Privacy Policy

DreamGlyph Studios LLC ("we", "our", "us") operates the NotePassing mobile application (the "Service"). This policy covers the Service specifically — for the DreamGlyph Studios website itself, see our site privacy policy.

1. Information We Collect

Account Information

Email address — required to create an account, used for sign-in (password or a one-time emailed code) via Supabase Authentication.

Note Content

The text, checklists, and formatting inside notes you create or that are shared with you. This is stored in our database so it can sync live between everyone in a shared group, and cached locally on your device for offline access.

Attribution

Each edit records which group member made it, shown as a colored initial and, on request, a name and timestamp — so a shared note shows who wrote or changed what.

Groups & Invites

Group membership, roles (viewer, member, admin, owner), and a member color assigned on joining. Invite links contain a token that is hashed (SHA-256) before storage — we don't retain the plaintext token once it's issued, and a database leak can't be replayed into group access.

2. How We Use Your Information

• Provide the Service — authenticate you, sync notes in real time between group members, and enforce who can view or edit what.

We don't use note content for advertising, and we don't sell any data.

3. Third-Party Services

• Supabase (Authentication) — User sign-in. Privacy policy
• Supabase (Postgres + Realtime) — Note storage and live sync between devices. Privacy policy

4. Data Storage & Security

• All data in transit is encrypted via TLS/HTTPS.
• Database rows are protected by row-level security: a "viewer" role can read a note but is blocked from writing to it at the database level, not just in the app's interface, so a modified client gains nothing.
• Unsent edits made while offline are queued in a local, on-device database and sync automatically on reconnect.

5. Data Retention

• Account data — retained as long as your account is active. You may request deletion by contacting us.
• Notes and groups — retained as long as they exist in the app. Deleting a group removes its notes from our database (records are soft-deleted first, then purged).

6. Your Rights

• Access — view all notes and groups you belong to within the app.
• Deletion — delete notes, leave groups, or (if you're the owner) delete a group at any time. To delete your account entirely, contact us.

7. Children's Privacy

NotePassing is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time — notably when billing (planned, not yet built) and social sign-in ship. Changes will be noted by updating the "Last updated" date above.

9. Contact Us

DreamGlyph Studios LLC
Email: privacy@dreamglyphstudios.com