked third-party services may use cookies, local storage, pixels, server logs, or similar technologies according to their own practices. Browser controls can limit some technologies, but blocking required storage or network features may prevent sign-in or third-party integrations from working.

We keep online personal information only as long as reasonably needed for the purposes described above, including providing an account, maintaining Diamond transaction records, resolving disputes, enforcing agreements, ensuring security, and meeting legal obligations. Retention periods vary by record type.

• Local notes, media, settings, exports, and backups remain on your device until you delete them or use an appropriate app or operating-system removal tool.
• Community content may remain visible until you remove it or request deletion, subject to technical, legal, and safety limitations.
• Removing a shared community note does not recall copies that other users already downloaded.
• Deleted online data may persist for a limited period in backups or logs before those systems rotate, and some transaction or security records may need to be retained longer.

We use reasonable technical and organizational measures designed to protect information, including password hashing, limited verification and reset tokens, access controls, and authenticated commerce routes. No storage, transmission, or local-device security method is guaranteed to be completely secure. Protect your device, backups, account credentials, API keys, and exports, and contact us if you suspect unauthorized access.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; restrict or object to processing; withdraw consent; and appeal a denied request. These rights may be subject to legal exceptions and identity verification.

• Use the app without creating an account for core local functionality.
• Choose local AI instead of cloud AI, or do not configure an AI provider.
• Use local export, backup, trash, and deletion controls for data on your device.
• Adjust optional pet and boss-progress sharing controls and manage community content where controls are available.
• Email [email protected] to request access, correction, deletion of online account data, or another privacy right. Specify the account email and request, but do not email your password or full API key.

You may also complain to your local data-protection authority. We would appreciate the opportunity to address your concern first.

Service providers and their infrastructure may process information in countries other than your own, where data-protection rules may differ. Where required, we rely on an appropriate legal mechanism for international transfers. Third-party transfers that you initiate are also governed by the relevant provider terms and safeguards.

RelicNotes is not directed to children under 13, and we do not knowingly collect personal information online from children under 13. Users who are old enough to use the service but below the age of legal majority should involve a parent or legal guardian. Contact us if you believe a child has provided personal information in violation of this policy so we can review and delete it where required.

We may update this policy as features or legal requirements change. We will post the revised policy here and update the date above. Where required, we will provide additional notice or obtain consent.

For privacy questions or requests, contact the RelicNotes operator at [email protected]. Also see the Terms of Service and Diamond Purchases & Refunds.