Privacy

Signed out — the default, and fully featured. Everything you write lives in your browser’s local storage, or on your device in the iOS app. It is never transmitted. The app works with the network off. Nobody operating Driftnote can see it, because it never arrives anywhere.

Signed in — optional, and only for keeping one desk across several devices. Your stories are stored in a hosted Postgres database (Supabase) so they can reach your other devices. Row-level security scopes every row to your account: the database will not return another person’s rows to you, or yours to them.

If you sign in: your email address and display name, from whichever provider you used, and whatever you write in the app — stories, notes, characters, timeline events, drafts. Sessions are recorded with an approximate IP address and a browser user-agent string so that the app can show you which devices are signed in and let you end them.

If you do not sign in: nothing is collected, because nothing is transmitted.

There are no analytics, no advertising, no tracking pixels, no third-party scripts, and no cookies beyond the one that keeps you signed in.

AI mode is off unless you switch it on, and it requires your own Anthropic API key. While it is on, the text of the story you ask about is sent to Anthropic for that one request, so it can answer.

Your API key is stored in your browser and travels with each request. It is never stored on any Driftnote server. Anthropic’s handling of that request is governed by your agreement with them, not this one.

With AI mode off, nothing leaves your device at all.

Your stories, earlier versions of draft pages, saved Ask conversations, your API key if you set one, and your preferences — theme, reduced motion, and whether earlier versions are kept.

Settings lists all of it, with the number of bytes, and erases every part of it on request. Keeping earlier versions can be switched off, which also deletes the ones already kept.

On your device: until you delete it, clear your browser data, or remove the app.

In an account: until you delete it. Deleting a story deletes it and everything inside it. Deleting your account, from Settings, removes the account record and every story attached to it. Neither is recoverable, which is why the app asks twice and offers a backup first.

Settings will download everything as a single JSON file at any time, and restore from one. There is no export request to file and nobody to ask. The app also exports any story as Markdown.

Supabase hosts the database and handles sign-in, and only for accounts. Vercel serves the website. Google and Apple verify who you are if you use their sign-in, and tell us your email address and name. Anthropic answers AI requests, and only while AI mode is on.

Nothing is shared with anyone else, and none of it is sold. There is no advertising business here to sell it to.

You can see, correct, export and delete everything from inside the app, without asking anyone. If you are covered by the UK GDPR, the EU GDPR, or similar law, those rights are yours regardless, and the buttons in Settings are how they are exercised here.

If something in the app cannot do what you need, write to the address below and it will be handled by hand.

Driftnote is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has created one, write to the address below and it will be removed.

If this policy changes in a way that affects what is collected or who it goes to, the date at the top changes with it. Material changes to how an account’s data is handled will be announced by email to the address on the account before they take effect.

Privacy questions, deletion requests, or anything this page didn’t answer: driftnoteapp@gmail.com.