Privacy policy

01 · Scope and operator

This policy explains how ThinkAsModel Limited（思模科技有限公司）, a Hong Kong company, handles information in Alayo Notes. Contact [email protected]. No Alayo account is required. Alayo Notes App Store purchases operate separately from the Alayo file-management product’s website payments, licenses and cloud AI services.

02 · Where your content lives

Notes, tasks, events, finance entries, clips and Page text live in Markdown files in your Vault. Referenced original photos and audio are also part of the Vault. SQLite indexes and thumbnails support local search and display. Alayo Notes does not upload these records to developer-operated servers.

When iCloud Drive is available, Apple handles Vault sync under your Apple Account; otherwise files stay in local device storage. Apple and your account settings govern iCloud service, security, sync and retention. We cannot access your private iCloud Vault. Original photos may include capture time, device and location metadata.

03 · Capture, transcription and reminders

The photo picker provides only photos you select. Recording uses the microphone when you actively capture audio. The original recording is saved before on-device SpeechTranscriber transcription; Apple system speech resources may need downloading. The initial release does not offer Plus cloud processing or send your records to external large language model services.

Text/links you actively share, and content you paste, are processed locally. Image sharing currently carries only a title/comment, not image bytes; photos must be selected or pasted in the main app. Shared items are removed from the local inbox after successful import by the main app; failures remain available for retry. Reminders use local notifications, which may include task or event text on the Lock Screen. You can withdraw microphone and notification permissions and continue capturing text.

04 · Purchases and trial

Apple StoreKit handles the Core one-time purchase and the actively claimed zero-price 14-day trial. Payment card information and Apple Account credentials do not pass through our servers. The app stores verified purchase/trial history, original trial dates, store environment and an app transaction account identifier locally for restore, offline use and account isolation. These are not uploaded to a developer transaction backend.

Reinstalling or restoring does not restart the trial. There is no automatic renewal or charge. Apple may provide developers with store sales, financial and diagnostic reports under Apple’s policies and user settings; this is separate from the app uploading personal notes.

05 · Online images, links and website

A remote image in a document is requested only after you tap Load image. Its host can receive your IP address, request path and ordinary network metadata and handle them under its own policy. We do not control logs maintained by external hosts you choose. Links open in a browser or another app.

Cloudflare Pages hosts the support and privacy website and may process ordinary request metadata for delivery, security and operations. The Notes pages use system fonts and load no advertising scripts; site traffic is measured by the host’s own Cloudflare Web Analytics, which uses no cookies or localStorage and does not identify or track individuals; on each page view your browser sends Cloudflare an anonymous beacon (page URL, referrer, and performance metrics), Cloudflare discards the IP address at the edge, raw beacon data is kept for 7 days and only downsampled aggregate data after that, and we look only at aggregate reports (block the script from static.cloudflareinsights.com if you prefer not to be counted). Website handling is separate from local app processing. Other Alayo products’ purchases and services have their own policies.

06 · Support requests, purposes and sharing

When you email support, we receive your sender address, message and files you choose to attach, to respond and resolve the issue. Remove unnecessary private content first. The app does not automatically send logs, notes or transaction identifiers. We do not use support information for advertising tracking or sell it.

An email service processes support correspondence; Cloudflare provides website infrastructure. Apple independently handles system services and store transactions. Providers may process information outside Hong Kong. We may disclose information when required by applicable law.

07 · Retention, deletion and choices

You control the Vault. Archived content remains. Deleted content enters Trash, with the 30-day rule applied when app cleanup runs. Original assets and copies on other devices, iCloud and backups are not guaranteed to disappear simultaneously. Check those locations before permanent deletion; we do not hold a Vault copy to delete or restore on your behalf.

Local settings, purchase caches and temporary drafts are retained for their purposes. Deleting the app may remove local information but does not revoke Apple purchase history or automatically remove all iCloud and backup copies.

We normally delete support emails and attachments within 30 days after the support request is closed. If retention must be extended to handle an unresolved dispute or fulfill a legal obligation, we retain only the necessary information and delete it when that need ends.

You may request access to and correction of support information we hold, and deletion where applicable law and necessary retention obligations allow. Contact [email protected]; we may need to verify your identity.

08 · Policy updates

If data handling changes, we will update the explanation and provide notice or obtain consent where applicable. Both English and Chinese versions are provided; contact support if you notice a discrepancy.

For operating instructions, see Help & support.