Privacy Policy

Effective 14 November 2026

In short: your notes are yours. Pilea keeps your notes, photos and files in the cloud only so you can open them on your own iPhone and iPad. We don't sell data, show ads, or use trackers.

Who we are

PileaNotes ("Pilea", "we") is made and run by dr. Hesti Ismarini, Surabaya, Indonesia. For privacy questions, write to halo@pileanotes.com.

Data we keep

Data	Why	Stored with
Name and email from the Apple or Google account you sign in with	To create and open your Pilea account	Google Firebase
Books, Chapters, notes, tables and sort choices	To keep your notes and sync them across your devices	Google Firebase (Jakarta, Indonesia)
Photos, covers, voice recordings, handwriting, PDFs and files you attach	Same as above	Cloudflare R2 (Asia-Pacific)
App Store subscription proof (plan, end date)	To set your storage space (Free, Pro, Pro Plus)	Cloudflare R2

We never receive your card number or payment details. Subscription payments are handled entirely by Apple.

What stays on your device

Face ID / passcode for private Books is checked by your iPhone/iPad. Pilea never sees it.
Handwriting recognition runs on the device (a Google ML Kit model is downloaded once; your writing is not sent).
Reminders and alarms are scheduled on your device.

Permissions the app asks for

Camera and photos: only when you add a photo or cover.
Microphone: only when you record a voice note.
Speech recognition: to turn voice recordings into text. This is provided by Apple and your voice may be processed on Apple's servers under Apple's privacy policy.
Notifications: for the reminders you set.

Who data is shared with

Only the service providers Pilea needs to work, and only for that purpose:

Google Firebase: accounts and note storage.
Cloudflare: photo and file storage, and the subscription-checking server.
Apple: Sign in with Apple, subscription payments and speech recognition.
Google: Sign in with Google.

We don't sell or rent your data, don't use it for advertising, and don't read your notes. We only open data when you ask us to (for example, when asking for help) or when the law requires it.

Security

All data travels over encrypted connections (HTTPS). Each account can only open its own data: notes are guarded by Firebase security rules, and photos/files can only be fetched with a valid sign-in token for that account.

How long data is kept

For as long as your account exists. Notes, photos or files you delete are removed from the cloud as well. If your subscription ends, your data stays; only adding new files is limited until there is room again.

Deleting your account

Open Settings → Delete account in the app. Once you confirm, all your notes, photos, files, subscription data and your Pilea account are permanently deleted from the cloud right away, and Pilea is disconnected from your Apple ID. Notes already on your device stay on that device. An App Store subscription doesn't stop by itself; cancel it in iPhone Settings. You can also ask for deletion at halo@pileanotes.com.

Your rights

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and similar laws where you live, you can ask for a copy of your personal data, have it corrected or deleted, and withdraw consent. Write to halo@pileanotes.com; we act on your request within 3 × 24 hours of receiving it, as Indonesian law requires.

Children

Pilea is not meant for children under 13 and we don't knowingly collect their data. If you are a parent and learn that your child created an account, contact us and we'll delete it.

Changes to this policy

If this policy changes, the date above is updated. For important changes, we'll let you know in the app.