Privacy Policy
How we protect your data and what we do with it.
Legal basis for data processing
We process data based on your consent (Art. 6(1)(a) GDPR) or our legitimate interest (Art. 6(1)(f) GDPR), for example to provide the service or improve security.
These policies explain what data we collect, how we use it, and what rights you have. They comply with the EU GDPR (2016/679) and applicable Slovak laws.
What data we collect
Email and login credentials (password stored as a hash).
Note content, tags, types, and other information you enter or select.
Other data you provide via forms or while using the service (e.g. account settings, one-time codes, security info).
Technical and analytical data, such as your IP address, app version, device type, and anonymous usage statistics.
How we use data
We use your data solely to provide and improve the Notendario service. We do not sell it to third parties or store data beyond what is necessary for the app to function.

Your privacy matters to us. At registration, we store only your email and a hashed password. All notes are private unless you choose to share them. We do not collect images, GPS data, or location. All data you provide is voluntary and securely stored on our servers.

Your rights
You have the right to access, correct, or delete your personal data.

Account and data deletion
You can delete your account at any time after logging in under Settings > My Account > Delete Account.
Upon confirmation, all personal data associated with your account, including email and notes, will be deleted.
Requests for deletion must be made after logging in via the website https://notendario.com
If you lose access, contact support at notendario.privacy - telepora.com. We may ask for identity verification.
All data will be deleted immediately, but no later than 14 days. Backups will be anonymized or destroyed within 30 days.
Data security
We implement appropriate technical and organizational measures to protect data against misuse and unauthorized access.

Data retention
We retain personal data only for as long as the account exists or until it is no longer needed for service provision.