Security at Noter AI
Your recordings and notes are encrypted in transit and at rest, and only your account can open them in the app. They are not end-to-end encrypted, because our servers must process the audio to make your notes. We do not use your audio, transcripts or notes to train AI models.
By Yousef Zuriqi Last reviewed
This page is a short version of two notices: the privacy notice for the apps and the web app privacy notice. Web payments and the automated-abuse check apply to the web app and come from the web app notice. If this page and a notice ever differ, the notice applies.
How your audio becomes a note
Here is the path a recording takes, from your phone to the finished note in your account.
1. Your recording goes up
- Step 1:Your deviceThe recording is saved on your phone first.
- Step 2:Encrypted uploadIt goes to our cloud storage over HTTPS (TLS).
- Step 3:Cloud storageOur cloud hosting provider keeps it, encrypted at rest.
2. Your note is made
- Step 1:Speech to textOur speech-to-text provider turns the audio into a transcript.
- Step 2:AI notesOur AI model provider writes the summary, analysis and translations.
- Step 3:Your accountThe note is saved. Only your signed-in account can open it.
What is encrypted, and what is not
Encrypted
- Everything that moves between the app, our servers and our providers (HTTPS/TLS).
- Your account, notes, transcripts and audio at rest with our cloud hosting provider, with encryption managed by that provider.
- Our backups.
Not encrypted end to end
- Your notes are not end-to-end encrypted. Our servers must process the audio to make the transcript and the summary.
- No method of storage or transfer is 100% secure. Keep your phone and your sign-in details safe.
Other protections
- Security rules let only your signed-in account read or change your own notes and audio files.
- A transcription provider gets your audio through a private link that expires within a few hours.
- App integrity checks help block requests that do not come from the real Noter AI app.
- In the web app, an automated-abuse check stops bots from using the free plan. We count requests per IP address using a code that changes every day. We do not store the address itself. This is described in the web app privacy notice.
- We do not look at your recordings, transcripts or notes, unless you ask for help with a specific note, we must fix a technical problem, we must stop abuse, or the law requires it.
Our cloud hosting provider adds its own physical and infrastructure security, backed by independent security certifications.
Who processes your data
We use a small number of providers. Each one gets only what it needs for its job. None of them may sell your data.
Cloud hosting provider
Hosting, storage, database, sign-in
Stores your account, notes, transcripts and audio. Runs our servers, sign-in, app integrity checks and push notifications.
Speech-to-text provider
Speech to text
Gets your audio through a private link that expires within a few hours, and returns the transcript. It does not use your audio to train its models. We delete the job and the audio there once the transcript is saved.
Backup speech-to-text provider
Speech to text, only when the main provider is down
Used only if the main speech-to-text provider is not available. Under its standard terms, this provider may keep the audio sent to it and use it to improve its speech models.
AI model provider
Summaries, analysis, chat, translation
Gets the transcript or the audio, and your chat questions, and returns summaries, translations, speaker names and answers. Under its terms it does not train on this data. It may keep it for a short time to run the service and stop abuse.
Meeting-bot provider
Meeting bot and calendar
Joins a Zoom, Microsoft Teams, Google Meet or Webex meeting when you send the bot, and records the audio (not video). Reads your connected calendar to find meetings. It deletes its copy after we copy the audio to your account, and in any case within 72 hours.
Payment provider
Web payments
Takes payments on the web, adds any tax, and sends the receipt. We never see your card details. Described in the web app privacy notice.
Subscription records service
Subscription records
Keeps track of your plan. Gets your account ID, email address, name, purchase history and ad campaign attribution.
Apple and Google
App store billing and sign-in
Take payments in the App Store and Google Play, and run Sign in with Apple and Google Sign-In, under their own privacy policies.
We also use app analytics and crash-reporting tools, which never get your recordings or notes, an email delivery provider, and website hosting and form providers. You can ask for the current list of providers at support@noterai.net.
Where your data is stored
Our main database is on servers in Saudi Arabia. Your audio files and our servers are in the United States. AI processing runs on Google infrastructure and can take place in any country where Google runs it. Our speech-to-text, meeting-bot and subscription providers mainly process data in the United States. These locations may change over time. The privacy notice explains the safeguards for moving data between countries.
How long we keep it
| Data | How long |
|---|---|
| Notes, transcripts, summaries and audio | Until you delete them or your account. There is no timer, for free and paid users alike. Deleting a note deletes its transcript and audio too. |
| AI chat about a note | Until you clear that chat or delete your account. |
| Copy at the speech-to-text provider | Deleted once your transcript is saved. |
| Copy at the meeting-bot provider | Deleted after we copy the audio to your account, and in any case within 72 hours. |
| Encrypted backups | Deleted data can stay in backups for up to about 100 days. Backups are only used to recover from data loss. |
| Purchase records and support emails | As long as tax, accounting and legal rules need, and to answer your questions. |
Delete your account and data
To delete one note, delete it in the app. The note, its transcript and its audio file are deleted. To delete everything:
- 1Cancel your subscription first. Deleting the app or your account does not cancel it. The refund policy shows how to cancel on each platform.
- 2In the Noter AI app, open Settings and choose Delete Account. On iPhone and iPad, it is inside your profile. The web app has no delete button: use the phone app, or write to us.
- 3To be sure every piece of data is erased, including chat history and your subscription profile, email support@noterai.net from the email address of your account. If you used Sign in with Apple and hid your email, include the address shown in the app.
- 4Deleted data leaves our encrypted backups within about 100 days.
Report a security problem
If you think you found a security problem in Noter AI, email support@noterai.net with the steps to see it. Please give us time to fix it before you share the details in public.
Questions
Does Noter AI use my recordings to train AI?
No. We do not use your audio, transcripts or notes to train AI models. Our main speech-to-text provider and our AI model provider do not train on them either. One exception: if the main speech-to-text provider is down, a backup speech-to-text provider is used, and under its standard terms it may use the audio to improve its models.
Is Noter AI end-to-end encrypted?
No. Your data is encrypted in transit (HTTPS/TLS) and at rest with our cloud hosting provider. It is not end-to-end encrypted, because our servers must process the audio to make the transcript and the summary.
Can anyone at Noter AI read my notes?
We do not look at your recordings, transcripts or notes. The exceptions are when you ask us for help with a specific note, when we must fix a technical problem, when we must protect the service from abuse, or when the law requires it.
Where is my data stored?
Our main database is on servers in Saudi Arabia. Your audio files and our servers are in the United States. AI processing runs on the infrastructure of our AI provider and can take place in any country where that provider runs it. These locations may change over time.
What happens to a meeting the bot recorded?
After the meeting, we copy the audio into your account and ask the meeting-bot provider to delete its copy. That provider is also set to delete the recording by itself within 72 hours.
How do I delete my data?
Delete a single note in the app, and its transcript and audio go with it. To delete everything, cancel your subscription first. Then, in the Noter AI app, open Settings and choose Delete Account. On iPhone and iPad, it is inside your profile. To be sure all data is erased, including chat history, email support@noterai.net from the email address of your account.