Privacy policy

Who is responsible

The data controller is Gethrs. For anything about your data, write to support@gethrs.app.

What we collect

Account: the email address and name you sign in with (through Google or an email and password), and a profile picture if you set one. Sign-in is handled by Clerk, which keeps the session cookie and the authentication data.

Your content: the notes, notebooks, spaces, tags, tasks, calendar events and attachments you create, plus the earlier versions of a note the app keeps so you can restore them. Read passwords on notes are stored as a hash, never in clear.

Sharing: the email addresses of the people you invite to a note, notebook or space, and, while a shared note is open, the position of your cursor, so the other person can see where you are writing.

Usage: which parts of the app are used (a note was created, a search was made, the calendar was opened) with your account id, so we can see what works. Never the text of your notes. This goes to Mixpanel, on servers in the European Union.

Feedback: what you write in the Feedback box, kept in our database and sent to us by email.

Technical: server logs with IP address, browser and time, kept by the hosting provider for a short period for security and debugging.

Why, and on what basis

To provide the service you asked for (contract): your account, your notes, sharing, backup, offline copies, emails you asked for (a share invitation, a feedback confirmation).

To keep the service working and safe (legitimate interest): logs, error reports, usage counts without note content.

Optional features you switch on yourself (consent): reading text out of a photo sends that image to Azure AI Vision (Microsoft) and gets text back; connecting Claude through the MCP connector lets Anthropic's Claude read and write your notes on your instruction, using a token you create and can revoke in Settings.

Who processes data for us

Clerk (authentication), Vercel (hosting), Neon (database, EU region), Resend (transactional email), Mixpanel (usage analytics, EU data residency), Microsoft Azure (image text reading, only when you use it), Anthropic (only when you connect Claude). Each processes data only to provide its service to us, under a data processing agreement.

Some of these providers are outside the European Economic Area. Where that is the case, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.

How long

Your content stays as long as your account exists. A note in the trash stays there until you empty it. Earlier versions of a note are kept so you can restore them.

If you delete your account, your notes, attachments, tasks and shares are deleted. Usage events in Mixpanel are kept for at most 12 months. Server logs are kept for a few weeks.

Cookies and local storage

The app uses a session cookie from Clerk to keep you signed in, and a cookie for your theme and language. It stores a copy of your notes in your browser (IndexedDB) so it works without a connection, and the read-password unlocks for the current tab. No advertising cookies, no third-party trackers.

Your rights

You can access, correct, export and delete your data. Export everything from Settings (a zip with notes, attachments and structure). Delete your account from Settings → Account. For anything else, or to object to a processing, write to support@gethrs.app. You can also complain to your data protection authority.

Changes

When this page changes in a way that matters, the date at the top changes and account holders are told inside the app.