Notul Privacy Policy

In short

Notul is a private notebook for the people you manage. It has no accounts, no servers of its own, no analytics, no ads and no third-party SDKs. Your notes live on your iPhone, iPad and Mac and, if you keep iCloud sync on, in your own private iCloud, encrypted on your device before they are uploaded. Nothing is shared with the people you write about, with your employer, or with anyone else. Review drafts are written on your device. Notul never records or transcribes a 1:1. We cannot see any of it. The App Store privacy label for Notul is Data Not Collected.

1. Who is responsible

Notul is made by Burak Özaslan at 1801 Labs, Maltepe, İstanbul, Türkiye. Email: support@1801labs.com. For any privacy question or request, write to that address.

We do not receive the notes you keep in Notul, so for those notes we are neither a controller nor a processor. You (or, where it applies, your employer) decide what goes into them and how they are used. See section 4.

2. What Notul stores, and where

• What: the people you add (name, and optionally a role and a colour), your notes about them, feedback notes, follow-ups, 1:1 session notes, the pages you open from templates, your schedule for each person, and your settings.
• On your devices. Everything is stored on your iPhone, iPad or Mac.
• In your own private iCloud, if sync is on. Notul keeps a copy in your private iCloud database (Apple's CloudKit) so your devices stay in step. Each record's content is stored in CloudKit's encrypted fields: it is encrypted on your device before it is uploaded, with keys kept in your iCloud Keychain, so neither Apple nor we can read it. Your iCloud account is run by Apple under its own privacy policy.
• Only on this device, if you choose. In Settings you can turn sync off. Notul then keeps everything on that device only.

3. What Notul never does

• Notul never sends your notes, or anything about the people in them, to us or to any third party. There are no analytics, advertising or tracking SDKs in the app, and no cookies.
• Notul never shares a card or a note with the person it is about, with HR, with your employer or with anyone else. There is no share button for notes and no shared workspace.
• Notul never records, stores or transcribes a 1:1 meeting.
• Notul never rates, scores, ranks or profiles anyone, and never infers anyone's emotions or mood.
• Notul never uses your information for advertising, profiling, data brokering or training anything, and never tracks you across apps or websites.

4. Notes about other people

The people you write about are your colleagues, and notes about them are personal data about them. In many workplaces, notes a manager keeps about their team count as the employer's data, and company policy may set rules for which tools you may use. Notul shows this in onboarding and in Settings: "Notes about your team can be your company's data. Check your company's rules."

• You, and where it applies your employer, are responsible for keeping these notes lawfully: for having a reason to keep them, keeping them accurate and to what is needed, answering the person's requests about them where the law gives them rights, and deleting them when they are no longer needed.
• We never receive these notes, so we cannot see, correct, export or delete them for anyone. Only you can, in the app (section 10).
• Keep notes factual and to what helps you support the person. Avoid sensitive details such as health, religion or family matters unless you have a clear reason and a lawful basis to record them.

5. Exports you start

Notul exports only when you ask it to:

• Encrypted export (.notul): a copy of your notebook sealed with a password you choose. Without the password it can't be opened, and we never receive it or the password.
• Review draft as PDF or Markdown, and the receipt for your expense report: made on your device and handed to the system share sheet. Where you send them is your choice, and from then on the receiving app or person handles them.

6. Review drafts and Apple Intelligence

When you ask for a review draft, Notul uses Apple's on-device language model (Foundation Models) on devices with Apple Intelligence. It runs on your device; Apple's Private Cloud Compute is not used, and nothing is sent anywhere.

• The draft only restates your own notes about that one person for the period you pick. Every line cites the dated note it comes from.
• It never rates, scores, ranks or compares people, and never describes feelings or personality. Lines that break these rules are removed.
• It is a drafting aid, not an evaluation: it isn't saved as a review, and you write the final text.
• On devices without Apple Intelligence, Notul shows your notes grouped by kind and month instead.

7. Permissions

Each permission is optional. Notul explains why it is asking before iOS shows the request, and you can change it at any time in iOS Settings.

• Calendar (optional, "Match my calendar"): to time a person's prep card, Notul reads today's events and looks for ones whose title contains that person's name. It uses only the title and start time of matching events, never writes to your calendar, and doesn't save or send calendar data. iOS calls this permission "full access" because reading events requires it.
• Contacts (no permission): "Pick from Contacts" opens the system contact picker. Notul receives only the contact you choose, and only their name and job title.
• Microphone and speech recognition: used only while you dictate your own quick note. Your voice is turned into text on your device; the audio is never kept. Never use dictation to record a 1:1.
• Notifications: prep reminders are scheduled on your device; nothing comes from a server. By default they don't show names ("Your next 1:1 · in 10 min"); you can turn names on in Settings.
• Face ID or passcode (optional lock): Notul asks iOS to check that it's you. The check happens in iOS; Notul never receives your face data or passcode. Whether or not the lock is on, the app switcher always shows a cover instead of your notes.

8. Widgets, Live Activity, Siri and the share sheet

• Widgets and the prep Live Activity show the time of your next 1:1 and how many items are open. They show a first name or initials only if you allow names, and never note text.
• Siri and Shortcuts: "Add a note about someone" and "Prep my next 1:1" run in Notul on your device. If you speak to Siri, Apple processes the request under its own privacy policy.
• Share sheet: text or a link you share into Notul from another app is saved as a note on your device.

9. Purchases

Notul Pro is bought through the App Store with StoreKit. Apple is the merchant and handles payment; we never see your payment details or your Apple Account. Notul checks your purchase with Apple on your device, and uses the transaction (what was bought, when and the transaction number) to unlock Pro and to make your expense receipt.

10. Your control

• Delete everything: Settings → Delete everything removes your notebook from your iCloud first and then from the device. If iCloud can't be reached, Notul tells you and nothing is half-deleted; you can try again.
• Archive a person: someone who leaves your team can be archived; their card becomes read-only and leaves the deck. Delete it when you no longer need it.
• iCloud: you can also delete Notul's data in iOS Settings → your name → iCloud → Manage Storage → Notul, and delete the app to remove what is on your devices.
• Only on this device: turn sync off in Settings to keep your notebook on one device.

11. Emails you send us

If you write to support@1801labs.com, we receive your email address and what you write, and use them only to answer you. Please don't send us notes about the people you manage. Our email is hosted by Apple (iCloud Mail). We keep emails as long as needed to help you, and delete them on request.

12. This website

1801labs.com, where this policy lives, sets no cookies, runs no analytics and loads nothing from third parties. It is served by Cloudflare, which processes your IP address and technical request data to deliver the page and protect it from abuse.

13. Legal bases

Notul itself processes data only on your devices and in your own iCloud, under your control; we do not receive it. Where we do process personal data, the legal bases under the GDPR are: answering your emails, Art. 6(1)(b) or (f); operating this website securely, Art. 6(1)(f) legitimate interest. For the notes you keep about other people, you (or your employer) need your own lawful basis (section 4).

14. How long data is kept

We hold no data from the app. Data on your devices and in your iCloud stays until you delete it (section 10). Emails are kept as long as needed to answer you.

15. International transfers

We do not transfer app data anywhere, because we do not receive it. iCloud is run by Apple, which may store data in other countries under its own safeguards; your note content is encrypted before it leaves your device.

16. Security

Your notes are protected by your devices' security, by CloudKit's encrypted fields, by the optional Face ID or passcode lock, and by the app-switcher cover. Encrypted exports are sealed with your password. Notul has no servers that could be breached.

17. Your rights

Depending on where you live, including under the GDPR (EU and UK), the Turkish data protection law (KVKK) and US state privacy laws, you have the right to access, correct, delete and receive a copy of your personal data, to object to or restrict processing, to withdraw consent at any time, and to complain to a data protection authority. Because we hold none of your app data, you can use these rights directly in the app (section 10). For anything else, write to support@1801labs.com; we answer within one month. We do not sell personal data, share it for targeted advertising, or make automated decisions about you.

18. Children

Notul is made for people who manage others at work and is not directed at children. We collect nothing from anyone. If you think a child has sent us personal data by email, write to us and we will delete it.

19. Changes to this policy

If this policy changes, we will update this page and the date above. If a change is significant, we will also tell you in the app before it applies.

20. Contact

Burak Özaslan, 1801 Labs, Maltepe, İstanbul, Türkiye. support@1801labs.com.