The plain-language summary
Read the rest if you want the details, but here it is in three sentences:
- Your notes live on your device. We don't have a copy unless you turn on cloud backup — and when you do, your notebook is encrypted before it leaves your device.
- We don't sell, rent, or share your content with advertisers. Ever.
- You're in control. You can delete your account — and its cloud backup — from Settings at any time.
1. Who we are
The data controller for Logy is Logy, the maker of the Service. Where required by law, Logy maintains a data protection contact reachable at connect@uselogy.com.
2. What we collect
What we never collect
- The plaintext contents of your notes, voice recordings, photos or files — unless you turn on cloud backup (and then we only store an encrypted copy).
- Your contacts, your location, your microphone or camera in the background.
- Advertising identifiers, cross-site trackers, or fingerprinting signals.
What we do collect, and why
- Account identifier — only if you create an account. If you sign in with a phone number, we store your phone number (used for the one-time sign-in code). If you sign in with Google, we receive your name and email address from Google.
- Encrypted backup — if backup is on, an encrypted copy of your notebook is stored on our infrastructure (Appwrite Storage).
- Subscription state — managed by RevenueCat. We store an opaque user ID and your current entitlement, not your payment details.
- Anonymous analytics & crash reports — usage events (e.g. “first note created”) and crash diagnostics, via Firebase Analytics and Crashlytics. No note content.
3. How we use it
We use the data above strictly to:
- operate the Service — sign you in, restore your backup, gate premium features;
- process a note you've captured and return the result to your device;
- understand which parts of Logy are useful, where it breaks, and where to invest;
- respond to your support requests.
We do not use your data for advertising, profiling, or any “growth hack” you'd hate.
4. Who we share it with
We share the minimum data required with vendors who help us run the Service, under contract terms that mirror this policy. As of today they are:
- Appwrite — authentication and encrypted backup storage. Receives your account identifier and your encrypted backup.
- Google (Gemini AI) — sign-in with Google (name and email), and, if you opt in, AI processing via Gemini for the note you're capturing or asking about (see AI processing). Google acts as our service provider under Google's API and data processing terms, which prohibit retention or training on your content and require a level of data protection equivalent to the one described in this policy.
- RevenueCat — subscription management. Receives an opaque user ID and store receipts.
- Firebase (Analytics, Crashlytics) — anonymous usage events and crash diagnostics.
We do not sell or rent your data. We will disclose information only when legally required and, where lawful, after we've notified you.
5. AI processing
Logy's smart features — automatic titles, summaries, tags, smart categories, reminder extraction, note search, and the in-app Assistant — are powered by Google (Gemini AI), a third-party AI service. These features are opt-in: the first time you set up Logy we show a consent screen that explains what is sent and to whom, and nothing is sent to the AI service unless you agree. You can turn AI features off at any time in Settings → AI Features; when they are off, no note content leaves your device for AI processing.
When AI features are on and you capture a note or ask the Assistant a question, the content needed to produce the result is sent to Google for processing. This can include the text of your notes and the images, audio recordings, and files you attach (currently processed by Gemini 2.5 Flash Lite, plus Google's embedding model for search). The result — a title, summary, tags, category, and any extracted reminders — is returned to your device and stored locally.
We send only the note being processed or the notes relevant to an Assistant question — never your wider notebook. Your content is used solely to generate these results; it is not used for advertising. Google processes this data as our service provider under Google's API and data processing terms, which contractually prohibit using your content to train their models and require it to be protected to a standard equivalent to the one described in this policy.
6. Encrypted backup
Backup is opt-in and available on Premium. When you enable it, your notebook is encrypted on your device with AES-256-GCM before it is uploaded, so it travels and is stored as ciphertext rather than readable notes.
The encryption key is unique to your account. Logy manages this key for you — it is issued by our backend, tied to your account, and cached on your device in secure storage (iOS Keychain / Android EncryptedSharedPreferences) — so your backup restores seamlessly when you sign in on a new device, with no passphrase to remember or lose. Because we manage the key, this is not end-to-end (“zero-knowledge”) encryption; it protects your backup in transit and at rest.
7. Analytics & crash reports
To improve Logy, we collect anonymous usage events (which screens you visit, which features you use) and crash diagnostics (stack traces, device model, app version) via Firebase Analytics and Crashlytics. These events do not contain note content, file names, contact details or location.
8. How long we keep things
- Account & sign-in identifier — for as long as your account is active, plus 30 days after deletion to handle disputes and abuse.
- Encrypted backups — until you delete them or your account, then purged within 30 days from our systems and 90 days from immutable backups.
- Analytics events — retained in aggregated form for up to 14 months.
- Support correspondence — kept for as long as needed to provide support and meet legal obligations.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct it if it's inaccurate;
- delete it (“right to be forgotten”);
- port your data to another service;
- object to or restrict certain processing;
- withdraw any consent you've previously given.
You can delete your account and its cloud backup at any time from Settings. To exercise any of the other rights, write to connect@uselogy.com. We'll respond within 30 days. If you're in the EEA or UK and we can't resolve a complaint, you have the right to lodge it with your data protection authority.
10. Children
Logy is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided personal data to us, please contact connect@uselogy.com and we will delete it promptly.
11. Changes to this policy
If we make a material change to this policy — what we collect, how we share it, who our processors are — we'll notify you in the app and update the effective date above before the change takes effect.
12. Contact us
Privacy questions: connect@uselogy.com.
General support: our contact page.
Our promise is simpler than the policy: your notebook is your notebook. We're here to help you carry it — not own a copy.