Privacy policy
Deepslate is a note-taking app (Android, iPhone, Windows and web). This page explains what data it stores, why, where, for how long, and what you can do about it. In short: your notes are yours, there are no ads today, no tracking and no selling of data.
Who is responsible
Alejandro Sosvilla, developer of Deepslate.
Contact: privacy@deepslatenotes.com
What data we store
- Account: your email address and your password (stored only as a secure hash, never in plain text).
- Profile: your @username and, if you add them, display name, bio, colour and profile photo.
- Your content: notes, checklists, labels, reminders, photos and drawings you add.
- Sharing: who you share a note with, their permission (can edit / can view), and the notifications that tell someone you added them to a note.
- Blocks and reports: the people you block, and the reports you send about another user (the reason, the note concerned and any details you write). Reports are only seen by us, to review them; the reported person is not told who reported them.
- Technical data: our hosting providers keep standard server logs (such as IP address, date and browser) for security and to keep the service running.
- On your device: the app keeps a copy of your notes and your session on your device so it works offline. This is strictly necessary for the app to work, so no cookie banner is needed. We do not use advertising or analytics cookies.
- Link previews: when a note contains a link, the app sends that link (only the address, never the rest of the note) to our server, which opens the page to get its title, description and image and sends them back. The linked website sees our server, not your device or IP address. The server does not keep the link; the preview is stored only on your device.
- Website visits (web only): we use Vercel Web Analytics to count visits to deepslatenotes.com (pages viewed, country, browser and type of device). It uses no cookies, does not store your IP address and cannot identify you or follow you across sites. It only sees that the site was visited, never your notes. The Windows, Android and iPhone apps have no analytics.
Why we use it
- To provide the service you sign up for: saving and syncing your notes, sharing them and sending reminders (legal basis: performance of the contract, GDPR art. 6.1.b).
- To send account emails only: the confirmation code and password-reset codes. No newsletters or marketing.
- To keep the service secure and prevent abuse, including the anti-bot check when you sign in, create an account or reset your password, and reviewing reports of abuse (legitimate interest, art. 6.1.f).
Your notes are never read for advertising, never sold, and never used to train AI models.
Who else sees it
- People you share with: a note you share is visible (and editable, if you allow it) to the people you choose. They can see your @username, name and profile photo. Nobody can see your email address.
- Service providers that process data on our behalf:
- Supabase: database, sign-in and file storage. Your data is stored in the EU (Frankfurt, Germany). Supabase also runs the link-preview function described above.
- Vercel: hosts the website and counts visits anonymously (see above).
- Resend: sends the account emails (confirmation and password-reset codes).
- Cloudflare: domain name, email forwarding, and Turnstile, the quick "are you human?" check shown when you sign in, create an account or reset your password. Turnstile looks at technical signals of the request (such as IP address and browser) only to tell people from bots; it does not use them for advertising.
- Discord: sends us private alerts about the service (for example, when a new account is created or a report is filed). These alerts include the email address of the accounts involved and are only visible to us. They never include the content of your notes.
How long we keep it
- While your account exists.
- Notes in the bin are deleted automatically after 30 days.
- When you delete your account, all your data is deleted from our servers straight away. Copies in our providers' backups disappear when those backups expire.
Your rights
You can access, correct, export or delete your data, and object to or restrict how it is used:
- Delete your account at any time in the app or on the website: Settings → Account → Delete account, or by email. This removes your notes, photos, drawings, labels and profile. Step by step: how to delete your account.
- Export your notes at any time in Settings → Account → Export notes: a .zip with every note as a Markdown file, your photos and drawings, and a JSON file with all the details.
- Edit or remove your profile in Settings → Profile.
- For anything else (for example, a copy of your data), write to privacy@deepslatenotes.com.
- If you are not happy with how we handle your data, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority of your country.
Ads in the future
Deepslate has no ads now. We may later offer a free version with ads and an annual subscription without them. Before that happens we will update this policy (what the ad provider collects, and asking for your consent where the law requires it) and tell you in the app. Your notes would never be used to choose ads.
Where you get the app
If you install Deepslate from Google Play or the App Store, Google or Apple handles the download (and any future payments) and may collect data under its own privacy policy. Deepslate does not receive that data. The use of Deepslate is also subject to our Terms of use.
Age
Deepslate is for people aged 14 and over and is not intended for children under 14. If you are under 14, please do not create an account. If we learn that an account belongs to someone under 14, we will delete it.
Changes
If this policy changes, the date at the top will change too. Important changes will be announced in the app.