MssyNotes Privacy Policy

Effective: 2026-10-21 · Who we are: MssyNotes is made by the MssyNotes team at Micreations Ltd, a company registered in England and Wales (company no. 16797696), registered office 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom. Contact: hello@mssynotes.com

MssyNotes is a notes-and-boards app. Your boards are yours. This page explains what we store, why, and how to get rid of it.

What we collect

• Your email address — used only to send you a 6-digit sign-in code (valid for 10 minutes) and to identify your account. There are no passwords — we never store one.
• Your boards — the text, stickies, drawings, shapes, tables, photos and files you put on them. This is the whole point of the app; we store it so it syncs across your devices.
• Voice notes — when you tap the microphone, what you say is turned into text by your device's speech recognition (on the device itself whenever it supports it; otherwise by Apple's or Google's speech service, or your browser's on the web). Only the finished text is added to your board. The audio is never saved and is never sent to us.
• Storage usage — how much space your files take, so we can enforce the per-account limit (1 GB by default).

We do not collect analytics, advertising identifiers, location or contacts. We never see your card details (see Paying for Pro or Team). We do not sell or share your data with advertisers.

Paying for Pro or Team

If you upgrade, payment is handled by Apple (in the iPhone/iPad app) or Stripe (on the web). We never see or store your card details. We keep your plan, when it renews, and a Stripe customer reference so your subscription works on every device. Apple purchases are tracked through RevenueCat, which receives your MssyNotes account ID and purchase receipts, never the content of your boards. When you delete your account, web subscriptions are cancelled; Apple subscriptions are cancelled in Settings › Apple ID › Subscriptions.

Sharing boards and teams

You choose who sees a board. When you invite someone (to edit or view only), or put a board in a team, those people can see the board and everything on it, including photos and files. People on the same board or team can see each other's name and email address, and who is on the board right now. Invite links work once and expire after 7 days. You can remove people or cancel invites at any time.

If you delete your account: boards you own are deleted, even if shared; boards in a team pass to the team owner; things you added to other people's boards stay on those boards but are no longer linked to you. Your name and email are removed.

Private boards

A private board lasts the time you choose (15 minutes, 1 hour or 3 hours). In its last 10 minutes, anyone who can edit it and has it open can extend it. If nobody does, it disappears for everyone the moment time runs out, and within about a minute our servers permanently delete it, everything on it and its files. Private boards are never saved on your device, don't go to Recently deleted, and their files don't count towards your storage. Like any deleted data, they may remain in encrypted backups until those expire (within 7 days).

Where it's stored

On Supabase servers in Ireland (EU). Data is encrypted in transit and at rest. Each account can only access its own boards and files, plus boards someone has shared with it. This is enforced at the database level, not just in the app. This website and the desktop web app (app.mssynotes.com) are served by Cloudflare, which processes your IP address to deliver the pages and protect against attacks.

Cookies and storage on your device

We don't use advertising or tracking cookies, and we don't use analytics. Because we only use what's strictly necessary to make MssyNotes work, we don't need to ask for cookie consent.

• This website sets no cookies of its own. Cloudflare, which serves the site, may set a short-lived security cookie to tell people apart from bots.
• The app (on your phone, iPad or in your browser at app.mssynotes.com) stores your sign-in session and a copy of your boards on your device, so you stay signed in and can work offline. On the web this uses your browser's local storage, not cookies. Signing out ends the session. Deactivating or deleting your account also removes the boards stored on that device. You can clear it at any time in your browser or device settings.
• Paying on the web takes you to Stripe's checkout page, where Stripe uses its own cookies to process the payment and prevent fraud. See Stripe's privacy policy.

Permissions we ask for

• Photos — only when you choose to add a photo to a board.
• Microphone & speech recognition — only when you tap the voice-note button.

You can revoke these in your device settings at any time.

How long we keep it

Until you delete it. Deleting a project moves it to Recently deleted, where you can restore it for 30 days; after that (or when you choose Delete there) it is removed for good. Deleting your whole account removes everything from our servers immediately. Backup copies expire within 7 days.

If you deactivate your account instead, nothing is deleted: you are signed out on every device and your data is kept until you sign back in and reactivate, or delete the account.

Your rights

You can access, correct or delete your data in the app. To delete everything, tap the Settings (gear) button at the top right → Delete account and all my data. To take a break without losing anything, use Deactivate account in Settings. You can also email us to request a copy of your data, or to complain. You have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

Children

MssyNotes is not intended for children under 13.

Terms

Using MssyNotes is also covered by our Terms of Use.

Changes

If this policy changes we'll update the date above and tell you in the app.