Privacy policy
Quenote is a to-do app made by Future Vision Concepts, LLC, a company in the United States ("we" or "us"). This policy explains what information Quenote holds about you, why, where it's kept, how long we keep it, and the choices you have.
The short version
- No ads, no analytics, no tracking. The apps contain no third-party code that collects information about you.
- Without an account, your tasks stay on your device and never reach us.
- With an account, our servers hold your email address and your sessions, and, if you have Sync, your tasks.
- We don't sell your information, and we don't share it for advertising.
- Our billing service and Stripe handle payments. We never see your card number.
Using Quenote without an account
The iPhone, iPad and Android apps work without an account. Everything you make in them, such as tasks, notes, dates, projects and areas, is stored only on your device. The apps don't send it, or anything else about you, to us.
If you've let your device share analytics with app developers, Apple or Google may give us crash reports and overall figures, such as how many people installed the app. These come from Apple and Google, not from Quenote, and don't include your tasks.
What we hold when you have an account
You need an account to use Sync and the web app. When you have one, our servers hold:
- Your email address, which you sign in with, and when you made your account. We use your address to send you sign-in codes and links, and to answer you when you write to us.
- Your tasks, if you have Sync: everything in your Quenote, including each task's title, notes, When date, deadline and whether it's done, and your projects, areas and sections. We keep this copy so that your devices and the web app stay in step.
- Your sessions: for each device you're signed in on, whether it's the web app or the iOS or Android app, when you signed in, and when the session was last used. You can see and end your sessions in the app's Settings and on the web app's Account page. Of each session's secret token we keep only a scrambled form (a hash), which can't be turned back into the token.
- Your plan: whether you have Sync, when it renews or ends, and the number of your account with our billing service.
- Sign-in requests: when you ask to sign in, the email address you gave, and a scrambled form of the code and the link we email you.
- Request counts: to stop abuse, we count requests by IP address, by account ID, and, for sign-in requests, by email address, kept as a hash.
We use this information only to provide Quenote: to sign you in, sync your tasks, manage your plan, keep the service secure, and answer you when you contact us.
Sign-in email
We send sign-in emails through Amazon Simple Email Service (Amazon SES), part of Amazon Web Services (AWS). If an email to you bounces or is reported as spam, we keep a record of that, which includes your email address, for one year, so we can keep our email working. Amazon SES also puts the address on its suppression list, which stops our email to it, and keeps it there until we remove it. To have your address removed from that list, write to support@quenote.app.
Payments
You buy Sync on the web. Payments are handled by the billing service that Future Vision Concepts runs for its apps, which uses Stripe to take them. Your card details go to Stripe: Quenote's servers never see or store your card number. The billing service and Stripe keep records of your subscription and payments, such as your email address, the amounts and dates, and the tax charged. Stripe describes how it handles your information in its privacy policy.
Where your information is stored
Our servers run on Amazon Web Services in the United States, in its us-east-2 (Ohio) region. Your information is encrypted where it's stored, and travels between your devices and our servers over encrypted connections. If you use Quenote from outside the United States, your information is transferred to the United States.
Logs
Our servers keep operational logs of what the service does, such as the requests it answers and any errors, so we can keep Quenote running and fix problems. They also keep an audit log of changes to stored information, which records what changed and when, such as that a task was edited, but not what it says. The audit log names each changed record by its keys; where a key holds an email address or an IP address, the log holds only a scrambled form of it (a hash). Logs may include your account's ID. Apart from the records of bounced or reported email, they don't include your email address itself, and they don't include your tasks' titles or notes, sign-in codes or session tokens.
How long we keep it
- Your email address and plan: until you delete your account.
- Your sessions: each until you end it or sign out, or until it expires, 90 days after it was last used. An expired session is deleted within a few days after that.
- Your tasks on our servers: while you have Sync. If your Sync plan ends, we delete them from our servers about 90 days later, unless you subscribe again before then. The copies on your devices stay.
- Deleted tasks: when you delete a task, project, area or section, our servers keep it, hidden, for 180 days after they learn of the deletion, so that your other devices learn of it too. It's deleted within a few days after that.
- Sign-in requests: they expire 15 minutes after we send the code and link, and are deleted within a few days after that.
- Request counts: each expires within two hours, and is deleted within a few days after that.
- Operational logs and the audit log: one year.
- Bounced or reported email: our record of it, one year. The address stays on Amazon SES's suppression list until we remove it.
- Backups: we can restore our database to any moment in the last 35 days, so information you delete can remain in its backups for up to 35 days.
- Payment records: the billing service keeps them as long as tax and accounting rules require.
Deleting your account
You can delete your account in the app's Settings or on the web app's Account page. Deleting it removes your email address, your sessions, your plan and your synced tasks from our servers straight away, and signs you out everywhere. It also stops Sync from renewing; the billing service keeps its records of your past payments, as tax and accounting rules require. If an email to you ever bounced or was reported as spam, deleting your account doesn't take your address off Amazon SES's suppression list: we remove it when you ask us to. The tasks on your phone or tablet stay there. Logs and backups that hold information about you are deleted when their time runs out, as above.
Who else handles your information
We use Amazon Web Services to run Quenote and send its email, and Stripe, through our billing service, to take payments. They handle your information only to provide those services to us. We don't sell your personal information or share it for advertising, and we disclose it to anyone else only when the law requires us to.
Cookies and storage in your browser
The web app uses one cookie, to keep you signed in, and keeps a copy of your tasks in your browser so it can show them quickly; signing out deletes that copy. This website uses no cookies. Neither uses cookies for tracking or advertising.
Your choices
You can change or delete your tasks at any time, see and end your sessions, and delete your account. Quenote has no export of your information you can run yourself. To get a copy of the information we hold about you, to have it corrected, or to ask about anything in this policy, write to support@quenote.app. Depending on where you live, the law may give you other rights over your information, and we'll honor them.
Children
Quenote isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email us and we'll delete it.
Changes to this policy
We may change this policy. We'll post the new version on this page with a new effective date, and if a change is significant, we'll tell account holders before it takes effect, by email or in the web app.
Contact
Future Vision Concepts, LLC, United States.
Email: support@quenote.app