DoNotes and Cada - Privacy Policy

Effective Date: 1st August 2025

1. Introduction

This Privacy Policy explains how we collect, use, and protect your information when you use DoNotes (a note-taking application) and Cada (a question bank service), collectively referred to as the "Services."

These services are operated by Cognitive Limited, a company based in the United Kingdom. We care deeply about your privacy and comply with all applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. What Information We Collect

2.1 Personal Information

  • Email address (for login and communication purposes)
  • Payment status and billing metadata (via our payment provider)

2.2 User Content

  • DoNotes: All user-generated notes are encrypted and not accessible to us.
  • Cada: Content associated with questions and notes is stored securely and remains confidential.

2.3 Technical Data

  • IP address, browser type, and access timestamps
  • Device information and usage logs (for diagnostics and security)

3. How We Use Your Data

  • To provide and maintain access to the Services
  • To process payments and manage subscriptions
  • To detect abuse and enforce fair use limits
  • To respond to support requests and inquiries

4. Data Sharing and Disclosure

We do not sell your data.

We may share data with trusted third-party service providers:

  • Cloudflare for CDN and security
  • Vercel for hosting
  • Clerk for user authentication

Each provider adheres to strict privacy and security standards.

5. Data Retention

  • Account-related data is retained as long as your account is active.
  • You may request deletion at any time (see GDPR Rights).
  • Encrypted notes and Cada data are retained while your account is active unless deleted by you.

6. Cookies and Analytics

We use minimal cookies required for authentication and session security. No tracking or advertising cookies are used.

7. Your Privacy Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure ("right to be forgotten")
  • Restrict processing under certain conditions
  • Data portability
  • Object to certain processing activities

To exercise any of these rights, contact: [email protected]

8. Security Measures

  • Encryption of notes
  • Encrypted storage for Cada content
  • HTTPS enforced across all Services
  • Nightly backups attempted (not guaranteed)

Users are responsible for their own backups.

9. Data Transfers

Some data may be processed outside the EEA via third-party services. All such transfers comply with GDPR safeguards including SCCs and data processing agreements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted at https://updates.donotes.app.

11. Contact Information

Privacy Requests: [email protected]
Billing Questions: [email protected]
Cada Content Issues: [email protected]

Your continued use of DoNotes and Cada constitutes acceptance of this Privacy Policy.