Privacy Policy
Byenote is built around deleting things. This policy explains what we collect, why, and when it's gone. We don't sell your data, show ads, or track you across apps or websites.
Who we are
Byenote is run by Gordon Ho, a sole trader in Stockholm, Sweden, who is the data controller for the personal data described here. Contact: ghapps.support@gmail.com.
What we collect
- Account details: your email address and a securely hashed password, or, if you use Sign in with Apple, the identifier and email Apple shares with us (which may be a private relay address).
- Your content: the photos you take in the app, plus any title, notes and timer you set.
- Notification token: a push token for your device, so we can send reminders before photos expire. You can turn reminders off in Settings.
- Subscription status: whether you have Byenote Premium. Payments are handled entirely by Apple; we never see your card or payment details.
We don't collect your location, contacts, photo library, microphone audio, or analytics about how you use the app. The camera is used only to take photos inside Byenote.
Why we use it
- To provide the app: storing your photos until they expire, syncing them to your account, and sending the reminders you've turned on (performance of our contract with you).
- To keep accounts and the service secure (our legitimate interest).
- To manage your Premium subscription (performance of our contract with you).
How long we keep it
- Photos are deleted automatically when their timer runs out and move to Recently Deleted. On the free plan, Recently Deleted keeps only your 2 most recent photos, for 3 days; on Premium, photos stay there for 14 days. After that they're permanently deleted.
- Burned photos are permanently deleted immediately.
- Restored photos are available for 3 hours, then permanently deleted.
- Copies of photos stored on your phone for fast display are removed at the same time.
- Your account is kept until you delete it. You can delete your account at any time in Settings → Account → Delete Account, which permanently removes your account, photos and notification tokens. Residual copies in our hosting provider's backups are overwritten on its normal backup cycle.
Who processes data for us
We use a small number of service providers, only for the purposes above:
- Supabase hosts our database, photo storage and sign-in. Your data is stored in the EU (Stockholm, Sweden).
- Apple provides Sign in with Apple, App Store payments and push notification delivery.
- Expo relays reminder notifications to Apple's push service (your push token and the reminder text).
- RevenueCat manages subscription status on behalf of Byenote (your account ID and purchase history, but no payment details).
Some of these providers are based in the United States. Where data is transferred outside the EU/EEA, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Your rights
Under the GDPR you can ask to access, correct, delete or receive a copy of your personal data, and object to or restrict its use. Email ghapps.support@gmail.com and we'll respond within one month. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Children
Byenote isn't directed at children under 13, and we don't knowingly collect their personal data.
Changes
If we change this policy, we'll update the date above, and tell you in the app if the change is significant.