Privacy Policy — Veloda Note

Last updated: October 12, 2026

This Privacy Policy explains what information Veloda Note collects and how it's used. It's specific to Veloda Note — see the general Veloda Store Privacy Policy for our other apps.

The short version

Veloda Note uses zero-knowledge encryption: your notes are encrypted and decrypted only on your own device, using a key derived from your password. We store only the encrypted result. We have no way to read your notes' content — not casually, not if we wanted to, not if legally compelled to, because we simply never have the key.

Information we collect

Email address — used to create and sign in to your account, and to verify it's really you (email verification, password reset).
Your notes, encrypted — titles, bodies, checklists and tags are encrypted on your device before they're sent to our server. We store only that encrypted data; we cannot decrypt it.
Your wrapped encryption key — your Data Encryption Key is itself encrypted twice: once with a key derived from your password, and once with a key derived from your one-time Recovery Key. Both wrapped copies are stored so you can regain access after a password change or a forgotten password. Your actual password and Recovery Key are never sent to us or stored by us in any form — only their derived, one-way results ever leave your device.
Two-factor authentication — if you enable it, your authenticator app's shared secret is kept on our own server, locked with a key that is held outside the database, and used only to verify your sign-in codes.
Attachments (Veloda Note Plus) — photos and files you attach are encrypted on your device before upload, each with its own key kept inside your encrypted note. We store only the encrypted file and its size; we can't open it.
Plus activation requests — when you ask us to activate Veloda Note Plus after a manual payment, we receive your account email, the plan you chose, the phone number you sent the money from and — if you add them — the transfer reference and a screenshot of the transfer. The screenshot is not encrypted, because we have to look at it to confirm your payment; only we see it, and it is deleted as soon as your request is reviewed. We use this only to confirm your payment and switch Plus on — usually automatically, by matching your request to the payment notice our own wallet or bank receives (those notices are deleted after 14 days at most).

We do not use analytics, tracking cookies, or advertising scripts in the app or on this page.

Where your data lives

Your account and encrypted notes are stored on our own server, run on Cloudflare, in a database kept inside the European Union. Cloudflare's security and infrastructure protect the encrypted data in transit and at rest; our own zero-knowledge design means that even Cloudflare, and even us, only ever hold ciphertext for your notes. Your password itself is never sent to us: the app sends a value derived from it that proves who you are and opens nothing.

Accounts created before October 12, 2026 were stored using Firebase (a Google Cloud service), in the me-central1 (Doha) region. They were moved to our own server, still encrypted, and that Firebase project was deleted on October 12, 2026; Google removes what was in it for good about 30 days after that. Nothing of Veloda Note is kept at Google any more.

Encrypted attachments and transfer screenshots are stored on Cloudflare R2 (Cloudflare's storage service). Attachments stay ciphertext there, exactly like your notes; screenshots are removed once your request has been reviewed.

What losing your password means

Because we never have a way to decrypt your notes ourselves, losing both your password and your Recovery Key means your notes cannot be recovered by anyone, including us. This is a direct consequence of the zero-knowledge design, not a limitation we could lift even if we wanted to.

Deleting your account

You can permanently delete your account and all associated data from within the app, at any time. Deletion is immediate and irreversible on our live systems — neither you nor we can restore the account afterwards. For disaster recovery we keep encrypted backups of our systems; data you deleted can remain inside those backups for up to about 90 days, after which it is permanently erased. These encrypted backups are stored with GitHub and with Backblaze (in the European Union). Your notes and attachments stay encrypted with your own key inside those backups, so we cannot read them there either.

Your rights

You can access, export (by reading them in the app), or delete your notes and account at any time directly from the app — there is no need to contact us for routine requests. For anything else, reach out using the contact below.

Contact

Questions about this policy? Email [email protected].