Privacy Policy

Last updated: September 22, 2026

MyNotes365 ("we", "us") is operated by ComputerHelpSOS LLC. This policy explains what information we hold about you, what we do with it, who else handles it, and how to get it deleted.

The short version

Your notes and files are encrypted before they are stored.
We do not sell your data, show ads, or use analytics or tracking tools.
We do not use your notes to train AI. The optional AI features send text to Anthropic only when you turn them on or press the button, and Anthropic does not train on it either.
You can download everything, or close your account and have it deleted, at any time from the app.

Information we collect

Your account: Your name and email address. If you sign in with Google or Microsoft, your profile picture as well. If you sign up with a password, we store only a one-way hash of it, so we cannot see or recover the password itself.
What you choose to add: A mobile number, if you add one for text-message reminders or two-step sign-in; your timezone; and your notification settings.
Your content: Your notebooks, sections, notes, tags, images, attachments and their earlier versions, the reminders you set, and any contacts you add so you can share notes with them.
Your subscription: If you subscribe, our payment processor handles your card details directly. We store only a reference to your customer record there, your plan, and when it renews.
Your devices: If you turn on notifications, a delivery address for that browser or device, which is issued by the browser maker's push service.
Technical information: Like most websites, our servers record your IP address, browser type, the time of each request and the address it asked for, and note technical events such as errors. The address of a search includes the words you searched for, and these records can include your email address. They do not contain your notes.

How your notes are protected

Your notes are encrypted with AES-256 before they are written to our database. That covers note titles and text, notebook and section names, images, attachments, earlier versions, reminder text, the contacts you add, and the data that powers search. Everything travels over encrypted connections (HTTPS).

This is not end-to-end encryption, and we would rather say so plainly. Our server holds the key, because the server is what decrypts your notes to show them to you and to run the features you use. What the encryption protects against is the way notes actually leak: a stolen database, a stolen backup, or a stolen disk. Tags, dates, and your account details (name, email address and phone number) are not encrypted this way, because the service needs to read them directly. The FAQ explains this in more detail.

We do not look at your notes, except when you ask us to help with a specific problem or when the law requires it. Two-step sign-in is available in Settings.

How we use your information

Only to run MyNotes365: signing you in, storing, showing and searching your notes, sending the reminders you set, sharing notes with the people you choose, handling your subscription, sending account emails such as password resets, and keeping the service secure. We do not sell your data, we do not show advertising, and we do not use analytics or tracking tools.

Who else handles your information

We use a small number of service providers, each for one job, and give each only what that job needs:

Stripe — payments

If you subscribe, Stripe receives your name, email address, and the card and billing details you enter at checkout. Card details go to Stripe directly and never reach our servers.

Resend — email

Sends account emails and email reminders. It receives your email address and the message, which for a reminder includes the reminder text and the title of the note it belongs to.

Twilio — text messages

Sends text-message reminders, sign-in codes, and the code that confirms a new number, if you use them. It receives your mobile number and the message.

Google and Microsoft — sign-in

Only if you choose to sign in with one of them. They tell us your name, email address and profile picture.

Google reCAPTCHA — spam protection

Used on the sign-in and registration page to keep out automated abuse. It collects information about your browser and device, and Google's privacy policy and terms apply.

Push services — notifications

If you turn on notifications, they are delivered through the push service your browser uses (Google, Apple or Mozilla). The content of each notification is encrypted so that the push service itself cannot read it.

Anthropic — optional AI features

Only when you use them:

Ask my notes (off unless you turn it on) sends your question and the passages from your notes that best match it.
Name and file new notes (off unless you turn it on) sends the text of each new note so it can suggest a title and tags.
Summary and Action items send the one note you are looking at, when you press the button.

Anthropic processes this under its commercial terms, which do not allow it to train its models on the data. The matching that finds relevant passages happens on our own server; nothing leaves it for that part.

Content delivery networks

Your browser loads some of the app's code libraries from jsDelivr and esm.sh. They see your IP address, as any website you load files from does, but not your notes.

Hosting

Our servers are in the United States.

We will disclose information if we are required to by law, such as by a valid court order, and only what is required.

Text messages

We send text messages only if you add and verify a mobile number and choose text reminders or two-step sign-in. How often depends on the reminders you set. Message and data rates may apply. Reply STOP to any message to stop receiving them, or remove your number in Settings. We do not share your mobile number or your consent to receive texts with anyone for marketing purposes.

Cookies and storage on your device

We use only the cookies needed to keep you signed in: one for your session, and one that keeps you signed in on that browser for up to a year unless you sign out. We do not use advertising or analytics cookies. Google reCAPTCHA may set its own cookies on the sign-in page.

So that notes open without a connection, the app keeps a copy of notes you have opened in your browser's storage, along with display preferences such as zoom. That copy is removed when you sign out or close your account.

How long we keep information

Your account and content: until you delete them or close your account.
Items in the trash: until you empty the trash or restore them.
Earlier versions of a note: up to the 20 most recent.
Server records: up to 30 days. Web server logs, with IP addresses and search terms, up to 14 days.
Backups: we keep encrypted backups, in more than one place, so your notes survive a hardware failure. They are replaced on a rolling schedule, and the oldest is about six months old.

Your choices

Download everything: use Export all in the app.
Correct your details: in Settings.
Delete things: delete notes, notebooks or sections at any time, or close your account (below).
Turn features off: the AI features, notifications and text messages can each be switched off in Settings.
For anything else, email us and we will respond within 30 days.

Closing your account

You can close your MyNotes365 account at any time, in the Android app or at mynotes365.com: open Settings and choose Close account. You do not need to cancel a subscription first; closing the account cancels it. If you can no longer sign in, email andy@computerhelpsos.com from the address on the account and we will close it for you within 30 days.

Closing it permanently deletes your account and everything in it: your notebooks, sections, notes, images and attachments, their earlier versions, your reminders and share links, and any access you have given to others or been given by them. Notebooks you have shared stop being available to the people you shared them with. Notes you wrote in a notebook that belongs to someone else stay with that notebook's owner.

If you have a subscription, it is cancelled immediately and will not renew. Stripe keeps its own records of past payments.

Backups are not edited after they are made, so a copy of a closed account can remain in them until they expire on their normal schedule, within about six months. If we ever have to restore from a backup, we delete any closed accounts it brings back. To make that possible we keep, for one year, a one-way fingerprint of the account and the date it was closed. We do not keep your email address.

Children

MyNotes365 is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.

Changes to this policy

When this policy changes we will update it here and change the date at the top. If a change is significant, we will also email you before it takes effect.

Contact

ComputerHelpSOS LLC, Alexandria, Virginia.
Questions or requests: andy@computerhelpsos.com.