Back to home

    Privacy Policy

    Last updated: March 18, 2026

    1. Who We Are

    This Privacy Policy explains how Phee Notes collects, uses, and protects personal data when you use pheenotes.com and the related Phee Notes service.

    The controller of your personal data is Georgios Kamperoglou, based in Greece ("Phee Notes", "we", "us", or "our").

    If you have questions about this Privacy Policy or want to exercise your rights, you can contact us using the details in the Contact section below.

    2. What Data We Collect

    Depending on how you use the Service, we may collect the following categories of personal data.

    Account Information

    • name or display name
    • email address
    • login and account identifiers
    • account status information
    • account preferences and settings

    Note Content and User Content

    • notes, text, prompts, files, and other content you upload, create, submit, or store in the Service
    • instructions you provide for note parsing or processing
    • AI-generated or AI-assisted outputs connected to your content

    Device, Browser, and Usage Data

    • IP address
    • browser type and version
    • device type and operating system
    • referring pages
    • timestamps, log data, and interaction data
    • diagnostic and performance information

    Communications Data

    • messages you send to us, including support requests, feedback, and other correspondence
    • information we need to respond to your request and maintain support records

    3. How We Use Personal Data

    • provide, operate, and maintain the Service
    • create and manage user accounts
    • host, store, and display user content
    • process notes and provide AI-powered features
    • authenticate users and secure accounts
    • monitor performance, troubleshoot issues, and prevent abuse
    • communicate with you about the Service, including service-related notices and support
    • improve the functionality, reliability, and usability of the Service
    • comply with legal obligations and enforce our Terms

    4. GDPR Legal Bases

    Performance of a Contract

    We process account information, note content, and related usage data where necessary to create your account, provide the Service, host your notes, deliver requested features, and respond to support requests connected to your use of the Service.

    Legitimate Interests

    We process certain device, browser, log, security, and product usage data where necessary to secure the Service, maintain stability and performance, improve the product, handle routine administrative communications, and protect our legal rights and operations.

    Where we rely on legitimate interests, we consider those interests carefully and balance them against your rights and freedoms.

    Consent

    Where required by law, we rely on your consent for non-essential cookies or similar technologies and for any optional communications or features that require consent under applicable law.

    You can withdraw consent at any time. This will not affect processing already carried out lawfully before withdrawal.

    Legal Obligation

    We may process personal data where necessary to comply with applicable legal obligations, lawful requests, regulatory requirements, or record-keeping duties.

    5. AI Processing Through OpenAI

    Phee Notes uses OpenAI to support note parsing and processing features. This means that content you submit for those features may be sent to OpenAI for processing on our behalf.

    We use OpenAI as a service provider to help deliver functionality you request. Based on OpenAI's published business materials, API customer content is not used to train OpenAI models by default unless the customer explicitly opts in. OpenAI also applies retention and abuse-monitoring controls to API data. Exact retention and configuration may depend on the OpenAI settings we choose for the product and the endpoints we use.

    You should not submit content that you are not permitted to process or disclose. If your notes include sensitive or regulated information, you should consider carefully whether the Service is appropriate for that content.

    6. Hosting and Infrastructure

    Phee Notes is hosted using Vercel. As part of providing infrastructure, hosting, content delivery, logging, and related technical services, Vercel may process personal data such as IP addresses, request metadata, logs, and stored application data.

    Vercel may process data in countries outside your own. According to Vercel's published materials, it offers a data processing addendum and transfer mechanisms for international data transfers.

    7. Other Service Providers

    We may use trusted third-party processors and service providers to help us run the Service, such as providers for:

    • hosting and infrastructure
    • AI processing
    • authentication and account management
    • customer communications and support, where used
    • security, logging, and technical operations

    These providers are permitted to access personal data only as needed to perform services for us and subject to appropriate contractual and confidentiality obligations.

    8. Cookies

    We may use cookies or similar technologies that are necessary to operate the website and Service. These may be used for security, session management, interface preferences, or other basic functionality.

    Based on the current version of the public website, we do not use analytics or advertising cookies on the site. If that changes, we will update this Privacy Policy and request consent where required before placing non-essential cookies on your device.

    You can also manage cookies through your browser settings, although disabling strictly necessary cookies may affect how the website or Service functions.

    9. International Transfers

    Because we use service providers such as OpenAI and Vercel, personal data may be processed outside the European Economic Area, including in countries that may not provide the same level of legal protection as your home country.

    Where required, we take steps intended to provide appropriate safeguards for international transfers, such as entering into standard contractual clauses, relying on adequacy decisions where available, or using other lawful transfer mechanisms recognised under applicable data protection law.

    You may contact us if you would like more information about the safeguards relevant to your data.

    10. Data Retention

    We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain security, comply with legal obligations, resolve disputes, and enforce our agreements.

    In practice, this means:

    • account data is generally kept for as long as your account remains active
    • note content is generally kept until you delete it or your account is deleted, subject to backup and technical retention cycles
    • logs, diagnostics, and security records are kept for a limited period appropriate to security and operational needs
    • support communications may be retained for as long as reasonably necessary to manage the request and maintain support history

    Specific retention periods should be aligned with the systems and providers actually used by Phee Notes.

    11. Your Rights

    If the GDPR or similar laws apply to you, you may have the right to:

    • access the personal data we hold about you
    • correct inaccurate or incomplete personal data
    • request deletion of your personal data
    • request restriction of processing
    • object to processing based on legitimate interests
    • receive a copy of certain personal data in a portable format
    • withdraw consent where processing is based on consent
    • not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, if applicable

    These rights are not absolute and may depend on the circumstances and applicable law.

    To exercise your rights, contact us using the details below. We may need to verify your identity before responding.

    12. Complaints

    If you believe that our processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the data protection authority in your country of residence, place of work, or place of the alleged infringement.

    If the controller is established in Greece, you may also contact the Hellenic Data Protection Authority.

    13. Data Security

    We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

    No online service can guarantee absolute security. You are responsible for keeping your account credentials secure and for using the Service appropriately.

    14. Children's Privacy

    Phee Notes is not intended for children and should not be used by anyone under the age of 16, or a higher minimum age where required by local law.

    We do not knowingly collect personal data directly from children in violation of applicable law. If you believe a child has provided personal data to us unlawfully, contact us and we will review the issue.

    15. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes to the Service, legal requirements, or our data practices.

    If we make material changes, we will take reasonable steps to inform users, such as updating this page, notifying users through the Service, or sending an email where appropriate. The revised version will apply from the date stated at the top of the policy.

    16. Contact

    For privacy questions or to exercise your rights, contact:

    Georgios Kamperoglou
    pheenotesapp@gmail.com