Privacy Policy

Last updated: October 15, 2026

1. Who we are

Apioni is operated by Foo AI Corp. ("Apioni", "we"). We are the data controller for the personal data described in this policy. You can reach us anytime at contact@apioni.com.

2. The short version

You sign in, and your notes are stored on our servers so they follow you across every device you use. You can export them as Markdown (.md), Word (.docx), PDF, HTML, JSON (blocks), and Obsidian vault (.zip) at any time; we store them only to run the service, and there are no ads and no advertising trackers anywhere in Apioni. You can export or delete your data at any time.

3. What we collect

• Acquisition source — on a public website visit, we keep a first source, medium, campaign identifier and external referrer hostname for up to seven days in your browser. If you create an account within that period, we save that source with your new account to understand sign-ups. We do not store full referrer URLs or click identifiers, and honor Do Not Track and Global Privacy Control. The account record is deleted with your account.
• Account — when you create an account, we store the email address you sign up with and a password credential (handled by our authentication provider, Supabase — we never see your plaintext password).
• Notes, when cloud sync is on — signing in and syncing stores your note content, note titles, and edit timestamps in our database (hosted by Supabase) so your devices can stay in sync. We store them only to provide the service; we do not sell them and we do not use them for advertising.
• Voice notes — when you record a voice note, the recording is uploaded to our storage and transcribed into text so you can find it later by searching. We keep the recording and the transcript with your account until you delete them. Apioni records only while you are recording, never in the background.
• Files you attach — an image, video, audio file, PDF or any other file you attach to a note is uploaded to our storage and kept with your account so it opens on every device. We store attachments only to provide the service.
• Subscription information — if you subscribe to a paid plan, payment is handled by Polar; your card details never touch our systems. You enter them on Polar’s checkout, which collects your name, email, billing address and card details to take the payment and charge the right tax. We receive your email address and order record to run your subscription and provide support.
• Analytics — when analytics are enabled on this website, Google Analytics measures visits to the public pages (home, pricing, blog, sign-in) and counts sign-ups, so we can see which channels bring people to Apioni. It receives the page address without its query string (campaign tags excepted), the page title, the referring site, your approximate location and device type, and a first-party cookie (kept for 13 months) that recognises a returning browser. Visitors in the EU, the EEA, the United Kingdom and Switzerland get no analytics cookies. It does not collect what you type into forms. Google Analytics sends nothing from inside the note app and does not load at all if you open the app directly, so it never sees your notes, their titles or their addresses; it does not load anywhere if your browser sends Do Not Track or Global Privacy Control. We also use cookieless tools (Cloudflare Web Analytics and/or Plausible) to count page views and page-load speed. These scripts load only when analytics are enabled for a deployment.
• Error reports — none. Apioni does not send crash or error reports anywhere. If something breaks, tell us what happened at the support address and we will look into it.
• Local storage — the app uses your browser's local storage for settings like theme and open tabs, and as an offline cache of your notes so you can keep editing without a connection. The app sets no tracking cookies; the website's analytics cookie is described above.
• API keys — if you create an API key in Settings → API & MCP we store its name, a short prefix, a one-way hash of the key, the scope you chose and when it was last used. We never store the key itself, and we cannot show it to you again.
• Connected apps — if you approve an app on the connect screen we store that app's client id, the name it registered, the scope you allowed, when you approved it and when it last used your account. The app's access token is issued and refreshed by our authentication provider; we do not store it.
• Slack connection — if you choose to connect Slack, we store the workspace name and ID, your Slack user ID, the approved read scope, and access and refresh tokens in our protected credential vault. We temporarily store the content of a message or short thread that you explicitly preview, and save it as a note only when you choose an Apioni location. A short-lived browser cookie keeps the OAuth return bound to the browser that started it; it is not used for tracking.
• Notion connection — if you choose to connect Notion, we store the workspace name and ID, a connection ID, and access and refresh tokens in our protected credential vault. We temporarily store the page content you explicitly preview, and save it as a note only when you choose an Apioni location. A short-lived browser cookie binds the OAuth return to the browser that started it; it is not used for tracking.

4. How we use it

• To provide the service: storing and syncing the notes you choose to sync.
• To clean up and answer questions about your notes with AI, when you ask for it — this sends the note text you are working on, or the note excerpts an answer is based on, to our AI provider (see section 5). Notes you keep local are never sent.
• To operate your account and keep it secure.
• To let tools you connect — for example Claude, ChatGPT or Cursor over MCP, or your own scripts over the API — search, read, create and update your notes. This happens only when you create an API key and give it to that tool, or approve that app on the connect screen, only within the scope you chose, and only until you revoke the key. We do not send your notes to those tools ourselves; they fetch with your key, and what they do with your notes afterwards is governed by their terms, not ours.
• To retrieve the public-channel Slack message link you choose, show you a preview, and save it only when you confirm a destination. We do not scan your Slack workspace in the background or post messages to it.
• To find pages that you shared with our Notion connection when you ask to browse, preview only the page you choose, and save it only when you confirm a destination. We do not scan or edit your Notion workspace in the background.
• To run your subscription and help you when something goes wrong.
• To understand roughly how many people visit the website and which channels bring sign-ups.

Under the GDPR, our legal bases are: performance of a contract (providing sync and your subscription), our legitimate interests (keeping the product secure and working), and consent where the law requires it. You can withdraw consent at any time.

5. Who processes data for us

• Resend — delivers account mail and optional email updates. It receives your email address and message content, including the note title in a second-day email. Turn off email updates in Settings or through the unsubscribe link; security and billing mail is separate.
• Supabase — database, authentication and file storage for accounts, synced notes (note content, titles, edit timestamps, and your account email), voice recordings and the files you attach, hosted on AWS in the United States (us-west-2, Oregon).
• Cloudflare — website hosting, protection, and cookieless page-view analytics.
• Plausible Analytics — cookieless page-view analytics, hosted in the EU. Website only.
• Google Analytics — visit and sign-up measurement on the website's public pages (Google LLC, United States). Never in the note app.
• OpenAI — the AI that cleans up notes and answers questions about them. It receives the note text you send for processing, the note excerpts used as evidence for a chat answer, your search queries, and the audio of a voice note so it can be transcribed. Processed in the United States. OpenAI does not train its models on data sent through its API.
• Slack — a third-party service you choose to connect, rather than our AI processor. We send the OAuth exchange and the selected channel and message IDs to Slack to retrieve content you can already access there. Slack handles that request under its own terms and privacy policy; we receive the selected message content.
• Notion — a third-party service you choose to connect. We send your selected page ID or an explicit page-title search to Notion to retrieve pages you shared with the connection. Notion handles those requests under its own terms and privacy policy; we receive the selected page content.
• Polar (Polar Software, Inc. (United States)) — subscription payments and billing. Polar is the merchant of record, so it is the seller on your receipt, it takes the payment, and it charges and remits any tax due in your country. It receives the name, email, billing address and card details you enter at checkout; we receive the order record, not your card.
• Vercel — hosting for this website and the app. Pages that show your notes are rendered on Vercel’s servers, so note content passes through them in transit. Vercel does not store your notes; the database is Supabase.
• Railway — hosting for the background worker that runs AI processing. Note text you send for processing passes through it on the way to the AI provider. Like Vercel, it is a place the code runs, not a place notes are kept.

Desktop update checks: the desktop app checks dl.apioni.com for a newer version when it starts. That request carries your IP address (and so an approximate location) and the app version — never your notes. It is served from our own domain and from Cloudflare storage; there is no third-party download site.

Payments: subscription payments are handled by Polar acting as merchant of record. Your card details never reach us. Polar also handles sales tax and VAT where they apply, and it uses its own payment processor to take the payment — that processor operates in the United States and Ireland.

6. Security

Synced notes are stored in our database with Supabase and travel over TLS; access is scoped to your account. The website is served over TLS, and billing requests go toPolar over TLS.

7. How long we keep data

Synced notes and your account data are kept for as long as you keep your account. When you delete a note it goes to Trash and stops syncing to your devices; we keep it there for 30 days so you can restore it, and permanently erase it after that. When you delete your account, your notes and account data are deleted from our systems within 30 days, except where tax or commerce law requires us to keep purchase records longer. Website analytics contain no notes: the cookieless page counts are kept only briefly, and Google Analytics keeps visit data for 14 months.

A Slack preview stops being usable after ten minutes. Expired previews are removed in bounded batches when the Slack connection service is used again, so ten minutes is not a guaranteed physical deletion time for an idle connection. Disconnecting Slack or requesting account deletion removes its local credentials and previews immediately; a message already saved as a note follows the normal note deletion rules.

A Notion page preview also stops being usable after ten minutes. Expired previews are removed in bounded batches when the Notion connection service is used again, so ten minutes is not a guaranteed physical deletion time for an idle connection. Disconnecting Notion or requesting account deletion removes its local credentials and previews immediately; a page already saved as a note follows the normal note deletion rules.

8. Your rights

You can ask us to access, correct, export, or delete your personal data by emailing contact@apioni.com. We respond within 30 days. You can also export your notes yourself at any time as Markdown (.md), Word (.docx), PDF, HTML, JSON (blocks), and Obsidian vault (.zip).

You can revoke any API key at any time in Settings → API & MCP. A revoked key stops working immediately; tools that used it lose access with the next request. You can also disconnect any connected app there; it loses access with its next request.

You can disconnect Slack in Settings → Connections. Local access stops immediately. We also ask Slack to revoke the token, but if Slack cannot confirm that request you can remove Apioni from your Slack app settings.

You can disconnect Notion in Settings → Connections. Local access stops immediately. We also ask Notion to revoke the token, but if Notion cannot confirm that request you can remove Apioni from your Notion connection settings.

If you are in the EU/EEA or UK, you also have the right to object to or restrict processing, and to lodge a complaint with your local supervisory authority. If you are a California resident: we do not sell your personal information or share it for cross-context behavioral advertising, and we will never discriminate against you for exercising your rights.

9. International transfers

We are based in South Korea, which holds an EU adequacy decision. Your account data and synced notes are stored with Supabase on AWS in the United States (us-west-2, Oregon). Note text you send for AI processing is handled by OpenAI in the United States. Polar, which handles subscription payments, is established in the United States, and its payment processor operates in the United States and Ireland. Other processors (such as Cloudflare) may also process data in other regions; where data leaves your region, we rely on adequacy decisions, Standard Contractual Clauses, or equivalent safeguards.

10. Children

Apioni is not directed at children under 13 (or the higher minimum age in your country). We do not knowingly collect data from children. If you believe we have, email us and we will delete it.

11. Changes

We may update this policy. We'll post the new version here with an updated date.

12. Contact

Questions or requests: contact@apioni.com