Privacy

Who we are

LuniNote is built and run in Slovakia, in the EU. For anything about your data, write to support@luninote.com.

What we keep

• Your account: your email address, your password in scrambled form (never the password itself), and your sign-ins, with the browser and network address each came from.
• Your notes: everything you write or import, with its notebooks, tags, shortcuts, saved searches, earlier versions and the trash.
• Your files: attachments, and the text LuniNote reads out of them (PDFs, documents, pictures) so search can find it. The reading happens on our own server; no outside service sees your files.
• Imports and moves: a record of each (counts, and any note that couldn't come over), and Evernote's ids for the notes you moved, so moving again updates them instead of making copies.
• Connected apps: if you connect the browser extension, a key that lets it add notes for you. We keep only a scrambled form of it.
• Error reports: when something breaks, the kind of error, where in our code it happened, the time, the app version and your account number. Reports never contain your notes, titles, file names or email address.
• Support emails: your email address and what you wrote, to answer you, kept only as long as we need them for that.

On your devices

So it works offline, the app keeps a copy of your notes in your browser. We use one cookie, to keep you signed in. There are no advertising, analytics or tracking cookies, and no tracking scripts.

This website

luninote.com sets no cookies, runs no analytics and loads nothing from other websites: its fonts and pictures come from luninote.com itself. It's served by Cloudflare, which handles your network address to deliver the pages and keep attacks out. We see only totals, such as visits per day, never who visited.

What we don't do

We don't sell your data, show ads, or use your notes to train AI. Nobody at LuniNote reads your notes unless you ask us to help with a specific problem, or the law requires it.

Where it's kept

• During the beta, LuniNote runs on a server we operate ourselves in Slovakia, in the EU.
• Files (attachments, import files, exports) are stored with Cloudflare R2, in the EU.
• Backups are encrypted before they leave our server and kept with Cloudflare R2, in the EU.
• Account emails (confirming your address, password resets, sign-in alerts) are sent through Resend, from Ireland (more below).
• Emails you send to support@luninote.com are forwarded by Cloudflare to our mailbox at Proton, in Switzerland.

Who helps us run it

These companies handle your data only to provide their part of the service, under their data processing terms:

• Cloudflare, Inc. (USA): carries every connection to our server and the website, stores your files and our backups in the EU, and forwards emails sent to our support address.
• Resend (Plus Five Five, Inc., USA): sends account emails to your address. They leave from Ireland; Resend keeps its records of them (your address, the time, whether it arrived) in the USA.
• Proton AG (Switzerland): keeps the mailbox your support emails arrive in. Switzerland is recognised by the EU as protecting personal data to EU standards.

Cloudflare and Resend are American companies. Where your data reaches the USA, it's covered by the EU–US Data Privacy Framework and the EU's standard contractual clauses in their data processing terms.

If we move to a rented server or add a company to this list, we'll update this page first and tell you by email.

Why we may use it

• To run the service you signed up for: storing, syncing and searching your notes, and the emails your account needs (GDPR Article 6(1)(b)).
• To keep it safe and working: limiting repeated sign-in attempts, error reports and backups (our legitimate interest, Article 6(1)(f)).

How long we keep it

• Your account, notes and files: until you delete them or your account.
• Notes in the trash: until you empty it. Files no note uses any more leave our storage within about 30 days.
• Export files: 7 days, then they're deleted.
• Sign-ins: 60 days after you last used them.
• Error reports: 30 days.
• Backups: 14 days. Something you delete leaves the backups within that time.
• When you delete your account, everything in it is removed from our database and file storage at once. Copies in your own browsers stay until you clear them.

Taking it with you, deleting it, and your rights

• Export: Settings, Export your notes. ENEX, HTML, Markdown, or a complete archive.
• Delete: Settings, Account, Delete account. Change your email or password there too.
• You may ask to see, correct, delete or receive your data, or object to how we use it. Write to support@luninote.com; we answer within a month. You may also complain to the data protection authority where you live, or to the Slovak one (Úrad na ochranu osobných údajov Slovenskej republiky).

The move from Evernote

The move runs in your own browser, through the LuniNote extension, using the Evernote session you're already signed in with. We never see your Evernote password. The move only reads from your Evernote account; it doesn't change or delete anything there. What it reads goes to your LuniNote account and nowhere else.

Changes

If we change this policy in a way that matters, we'll tell you by email before it takes effect.