Privacy policy
- Last updated
- 18 August 2026
- Data controller
- LBD Srl, Bolzano, Italy
- Contact
- privacy@lbdsh.com
In short
NOTOLO works without an account. If you do not create one, your notes never leave your device and we receive nothing at all: no notes, no email address, no identifier.
If you choose to create an account, we collect your email address and synchronise your notes so you find the same things on a second device.
There are no ads, no analytics or profiling tools, and we do not sell or share data with anyone.
What we collect, and when
Without an account
Nothing. Notes, reminders, lists, categories and settings stay in the device's storage. No copy exists on our systems.
With an account
| Data | Why | Where |
|---|---|---|
| Email address | Identify the account and let you sign back in | Firebase Authentication |
| Name you choose | Show it in the app while signed in. Optional | Firebase Authentication |
| Account identifier | Link your notes to your account | Firebase Authentication |
| Content of notes, reminders, lists, categories | Synchronise them between your devices | Cloud Firestore |
| Creation and last-modified timestamps | Resolve conflicts when you edit the same thing on two devices | Cloud Firestore |
Sign in with Apple or Google
Where available, this passes us the associated email address (or the relay address Apple generates if you choose to hide yours). We never receive your password.
Diagnostics
We use no analytics, measurement or profiling tools. Apple may give us aggregated, anonymous crash and performance statistics if you have enabled sharing with developers in your iPhone settings.
Processors
Account data and synchronised notes are hosted on Google Firebase (Google Ireland Limited), acting as processor on our instructions, with data stored on servers in the European Union.
We also use Firebase App Check to verify that requests come from the genuine app.
There are no other recipients.
Retention
Synchronised notes remain until you delete them or delete your account. On account deletion we erase the email address, the name and all synchronised notes within 30 days.
The local copy is removed by uninstalling the app.
Your rights
Under Regulation (EU) 2016/679 you may request access, rectification, erasure, restriction, portability, and object to processing.
Write to privacy@lbdsh.com; we answer within 30 days. You may also lodge a complaint with the Italian Data Protection Authority.
The legal basis is performance of a contract (Article 6.1.b): we process account data only to provide the synchronisation you asked for.
Children
NOTOLO is not directed to children under 13 and does not knowingly collect their data.
Changes
If we change this policy we will update the date above and, for substantial changes, say so inside the app.