Your notes, and where they go.

Last updated: 19 October 2026

Summary

Notes stored on your device

noodl works without an account. Everything you create in guest mode (notes, folders, images, the Recycle Bin, version snapshots and settings) is saved in your browser's IndexedDB storage on this device. We do not receive a copy.

That data is controlled by your browser. Clearing site data, using a private window, or a browser deciding to free up space can remove it. Make a backup from Settings › Data if a note matters to you. To remove everything from a device, clear this site's data in your browser settings.

Sign-in and sync (optional)

If you choose to sign in with Google, we use Supabase Auth to identify your account. Supabase receives your email address and, for Google sign-in, your account's basic profile (name and photo).

While you are signed in, your notes are synced to a Supabase Postgres database, stored under your account's user ID with row-level security so that only you can read or change them, and copied back to IndexedDB on each device where you sign in. When you first sign in, notes made in guest mode on that device are merged into your account. Two things are never synced and stay only on the device that created them: images you add to notes, and version snapshots.

Signing out stops syncing. You are asked whether to keep a copy of your notes on that device or remove them from it. To have synced notes deleted from the cloud, delete them in the app while signed in (they are removed for good after 30 days in the Recycle Bin), or contact us.

AI features (signed in, and only when AI is on)

AI features are provided by Groq (GroqCloud API), with Google Gemini (Gemini API) as a backup when Groq is busy. They are available only while you are signed in. Your browser sends each request to a small noodl function on our host (Vercel), which checks that you are signed in, applies a rate limit, and forwards the request to Groq (or, if Groq is unavailable, to Google). We do not store request content. What is sent depends on the feature:

• Typeahead suggestions: what you have typed in the current node, the texts of the nodes from the root (the note's title) down to its parent, and the texts of its sibling nodes.
• Generate a map: the prompt you write and the depth you choose.
• Summarize pasted text: the text you paste.
• Rewrite node: the node's text, the path of node texts above it, and the kind of rewrite you picked.
• Expand into ideas: the node's text, the path of node texts above it, and the texts of its existing children.

Your other notes are never sent. Groq and Google process these requests under their own API terms. When a request falls back to the free tier of the Gemini API, Google's terms allow it to use request and response content to improve its products, which may include human review. Don't put anything sensitive in a node while AI is on, or switch AI off. [Reviewer: re-check this paragraph against the current Groq and Gemini API terms before launch.]

You can switch AI off entirely in Settings › AI. With AI off, nothing is sent to any AI provider, and typeahead suggests matches from your own notes, computed on your device.

What we do not do

• No advertising, and we do not sell or share your data for advertising.
• No analytics or tracking scripts on this website or in the app.
• No tracking cookies. The app uses browser storage only to run: your notes, your settings, and keeping you signed in if you choose to sign in.

Hosting

This website, the app and the AI function are served by Vercel. Like any web host, it processes your IP address and request details to deliver pages, and keeps short-lived logs for security and reliability.

Children

noodl is a general-purpose tool and is not directed at children under 13.

Changes and contact

If this notice changes, we will update the date at the top of this page. For questions or deletion requests, contact [contact address to be added before launch].