Legal
Privacy policy
Noty is made by Raybic Limited (“we”, “us”), trading as iwebron.com. We built Noty to keep your information on your Mac. This policy explains what Noty accesses, what leaves your Mac, who processes it and the choices you have. Questions: privacy@notynot.com.
Summary
- Your notes, reminders, memory transcripts, mail and settings are stored locally on your Mac.
- Mail access is read-only. Noty cannot send, change or delete email.
- Speech for Memory is recognised on your Mac by Apple’s on-device speech recognition.
- When an AI feature is used, only the text that request needs is sent to OpenAI for processing. Text that Noty speaks aloud is sent to ElevenLabs to make the voice.
- We do not sell your data, show ads, or use your content to train AI models.
1. Information stored on your Mac
Noty keeps its data in ~/Library/Application Support/Noty on your Mac: notes and reminders you create, your conversation history with Noty, Memory transcripts and the items found in them, mail summaries and labels, your preferences, and the sign-in tokens for mail accounts you connect. This data is not uploaded to us. Deleting Noty’s folder or using the in-app delete options removes it.
2. Your Noty account
If you create a Noty account, notynot.com stores your email address, your country (from your IP address at sign-up), a salted hash of your password (never the password itself), the app version, the dates you signed up and were last active, a hashed token for each Mac you sign in on, and usage counts for AI and voice requests: the number of requests, tokens, characters and estimated cost. We use these counts to run the service, apply fair-use limits and prevent abuse. We do not store the content of your requests, the replies, your mail, your notes or your transcripts on our servers; requests pass through to the providers below and are not logged.
3. Mail (Gmail and other accounts)
You can connect Gmail with Google’s read-only scope (gmail.readonly), plus your email address (openid email) so Noty can label the account. Noty also supports Outlook/Microsoft 365 (Mail.Read) and accounts already set up in Apple Mail. Noty uses this access only to show and read aloud the messages that look important to you, and to let you open them. Sign-in tokens are stored on your Mac and are sent only to the provider (for example, Google) to refresh access.
If you turn on “Use AI to sort mail”, Noty sends OpenAI the sender, the subject and at most the first 300 characters of each new message so it can say whether it is important and summarise it in one line. Full messages and attachments are never sent.
Google API Services User Data Policy. Noty’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Gmail data only to provide the user-facing mail features described here; we do not transfer it to others except as needed to provide those features (the limited AI sorting above), for security, or to comply with law; we do not use it for advertising; and no person at Raybic Limited reads your Gmail data unless you ask us to for support, or as required for security or by law. Gmail data is not used to train AI models.
4. Memory and transcripts
Memory is off until you turn it on. While it is on, Noty listens through your Mac’s microphone and transcribes speech on your Mac with Apple’s on-device speech recognition; audio is not recorded or uploaded. Transcripts are stored locally and deleted automatically after the period you choose (1, 7 or 30 days). You can pause Memory or delete its data at any time.
If “Use AI” is on for Memory, new transcript text is sent to OpenAI to pick out tasks, decisions, dates and promises for your report, under a daily limit. With it off, nothing from Memory leaves your Mac.
5. AI processing (OpenAI)
When you ask Noty something its local rules can’t handle, the request is processed by an OpenAI model (currently GPT‑5 nano). Noty sends the request text, a few recent lines of your conversation with Noty, the name of the app in front, the list of installed app names and the local time, so the model can answer and choose actions. If the request needs current information, OpenAI may run a web search. Requests are sent with storage turned off (store: false), and under OpenAI’s API terms, API data is not used to train their models. OpenAI may keep API data for up to 30 days to detect abuse. See OpenAI’s privacy policy.
When you are signed in to a Noty account, these requests are relayed through notynot.com so the API keys stay on our server. The relay counts tokens for billing limits and does not store content.
6. Voice (ElevenLabs)
To speak replies and reminders, Noty sends the text to be spoken (never your voice) to ElevenLabs, which returns audio. Short, common replies are cached on your Mac. See ElevenLabs’ privacy policy.
7. Mac control and permissions
Noty asks macOS for permissions such as Microphone, Speech Recognition, Accessibility and Automation so it can listen for “Hey Noty” and carry out commands like opening apps or typing text. These actions run locally. You can revoke permissions in System Settings at any time.
8. This website
notynot.com uses no analytics, advertising or third-party trackers. It sets one cookie only if you pick a country site (nn_country, to remember your choice). To show you the right country version, the server looks up the country of your IP address in a local database (DB-IP); the IP address is not stored for this. Our server keeps standard access logs (IP address, time, page requested, browser type) for up to 30 days for security and troubleshooting.
Pro waitlist. If you join the waitlist, we store your email address, the date and your country, only to tell you when Noty Pro is ready. Ask us at any time and we will remove it.
9. Sharing
We share data only with the processors named above (OpenAI, ElevenLabs), the company that hosts our server, and authorities where the law requires it. We never sell personal data.
10. Security and retention
Connections use HTTPS. Provider keys are encrypted at rest on our server, passwords are hashed with Argon2, and device tokens are stored only as hashes. Account data is kept while your account is active; usage counts are kept for up to 24 months for accounting. When you delete your account we delete your email, password hash and device tokens; anonymous usage totals may remain.
11. Your rights
Under UK and EU data protection law you can ask to access, correct, export or delete your account data, or object to its processing. Email privacy@notynot.com. To remove Noty’s access to Gmail, remove the account in Noty or visit your Google Account permissions. You may also complain to the UK Information Commissioner’s Office (ico.org.uk).
12. Children
Noty is not directed at children under 13, and we do not knowingly collect their personal data.
13. Changes
We will post changes here and update the date above. Significant changes will be announced in the app.