Effective date: August 12, 2026
Jot ("the app," "we," "us") is a personal note-taking and memory app for iOS. This policy explains what information Jot collects, how it is used, and who it is shared with. It applies to the Jot iOS app and its backend services.
The data controller is Yevhenii Veretennikov, a sole trader (jednoosobowa działalność gospodarcza) registered in CEIDG in Poland — full registration details are in the Terms of Use.
If you have questions about this policy or want to exercise any of the rights described below, contact us at veret.evg@gmail.com.
Jot can be used anonymously, or signed in with Apple or with Google.
What happens to your content depends on which feature you use:
Notes/memos synced to our backend are end-to-end encrypted. Your device encrypts the content before it leaves — the text you wrote and everything Jot derived from it, such as the category, tags, amounts, vendors and titles — using a key created on your device that is never sent to us. Alongside the encrypted content our backend stores only what it needs to file it: which account it belongs to, an identifier for the note, when it was created, and whether it came from the one-time "Let's meet" introduction. We cannot read your notes. Neither can our infrastructure providers, and a legal demand for them would return only encrypted data that we have no way to decrypt.
The key is kept in your device's Keychain. If you have iCloud Keychain switched on, Apple carries it to your other devices; it never passes through Jot. This has a consequence worth understanding: if you lose every device that holds the key, along with the iCloud Keychain copy, we cannot recover your backup — there is no copy of the key on our side to restore it with.
Asking a question is different. The encryption protects your backup, not the AI feature. When you ask Jot something, your question and the note content needed to answer it are decrypted on your device and sent to our AI provider (see "Third-Party Services" below), so that content leaves your device readable.
Notes backed up by earlier app versions, before encryption was added, were stored as plain text. When you update to a version that supports encryption, your device re-uploads them encrypted and the readable copies are replaced.
Files are backed up on the same terms, on Jot Pro only. A voice memo's audio and a bill document you imported are encrypted on your device before they are uploaded, with the same key that protects your notes. The file's name, its type and its size are inside the encrypted part — our backend stores only which account it belongs to, an identifier for the file, which note or bill it belongs to, and when it was created. We cannot open your files. On the free plan nothing is backed up at all: your files stay on your device, and a device that loses them cannot get them back from us. Transcription is separate from backup — a voice memo's audio is sent to be transcribed whatever your plan.
If your subscription ends, the files already backed up stay readable to you for 90 days, so you can restore or export them. After that they are deleted from our backend. Your own copies on your device are never touched by this. Your notes are not affected — they are kept as long as your account is.
Jot does not receive or store your payment card details. Purchases are handled entirely by the Apple App Store; subscription status is confirmed to us through our payments partner, RevenueCat (see below).
Your notes are never used for advertising. No note, question, answer, or bill detail is ever sent to an advertising network, used to choose which ad you see, or used to build a profile about you. We do not sell your personal information.
If you are on the free plan, Jot shows ads supplied by Google AdMob. There are two places they appear:
Jot Pro removes all ads. If you subscribe, the advertising SDK is not started at all, and you are not asked for the consent or tracking permissions described below.
To show ads, Google receives information from your device — including your device's advertising identifier, approximate location derived from your IP address, and technical details about your device and the ad shown. This is collected by Google, not passed on by us: we send Google nothing about you and nothing from your vault.
Google's handling of this data is governed by its own privacy policy — see How Google uses information from sites or apps that use our services.
If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:
| What we do | Legal basis |
|---|---|
| Storing and syncing your notes; answering your questions; processing bills you import; operating your account | Performance of a contract (Art. 6(1)(b) GDPR) — these are the features you asked for by using the app |
| Operating the actions allowance and subscriptions | Performance of a contract (Art. 6(1)(b) GDPR) |
| Keeping the service reliable and secure — debugging, error logs, preventing abuse and fraud | Our legitimate interests (Art. 6(1)(f) GDPR) in running a working, non-abused service |
| Keeping records required by Polish accounting and tax law | Legal obligation (Art. 6(1)(c) GDPR) |
| Showing personalised ads on the free plan | Your consent (Art. 6(1)(a) GDPR), collected through Google's consent form and Apple's tracking prompt. You can withdraw it at any time — see "Advertising" above |
| Showing non-personalised ads on the free plan, and crediting actions for a rewarded ad you chose to watch | Our legitimate interests (Art. 6(1)(f) GDPR) in funding a free tier |
Providing this data is not a statutory requirement, but without it the app cannot function — notes cannot be synced or questions answered if there is nothing to process.
Your notes/memos are synced to our backend (built on Convex) so they're available if you reinstall the app or sign in on a new device — this is the durable copy of your data, and it is encrypted (see "Content you create" above). A working copy is also kept on your device using Apple's on-device storage (SwiftData), in readable form, so that search and offline access work.
Your "Ask" conversation history (your questions and Jot's answers) and your imported bills/invoices (extracted text and confirmed details) are kept only on your device and are not synced to our backend — unless you convert a bill into a finance entry, which then syncs like a regular note.
Jot relies on the following third-party services to operate. Each only receives the information needed to perform its function:
| Service | Purpose | What it receives |
|---|---|---|
| Sign in with Apple | Account authentication | Apple handles the sign-in itself and knows that you signed in to Jot. It returns an identity token to us; we use and store only the anonymous account identifier from it. No name or email is requested |
| Google Sign-In | Account authentication | Google handles the sign-in itself and knows that you signed in to Jot. It returns an identity token to us; we use and store only the account identifier from it |
| OpenAI and, in some configurations, Anthropic (Claude API) | Generating answers to your questions, extracting bill details, and transcribing voice memos | The text of your question/request and relevant note content needed to answer it, and text extracted on-device from bills/invoices you import — sent through our backend. Also the audio of a voice memo, which goes to OpenAI whichever provider is in use. OpenAI is the provider Jot uses; we may route requests to Anthropic instead. Neither provider is permitted to train models on your content |
| Convex | Backend database and sync | Your note content in encrypted form, which Convex cannot decrypt, plus — on Jot Pro — your files in encrypted form, and account identifiers and credit/subscription state |
| RevenueCat | Subscription management | An anonymous purchase identifier and subscription/receipt status (no payment card details) |
| Apple (App Store / StoreKit) | Processing subscription payments | Handled entirely by Apple under Apple's own privacy policy |
| Google AdMob (free plan only) | Showing ads, and verifying that a rewarded ad was watched | Your device's advertising identifier (only if you allow tracking), IP address and the approximate location derived from it, and technical details about your device and the ads shown. No note, question, answer, or bill content is ever sent. For a rewarded ad we pass a single-use, randomly generated ticket so the actions can be credited to the right account — it contains nothing about you |
| Google User Messaging Platform (free plan only) | Collecting and recording your advertising consent choice in the EEA and UK | Your consent choice, stored on your device |
Jot uses no analytics SDK and no tracking SDK beyond the advertising described above. On Jot Pro, no advertising SDK runs at all.
We are based in Poland, but some of the providers above (OpenAI, Anthropic, Convex, RevenueCat, Google and Apple) are established in the United States, so your data may be processed outside the European Economic Area. Where that happens, the transfer is covered by an appropriate safeguard under Chapter V of the GDPR — normally the European Commission's Standard Contractual Clauses included in our agreements with those providers, or the EU–US Data Privacy Framework where the provider is certified. You can request more detail about the safeguards in place by emailing us.
If you are in the EEA or the UK, you also have the right to:
To exercise any of these, email veret.evg@gmail.com. We respond within one month, as required by the GDPR. We may need to confirm you control the account before acting on a request.
You also have the right to lodge a complaint with a data protection supervisory authority. Our lead authority is the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland — uodo.gov.pl. You may also complain to the authority in your own country of residence.
We do not use your data for automated decision-making that produces legal or similarly significant effects about you.
We do not sell your personal information for money, and we never share the contents of your notes with anyone for advertising.
However, if you are on the free plan and you allow tracking when iOS asks, the advertising identifier made available to Google AdMob may be used for personalised advertising. Under the CCPA/CPRA this counts as "sharing" for cross-context behavioural advertising. To opt out, decline the App Tracking Transparency prompt, or turn Jot off under iOS Settings → Privacy & Security → Tracking at any time. Subscribing to Jot Pro also stops it entirely, because no advertising SDK runs. We do not knowingly share the personal information of anyone under 16 for these purposes.
California residents may request access to or deletion of their personal information using the same email address above, and will not be discriminated against for exercising those rights.
We retain your account and note content for as long as your account is active, so that your notes remain available to you. Files backed up on Jot Pro are kept while the subscription is active, and for 90 days after it ends, after which they are deleted. If you request account deletion, we will delete your stored content and account identifiers, except where we are required to retain limited records (e.g. for fraud prevention or legal compliance). Accounting records relating to a purchase are kept for the period required by Polish tax law (currently five years from the end of the tax year). Diagnostic and error logs are kept only as long as needed to investigate problems, and are routinely discarded.
Jot is not directed at children. To use Jot you must be at least 13 years old, and at least the minimum age of digital consent in your country if that age is higher — in parts of the European Union and elsewhere it is 14, 15 or 16. See the Terms of Use for the full requirement.
We do not knowingly collect personal information from anyone below the age that applies to them. If we learn that we have, we will delete the account and its data. If you are a parent or guardian and believe your child has provided us with personal information, contact us at veret.evg@gmail.com and we will delete it.
We may update this policy from time to time. If we make material changes, we will update the effective date above. Continued use of Jot after changes take effect constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or your data, contact us at veret.evg@gmail.com.