Privacy Policy
The short version: NoteCORE, operated by Palindev, collects only the data that is strictly necessary to run the app — your Google account profile, your notes, and payment records if you upgrade. We use Google Analytics to understand how the app is used (pages visited, session duration, and button clicks). Analytics cookies are only set after you give explicit consent. We run no advertising and will never sell, rent, or trade your personal data to anyone. You can request full deletion of your data at any time by emailing contact@palindev.com.
1. Introduction
This Privacy Policy ("Policy") describes how Palindev ("we", "us", "our"), the individual operator of NoteCORE, collects, uses, stores, and protects your personal information when you use the NoteCORE web application and any related services (collectively, the "Service") available at https://notecore.app.
By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please discontinue your use of the Service.
This Policy should be read alongside our Terms of Service, which governs your overall use of the Service.
2. Information We Collect
We collect the minimum amount of information necessary to provide you with a functional, secure note-taking service. Below is a complete inventory of every piece of data we store, why we store it, and how long we retain it.
Google Subject ID (google_sub)
Unique identifier from Google used to recognise your account on future sign-ins.
Until account deletion
Email address
Account identification and communication if you contact support.
Until account deletion
Display name
Shown in the profile page and app UI.
Until account deletion
Profile picture URL
Displayed as your avatar in the app. We store the URL only — not the image itself.
Until account deletion
Note titles & content
Core application function — storing and syncing your writing across devices.
Until you delete the note or your account
Note timestamps
Sorting notes by last edited; displaying creation and update dates.
Until note or account deletion
Subscription plan & status
Enforcing plan limits (3 notes vs unlimited) and showing your current plan.
Until account deletion
Payment order records
Legal and financial record-keeping; verifying that a Pro upgrade was paid for.
7 years (tax & legal compliance)
Razorpay order & payment IDs
Verifying payment authenticity against Razorpay's servers; resolving disputes.
7 years (tax & legal compliance)
Anonymous analytics events (pages visited, session duration, button clicks)
Understanding how the app is used in aggregate so we can improve the product. Only collected when you give cookie consent.
26 months (Google Analytics default, then auto-deleted)
We do not collect any other personal information beyond what is listed in the table above. In particular, we do not collect IP addresses, device identifiers, browser fingerprints, location data, or behavioral analytics of any kind. See Section 5 for the full list of what we do not collect.
3. How We Collect Your Information
4. How We Use Your Information
We use the information we collect exclusively for the following purposes:
To authenticate you and maintain your account session.
To store, sync, and retrieve your notes across devices.
To display your profile information (name, avatar) in the app UI.
To enforce plan-based feature limits (e.g. the 3-note limit on the Basic plan).
To process and verify your payment for the Pro Plan upgrade.
To maintain financial and legal records required by applicable law.
To respond to support requests or account deletion requests that you initiate.
To detect and prevent fraud, abuse, or security incidents.
To measure anonymous, aggregate usage patterns via Google Analytics — only when you have given explicit cookie consent.
We do not use your information for advertising, profiling, automated decision-making, or any purpose not listed above.
5. Information We Do NOT Collect
We want to be explicit about what we do not collect, because we believe that is just as important as disclosing what we do collect:
IP addresses
Device or hardware identifiers
Browser type or user-agent strings
Advertising or retargeting data
Location or GPS data
Screen recordings or heatmaps
Email marketing lists
Cross-site tracking identifiers
Biometric data
Full payment card details
NoteCORE does not use advertising networks, session-recording tools, or any marketing automation. We use Google Analytics only with your explicit consent, and only in an anonymised, aggregate form — no personal data is linked to analytics events.
6. Cookies & Browser Storage
JWT access & refresh tokens — used to authenticate your API requests. Cleared when you sign out.
nc_color_mode — stores your UI colour preference (light or dark mode). No personal data.
Redux application state — stores temporary editor state. Also saved server-side via autosave.
nc_cookie_consent — stores your cookie consent decision (accepted / declined + timestamp). No personal data.
_ga
2 years
Assigns an anonymous client ID to distinguish unique visitors.
_ga_XXXXXXX
2 years
Maintains session state for the current analytics session.
7. Third-Party Services
NoteCORE relies on the following third-party service providers to operate. Each of these providers may process some of your data as part of delivering their service to us. We have selected providers we trust and reviewed their privacy practices.
We do not integrate any advertising networks, session-recording tools (e.g. Hotjar, FullStory), or marketing automation services. Google Analytics is used exclusively for anonymous, aggregate usage measurement and is only active when you have given explicit cookie consent.
These providers act as data processors on our behalf. They are contractually restricted from using your data for their own independent purposes. Your note content is stored encrypted at rest in the Neon database hosted on Railway's infrastructure.
8. Data Sharing & Disclosure
We do not sell, rent, or trade your personal data. Ever.
Your personal information is never disclosed to third parties for commercial, marketing, or advertising purposes. The only circumstances in which we share your data are described below.
9. Data Storage & Security
10. Data Retention
11. Your Rights & Choices
Depending on your jurisdiction, you may have certain rights regarding your personal data. We respect these rights regardless of where you are located.
_ga and _ga_XXXXXXX cookies) or by reloading the page after clearing nc_cookie_consent from localStorage. The cookie banner will reappear and you can select "Decline analytics".12. Children's Privacy
The Service is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at contact@palindev.com.
Upon receiving such a report, we will promptly verify the claim and, if confirmed, permanently delete all data associated with that child's account without notice.
13. International Data Transfers
NoteCORE is built and operated from India. However, the third-party infrastructure providers we use (Railway, Neon, Netlify) may store and process data in data centres located in the United States and/or the European Union/European Economic Area, depending on their infrastructure configuration.
If you are accessing the Service from the European Union or United Kingdom, please be aware that your data may be transferred to and processed in countries that may not have data protection laws equivalent to those in your jurisdiction.
By using the Service, you consent to this transfer. We take steps to ensure that our service providers implement appropriate security measures (including encryption at rest and in transit) to protect your data during such transfers.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. Any changes will be posted on this page with an updated "Last Updated" date. The most current version of this Policy is always available at https://notecore.app/privacy.
For material changes that significantly affect how we handle your personal data, we will make reasonable efforts to provide notice (such as a prominent banner in the app or a notification). Your continued use of the Service after any such changes constitutes your acceptance of the updated Policy.
15. Contact Us
If you have any questions, concerns, or requests about this Privacy Policy or how we handle your personal data, please reach out — we genuinely want to help.