Paperle1. Information we handle
Note data
Note text, formatting, colors, positions, reminders, images, recordings, videos and drawings are stored on your device.
Google account data
If you choose to sign in, we receive the email address, display name, profile picture, account ID and OAuth credentials Google provides, to sign you in, check your subscription and sync with Google Drive.
Apple account data (Sign in with Apple)
If you sign in with Apple, we receive the email address Apple provides (Apple's relay address if you choose to hide your email), the name you give the first time you sign in, your Apple account ID and Apple's authorization credentials, to sign you in, check your subscription and revoke Paperle's authorization with Apple when you delete your account. Apple and Google sign-ins with the same email are the same account.
Shared notes
When you share a note, its title, color and content (including drawings and media information), and each member's email address and role, are stored on our server so members can edit together in real time. Only members you invite who accept can access it. This data is deleted from the server when you stop sharing or delete your account. Notes you do not share never pass through our server.
Subscription and payment data
Purchases in the desktop app are processed by Polar; purchases on iPhone or iPad are processed by Apple (App Store). Paperle never receives or stores full card numbers. Our licensing service stores your email, plan, subscription status, the payment provider's customer or transaction ID, the license period and the payment notifications we need.
2. Google Drive access and the Google API Services User Data Policy (Limited Use)
Cloud sync is off by default. When you turn on Google sign-in and sync, Paperle only requests the https://www.googleapis.com/auth/drive.appdata scope to create, read and update note data in a hidden folder in your Google Drive that belongs to Paperle. This scope cannot browse, access or change any of your other files or folders in Google Drive, and synced note content does not pass through Paperle's servers.
Paperle's use and transfer of information received from Google APIs to any other app adhere to the Google API Services User Data Policy, including the Limited Use requirements.
"Paperle's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements."
- No advertising: we never use your Google user data, account identifiers or note content for personalized advertising or marketing.
- No AI or machine learning training: we never use, sell or transfer your Google user data to train or improve any artificial intelligence or machine learning model.
- No sharing with third parties: except to provide the sync you ask for or where the law requires, we do not transfer or sell data received from Google APIs to anyone.
- No human access: nobody reads your synced data unless you explicitly agree so we can investigate a technical problem, the law requires it, or the data is fully de-identified and aggregated.
3. Why we use it
- To provide notes, reminders, sync and sharing.
- To verify your sign-in and PRO subscription.
- To handle payment status, refunds, cancellations and license changes.
- To keep the service secure and prevent fraud and abuse.
- To answer support requests and improve the product.
4. Third-party services
| Service | Purpose | Data it may handle |
|---|---|---|
| Google OAuth / Drive | Sign-in and sync | Basic account data, OAuth credentials, synced content |
| Sign in with Apple | Sign-in | Email or Apple relay address, name, account ID, authorization credentials |
| Polar | Desktop checkout, subscriptions, taxes and refunds | Email, billing and payment data |
| Apple App Store | Subscriptions and payments on iPhone and iPad | Transaction and subscription information (Apple does not give us your payment details) |
| Cloudflare (Workers, D1, Durable Objects) | Licensing, payment notifications and shared notes | Email, account ID, subscription status, shared note content and member lists |
5. Retention and security
We keep server data only as long as needed to provide the service, meet legal obligations and resolve disputes. Server data is stored encrypted by Cloudflare, and only signed-in users can access, through our API, the data they are allowed to see. OAuth credentials and local data stay on your device; please keep your device and the account you sign in with secure.
6. Your choices and rights
You can turn off automatic sync, stop syncing or sharing particular notes, sign out of Google, or remove Paperle's access in your Google account security settings; with Sign in with Apple, stop using it under Settings > Apple Account > Sign-In & Security > Sign in with Apple on your iPhone. You can delete your account in the app's account settings; the data on our server about you is deleted with it, except payment and tax records we must keep by law. You can also email us to see or correct the personal data we hold.
7. Children's privacy
Paperle is not directed at children under the age of digital consent where they live.
8. Changes to this policy
If the way we handle data changes significantly, we will update the date on this page and, where reasonable, let you know in the app or on the website.
9. Contact
Email: support@paperle.site