Privacy Policy

Notes Into Results is operated by Traxxer Technologies in Jamaica. Traxxer Technologies is responsible for the personal information handled through the application.

Privacy and support contact: traxxertech@gmail.com

We aim to handle personal information consistently with Jamaica's Data Protection Act, 2020. This policy does not state or imply that Traxxer Technologies has completed any registration with Jamaica's Office of the Information Commissioner.

We collect only what the application needs to work:

• your email address;
• your first and last name;
• authentication and account information (including sign-in method and, where you use Google Sign-In, the account identifier returned by Google);
• account dates and status, and last-active information;
• your reminder preferences and whether you have completed onboarding;
• the note sessions you create and the notes inside them;
• quotes, questions and resources you record;
• your reflections and key takeaways;
• your ideas;
• your business/work, personal life and growth application notes;
• your actions and next steps;
• your success measures;
• your results and review notes;
• session metadata such as type, date, source, location, tags, speakers and connections;
• AI usage metadata (which feature was used, when, and for which session) — this does not include stored prompt or response text;
• your subscription and plan tier information;
• infrastructure-level technical and request information that our hosting and database providers process in order to deliver and secure the service.

Some free-text fields — for example Speaker, Connections, notes and reflections — may contain information about other people if you choose to enter it. You decide what to write; please only include what is appropriate and lawful.

Traxxer Technologies does not perform IP-based profiling, advertising tracking or behavioural profiling of members.

• to provide the Notes Into Results service;
• to authenticate your account and keep you signed in;
• to save and synchronise your sessions across your devices;
• to provide the Capture, Reflect, Apply and Act & Review functionality;
• to manage your actions, review dates and reminders;
• to respond to account and support requests;
• to enforce Free and Pro entitlements;
• to provide optional AI assistance when you ask for it;
• to generate exports you request (JSON data export, and PDF session export on Pro);
• to maintain security, prevent abuse and investigate misuse;
• to operate and improve the service using privacy-preserving internal aggregate statistics (for example counts of sessions, actions, reviews, exports and AI requests).

Your notes, reflections, applications, actions and review content are private to your account through the application's normal interface. Database access rules restrict each member's records to that member.

Administrators and the Owner do not have an application feature that lets them browse members' private notes, reflections or session content. Administrative screens show aggregate statistics and account-level information such as name, email, join date, account status and plan tier.

We do not claim that operator or infrastructure-level access is technically impossible. Authorised infrastructure or service access to underlying systems may occur where reasonably necessary to operate, secure, troubleshoot, back up or restore the service, or to comply with legal obligations.

• AI assistance is entirely optional.
• AI runs only when you deliberately request it from a Reflect, Apply, Act or Review screen.
• The Capture stage has no AI processing — writing notes never triggers an AI request.
• Only the session content relevant to the stage you asked about is sent.
• Identity fields such as your name and email address are not deliberately included in the AI prompt.
• AI suggestions are never added to your session automatically; you choose whether to add, edit or dismiss each one.
• Notes Into Results does not persist the AI prompt text or the AI response text.
• Only the usage metadata needed for quotas and aggregate measurement is retained while your account exists, and it is deleted with your account.

The current AI pathway is the Lovable AI Gateway with Google Gemini as the underlying model provider. These third-party providers process the session content you submit for the purpose of generating the response you requested, in line with their own terms.

Before your first AI request the application shows a versioned first-use AI disclosure describing this processing. If the AI pathway or data-handling behaviour changes materially, the disclosure version is increased and the notice is shown again.

AI output is generated text. It may be incomplete, inaccurate or unsuitable. Always review it before relying on it.

We use the following categories of service provider:

• Lovable Cloud / Supabase — database, storage and authentication infrastructure;
• Google — optional Google Sign-In, when you choose it;
• Cloudflare — hosting and request delivery;
• Lovable AI Gateway and Google Gemini — optional AI assistance.

Payment processing is not active as of the effective date of this policy. No payment card details are collected or processed by Notes Into Results. If Stripe or another payment processor is activated in future, this Privacy Policy will be updated before any new payment-related processing begins.

The application stores a small amount of information on your device:

• a Supabase authentication token in browser localStorage, so you stay signed in;
• account-scoped local drafts saved under keys of the form nir:draft:<userId>:<sessionId>, so autosave can recover writing that has not yet reached the server;
• a sidebar_state cookie used only to remember a user-interface preference.

Local drafts are cleared once the content has been saved successfully, when you delete your account, and when you confirm sign-out after being warned about unsaved writing. Stale drafts are pruned after 30 days.

There are currently no advertising cookies, no third-party marketing pixels, no cross-site tracking, no behavioural advertising and no session-recording or heatmap tools.

• Your sessions and content remain available while your account exists, unless you delete them earlier.
• AI usage metadata is removed when your account is deleted.
• Administrative audit history records administrative actions. When an account is deleted, identifiers belonging to a normal member in that history are anonymised as part of the deletion process.
• Where the deleted account held Administrator or Owner privileges, its identifiers in the audit history are marked for later anonymisation so administrative actions remain accountable; anonymisation is applied by a maintenance routine rather than immediately.
• Local drafts follow the save, sign-out, account-deletion and 30-day rules described above.
• Infrastructure and service-provider logs (for example hosting, database and authentication logs) follow those providers' own retention schedules, which we do not control.

You can delete your account yourself from Profile → Settings → Delete My Account. If your account uses a password, you re-enter it and type DELETE to confirm.

Deletion removes your application account together with your profile, sessions and their Capture, Reflect, Apply and Act & Review content, your ideas, actions, review notes, export records and AI usage records, and it clears local drafts held on that device for your account.

We cannot promise instantaneous erasure of information held independently of the application — for example provider backups and infrastructure logs on their own retention schedules, records we must keep for legal or security reasons, or records held by a future payment processor. Those are outside Traxxer Technologies' direct control.

Both Free and Pro members can use “Download My Data” in Profile to obtain a JSON file containing their profile, every session with its stage content, ideas, actions, review information, plan details and AI usage counts. The file is assembled in your browser and downloaded to your device.

PDF session export is a separate Pro feature for producing a branded document from a completed session.

Subject to applicable Jamaican law, you may:

• access the personal information we hold about you;
• correct or update your information — your name is editable in Profile;
• obtain a copy of your account data using Download My Data;
• delete your account and its content;
• request restriction of, or object to, certain processing where that right applies;
• withdraw consent where processing relies on your consent — for example by not using optional AI assistance;
• ask us any privacy question or make a privacy request.

Send privacy requests to traxxertech@gmail.com. Nothing in this policy is intended to limit rights you have under applicable law, including any right to complain to Jamaica's Office of the Information Commissioner.

Measures currently in place include:

• authenticated accounts, with optional Google Sign-In and compromised-password checking on password sign-up;
• row-level database security so records are scoped to the owning account;
• server-side authorisation for privileged operations;
• restricted Administrator and Owner roles, assignable only by the Owner and never self-assignable;
• server secrets held outside the application code and never exposed to the browser;
• periodic application and dependency security scans;
• restricted anonymous database access;
• signature verification prepared for payment webhooks should payments be activated in future;
• account-scoped deletion and export routines.

No internet service can guarantee absolute security. We work to protect your information but cannot promise that unauthorised access, loss or misuse will never occur.

Our service providers operate globally, so your information may be processed on servers outside Jamaica. We do not claim that all data remains physically in Jamaica. Traxxer Technologies selects established service providers and relies on their contractual terms and security safeguards as appropriate to the service and applicable requirements.

Notes Into Results is intended for adults aged 18 and over and is not directed to children. We do not knowingly solicit or collect personal information from children.

If you are a parent or guardian and believe a child has created an account, contact traxxertech@gmail.com and we will take appropriate steps, including removing the account.

If we make a material change, we will update the version number and effective date above and show a short in-app notice asking you to acknowledge the updated policy the next time you sign in. Continued use after an update is subject to the current version. You can read this page at any time without being blocked from using the application.