Privacy Policy

Last Updated: January 16, 2026

Turnote ("we", "us", "our", or "the App") is operated by SaasRocket. This Privacy Policy explains how we collect, use, store, and share your information when you use our voice recording and AI transcription service.

Summary

Turnote records your voice, transcribes it using OpenAI, and generates titles using Google Gemini. Your data is stored securely on Supabase. We do not sell your data or use advertising trackers.

1. Information We Collect

1.1 Account Information

When you sign in with Google, we receive:

Email address
Display name
Profile picture URL
Google account identifier

We use this information solely to create and manage your Turnote account.

1.2 Voice Recordings and Content

When you use Turnote, we collect:

Voice recordings: Audio files you record within the app (M4A format)
Transcriptions: Text generated from your voice recordings
AI-generated titles: Titles automatically created for your notes
Notes and edits: Any text content you create or modify
Tags: Categories you assign to your notes
Custom prompts: AI instructions you create for text rewriting

1.3 Usage Information

We track usage to enforce plan limits and improve the service:

Audio recording duration (minutes used per month)
Number of notes created
AI processing tokens consumed
Subscription status and plan type
App version and platform (iOS, Android, or Web)

1.4 Technical Information

Device platform (iOS/Android/Web)
Network connectivity status (online/offline)
Language preference

1.5 Information We Do NOT Collect

Precise location or GPS data
Contacts or address book
Browsing history
Data from other apps
Advertising identifiers

2. How We Use Your Information

Purpose	Data Used
Provide transcription services	Voice recordings, language preference
Generate note titles	Transcribed text
Rewrite text with AI	Your text content, custom prompts
Manage your account	Google account info, profile settings
Process payments	Subscription status (via app stores)
Enforce usage limits	Audio minutes, note counts, token usage
Sync across devices	Notes, recordings, preferences

3. Third-Party Services and Data Sharing

To provide our services, we share data with the following third-party providers:

OpenAI (Whisper API) – Voice Transcription

Your voice recordings are sent to OpenAI's servers for transcription using their Whisper model. OpenAI processes the audio and returns text. OpenAI may use this data according to their privacy policy.

Google (Gemini API) – AI Title Generation and Text Rewriting

Your transcribed text is sent to Google's Gemini API to generate titles and rewrite content. Google processes this text according to their privacy policy.

Supabase – Database, Authentication, and File Storage

All your data (account info, notes, recordings, usage stats) is stored on Supabase's cloud infrastructure. Audio files are stored in Supabase Storage. Data is encrypted at rest and in transit.

RevenueCat – Subscription Management

We use RevenueCat to manage subscriptions across iOS and Android. RevenueCat receives your anonymous user ID and subscription status. Payment processing is handled by Apple App Store and Google Play Store.

Google Sign-In – Authentication

We use Google OAuth for authentication. Google provides us with your basic profile information when you sign in.

3.1 We Do NOT:

Sell your personal data to third parties
Use advertising SDKs or ad networks
Use analytics or tracking SDKs (no Firebase Analytics, Mixpanel, Amplitude, etc.)
Share your data for marketing purposes

4. Data Storage and Security

4.1 Where Your Data is Stored

Cloud storage: All data is stored on Supabase's servers with encryption at rest
Local cache: Notes and profile data are cached locally on your device for offline access
Authentication tokens: Stored securely using platform-specific secure storage (Keychain on iOS, Encrypted SharedPreferences on Android)

4.2 Security Measures

All data transmitted over HTTPS/TLS encryption
Database encryption at rest
Row-level security ensuring you can only access your own data
JWT-based authentication with secure token handling
Audio files stored in private buckets accessible only by authenticated users

5. Data Retention

Active accounts: Your data is retained while your account is active
Deleted notes: When you delete a note, it is permanently removed from our servers
Audio files: Stored until you delete the associated note or your account
Account deletion: When you delete your account, all associated data is permanently removed, including notes, recordings, usage history, and profile information

6. Your Rights and Choices

6.1 Your Rights Under GDPR (European Users)

Right of Access
Right to Rectification
Right to Erasure ("right to be forgotten")
Right to Restrict Processing
Right to Data Portability
Right to Object
Right to Withdraw Consent

To exercise these rights, contact us at hi@turnote.app.

6.2 Your Rights Under CCPA (California Residents)

Right to Know
Right to Delete
Right to Non-Discrimination

We do not sell personal information.

6.3 How to Exercise Your Rights

Many rights can be exercised directly in the app:

View all your notes and recordings
Download all your notes as a ZIP file (Premium)
Edit your notes and profile information
Delete individual notes or your entire account
Update language and display name

6.4 Account Deletion

Open Turnote
Go to Settings
Tap "Delete Account"
Confirm deletion

This action is irreversible.

7. Children's Privacy

Turnote is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

8. International Data Transfers

Your data may be processed in countries other than your own, including the United States (OpenAI, Google) and other countries where Supabase servers are located. By using Turnote, you consent to this transfer.

9. Changes to This Policy

We will notify you of significant changes by:

Posting a notice in the app
Updating the "Last Updated" date

10. Data Controller

SaasRocket

Email: hi@turnote.app

Website: turnote.app