Privacy Policy

1. What data we collect

Upon registration we collect your name and email address. During use — cards, tags and categories you create. We do not collect payment data, geolocation or device data.

2. How we use data

Data is used exclusively for the service: authorization, displaying cards, search and filtering. We do not sell data to third parties or use it for advertising.

3. Private cards

Cards marked as private are encrypted in the browser using AES-256-GCM before being sent to the server. We store only the ciphertext and cannot read the contents of your private cards.

4. Public cards

Cards marked as public are accessible to any user via direct link and appear in the public feed. Before publishing, make sure the card does not contain personal or confidential information.

5. Data storage

Data is stored on Railway servers (EU/US region). We use HTTPS secure connection for all requests. Backups are created automatically.

6. Data deletion

You can delete your account and all associated data at any time via the profile page. After deletion, data is permanently removed within 30 days.

7. Refund policy

Refunds for purchased AI credits are available within 14 days of payment if the credits have not been used. To request a refund, contactnotecards.app@gmail.com with the subject 'Refund' and include your account email and payment date.

If credits were partially or fully used — no refund is provided. Refunds are processed within 5–10 business days.