This Privacy Policy explains how Boulder Digital Media LLC, doing business as A Note For You ("we," "us," "our"), collects, uses, and shares information in connection with the A Note For You website, application, and related services (the "Service"). It applies to both subscribers who create an account ("Buyers") and the people they share gifts with ("Recipients").
Email address and password (handled by our authentication provider), and billing details processed by Stripe (we do not store full card numbers).
The notes, photos, sender/display names, delivery schedule, and any settings you configure for each gift you create.
If you order a printed copy of a gift's book, the name, postal address and phone number it is to be delivered to. If you order an eBook, nothing beyond your account email, which the download link is sent to.
An email address and/or phone number a Recipient provides to receive deliveries, their chosen delivery time and time zone, favorited notes, and — if the Buyer enables a password gate — a password the Buyer or Recipient sets to access the gift page. That password is stored in a form that cannot be read back; if a Recipient asks to replace a forgotten one, we email a link to the address their notes are sent to.
Basic technical information such as browser type, general device information, and push-notification subscription details, collected automatically as part of operating the Service. When a new account is created we also record how that person found us: the website or campaign link they arrived from and which example on our home page they chose. For each gift we record the first time its link is opened, as a date and time only.
We do not sell your personal information, and we do not use your notes or photos for advertising.
We use the following third-party providers to operate the Service. Each processes certain information on our behalf, subject to their own privacy and security practices:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage for accounts, gifts, notes, and photos |
| Stripe | Payment processing and subscription billing |
| Resend | Sending transactional emails (note deliveries, receipts, account notices) |
| Twilio | Sending SMS note deliveries, where a Buyer and Recipient have enabled the SMS add-on |
| Netlify | Website and application hosting |
| Cloudflare | Storage of our encrypted backups and of the files made for book orders |
| GitHub | Runs our nightly backup and prepares the files for book orders |
| Lulu Press | Prints and posts printed books. Receives the book itself (the notes, photos and replies in it) and the delivery name, address and phone number, which it passes to its courier |
We do not otherwise share your personal information with third parties, except as needed to comply with law, enforce our Terms, or protect the rights, property, or safety of Boulder Digital Media LLC, our users, or others.
When a Buyer creates a gift, the notes and photos in that gift are made accessible to whoever the Buyer shares the gift link with. If the Buyer enables a password gate, that content is further restricted to people who know the password. Recipients should be aware that the Buyer who created the gift is able to view, edit, and delete the content of that gift at any time.
We use browser local storage (not third-party advertising cookies) to remember device-level preferences, such as your chosen text size, favorites-view layout, and favorited notes, so the Service works smoothly across visits, and to remember — until you create an account — the link that first brought you to our site. We do not use this data for cross-site tracking or advertising.
We retain account and gift information for as long as your account is active. Buyers can permanently delete a note, or a gift and all of its notes, photos, voice notes and replies, at any time from their account. Buyers can also delete their entire account from their account page; this erases every gift, note, photo, voice note and reply, along with their recipients' details, and cannot be undone.
When a gift ends, what was already delivered stays online for the Recipient to read for 12 months, or 10 years if a book was ordered for that gift, or longer if the Buyer purchases more time — in each case, unless we stop operating the Service sooner, for any reason (see our Terms, which also explain how these periods may change). We email the Buyer before that time is up. Afterwards the gift and all of its notes, photos, voice notes and replies are deleted, as below. We keep a record of which gifts were deleted and when — the gift's and the account's identifiers and the dates, nothing from the gift itself — so that a deletion can be repeated if a backup is ever restored.
Deleted information is removed from our live systems straight away. Copies held in our backups are removed within 30 days and are not used to restore a deleted account. A photo that has already been opened may stay saved on the device it was viewed on, which we cannot reach. The files we make for a book order are deleted within 30 days of being made; a printed book that has already been posted cannot be recalled, and our printer keeps its own order records. Some information, such as records of past payments, may be retained where required for legal, tax, or fraud-prevention purposes.
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. Buyers can exercise most of these directly in their account (editing or deleting gifts and notes, changing recipient preferences, or deleting the account) or by emailing support@anoteforyou.app. Recipients do not have an account, so a Recipient who wants their information removed should email support@anoteforyou.app and we will remove it. We respond to deletion requests within one month.
The Service is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or the relevant minimum age in your jurisdiction). If you believe a child has provided us personal information, contact support@anoteforyou.app and we will delete it.
We use reasonable technical and organizational measures, including encryption in transit and access-controlled storage, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Service is operated from the United States, and information is processed and stored there and by the providers listed above, which may be located in other countries. By using the Service, you consent to this transfer and processing.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Questions about this Privacy Policy can be sent to support@anoteforyou.app.