Privacy policy

Notaito · Last updated 21 October 2026

Notaito is a notes app made by Ayr122 Pty Ltd, trading as Sozou (ACN 673 572 873, ABN 26 673 572 873), in Victoria, Australia. In this policy, “we” and “us” mean Ayr122 Pty Ltd. This policy explains what Notaito collects, why, who else handles it, where it is kept, how long we keep it, and what you can do about it. Questions go to [email protected].

What we collect

Your account

You sign in with Google, with a personal Microsoft account, or with a code we email to you. We receive your email address and, from Google or Microsoft, your name and an account ID. Notaito asks Google and Microsoft only for the basic openid, email and profile permissions. It cannot read your email, files, contacts, calendar or anything else in those accounts. We do not use your Google or Microsoft profile picture.

If you sign in with an emailed code, we send a 6-digit code to the address you type. We keep a scrambled form of the code (never the code itself) for 10 minutes, or until it is used. If an account already uses your email address, you are signed in to that account, whichever way you sign in.

What you put in Notaito

• Your notes, projects (names, descriptions, other names for them, a website address), categories, templates and reminder times.
• Pictures, sketches and files that you add to notes (PDFs, documents, spreadsheets, slides, text, audio and video), and the words that Notaito reads from them so that you can search them.
• Locked notes and the logins you keep in a project’s Logins tab. These are encrypted on your device before they are sent, and we cannot read them (see “Security”).
• Earlier versions of your notes, so that you can get back wording you lost.
• Your profile picture, if you choose one: a photo you upload, one of Notaito’s characters, or your initial.

Sharing

If you share a project, we keep the email address of each person you share it with, what they may do (view or edit), and the private links we make for them. If you make a public link, we keep that link. Comments keep the text and the email address of the person who wrote them. We also keep a short record of recent changes made by other people in a shared project: who made the change, when, and the first words of the note (the newest 200 changes for each project).

How you found Notaito

If you arrived through a link that names where it came from (for example the Notaito page on sozou.ai), we keep that name, such as "sozou.ai", in a cookie for 30 days. If you create an account in that time, we keep the name with your account, or "direct" if there was none, so we know which links bring people to Notaito. We do not keep the address of the page you came from. It is deleted with your account.

Your plan

If you pay for Plus, we keep your plan, whether it renews monthly or yearly, when it renews or ends, and the customer and subscription numbers that Stripe, our payment provider, gives us. Stripe holds your card or other payment details; Notaito never receives them. The payment form inside Notaito is Stripe's own: it loads from Stripe only when you open it, and Stripe may collect details about your device and browser to prevent fraud. When Plus starts, Notaito emails you a short confirmation; Stripe emails your receipts.

Reminders on your devices

If you turn on reminders on a device, we keep the address that your browser’s push service gives to that device (from Google, Apple, Mozilla or Microsoft), the keys that encrypt messages to it, and a label such as “iPad”.

Connected AI apps and quick-capture keys

If you connect an AI app (such as Claude or Codex) or make a quick-capture key, we keep the app’s or key’s name, what you allowed it to do, when you made it and when it was last used. We keep only a one-way fingerprint of each key and access token, never the key or token itself.

Bug reports and feedback

If you send a bug report or feedback (Settings › Report a bug or feedback), the message you write is emailed to [email protected], together with the technical details you choose to include (the page, your browser, your screen size and the layout you use; there is a tick in the pop-up to leave them out). If you leave “Reply to me” on, your email address is included so we can answer you. Notaito does not keep your message in its database: it is an email in our support mailbox.

Your email: appointments and receipts

If you turn this on (Settings › Connect your email), you get a private Notaito email address. Notaito reads only the emails that you, or a filter or rule you set up in your own email account, forward to it. A booking confirmation becomes a note in your Appointments project and a receipt or bill a note in your Finances project, which the Finances page shows (what you spent each month and on what; a refund is taken off the order it names); an email you forward by hand that is neither becomes a note on your canvas. PDFs attached to a booking or receipt are kept with that note. For the list in Settings, we keep each email’s subject, sender and what Notaito did with it for 30 days. We do not keep the email itself. Unless you connect Outlook (below), Notaito cannot see your mailbox.

Connect Outlook. If you connect an Outlook, Hotmail or Microsoft 365 mailbox, you sign in with Microsoft and allow Notaito to read your mail (read only: it cannot send, change or delete anything). You choose what Notaito picks out of your email: appointments, receipts, bills to pay and deliveries, each with its own switch, and anything else you describe in your own words. Every few minutes Notaito asks Microsoft for the sender, subject, first words (Microsoft’s preview of about 255 characters), time and message ID of each new email in your inbox, and, the first time, of the period you choose (only new emails, or the last 7, 14 or 30 days). It decides from these whether an email is one of the things you chose. While Auto-organise with AI is on, the sender, subject and first words of these emails are sent in small groups to Groq, or to Cloudflare Workers AI when Groq is busy, to decide. When it is off, Notaito decides by words in the subject and first words, and your own description is not used. Only the emails that match are downloaded and read in full, each like an email you forwarded. For every email it looks at, Notaito keeps for 30 days only a one-way fingerprint of the email’s ID and what it decided, so it never looks at the same email twice; never its subject or sender. We keep the access that Microsoft gives Notaito encrypted, your mailbox’s address and where the last check got to. Disconnecting (Settings › Connect your email) deletes them at once; you can also remove Notaito from your Microsoft account at account.live.com/consent/Manage.

Connect Gmail, Apple iCloud, Yahoo or other email. These services have no sign-in that Notaito can use to only read mail, so you make a password just for Notaito at your email service (Google and Yahoo call it an app password, Apple an app-specific password) and give it to Notaito with your email address. Notaito never asks for your own password. It uses this one only to open your inbox read-only over an encrypted connection (IMAP): it never sends, changes, moves or deletes anything, and it does not mark emails as read. It sorts and reads your email as described for Outlook above: the sender, subject, first words (about 255 characters), time and message ID of each new email, and of the period you choose the first time; only the emails that match are downloaded and read in full. We keep the password encrypted, with your email address, your service’s server name and where the last check got to. Such a password can open your whole mailbox, so you can delete it at your email service whenever you like (at Google: myaccount.google.com/apppasswords; at Apple: account.apple.com › Sign-In and Security › App-Specific Passwords), and Notaito then stops checking. Disconnecting in Settings › Connect your email deletes everything Notaito kept at once.

Senders you exclude. In Settings › Connect your email you can list senders whose emails Notaito never reads: a name, a website or an address. Their emails are recognised by the sender alone and skipped before anything else is looked at, so they are never downloaded or sent to an AI service. When you add a sender, the notes already made from their emails move to your Deleted notes, where you can restore them. We keep the list with your other email choices until you change it or turn it all off.

The Kitchen: pantry, recipes and shopping list

The Kitchen (the pot in the sidebar) keeps your pantry, shopping list, saved recipes, recipe drafts and meal plan with your account. Supermarket orders: once you have opened the Kitchen, when a supermarket’s order confirmation (for example from Woolworths or Coles) reaches Notaito through your email as described above, Notaito keeps the order number, the order and delivery dates, the totals and each line’s product name, quantity and price, so that your pantry fills itself; it does not keep the delivery address. A supermarket receipt you add in the Kitchen or drop on the Finances page, and a supermarket’s PDF receipt attached to an email Notaito reads (for example an eReceipt from the Woolworths or Coles app that you email to yourself), is read the same way for its items (the receipt’s words, already read for Finances, and while Auto-organise with AI is on, sent to Groq once more to write out the docket’s abbreviated product names). A PDF receipt from an email fills the pantry even when you have switched receipts off for Finances. You can turn this off in the Kitchen (your account panel there), and the orders already kept stay until you delete your account. Products: to show a product’s photo and pack size, and when you search for something to add to your shopping list, Notaito’s server searches Woolworths’ public online shop by the product’s name or the words you type, as an anonymous shopper: nothing that identifies you is sent. What a product is (its name, kind and photo number) is then remembered for everyone, because it is about the product, not about you. Product photos are loaded by your browser from Woolworths’ picture service, and pictures of recipe videos from YouTube. Importing a recipe: when you add a recipe by its web address, Notaito’s server opens that page, or asks YouTube for a video’s public title and description. The Daidoko Shopper extension for Chrome, if you install it, works only in your own Woolworths tab: it fills your cart from your list and files the order in your pantry, and Notaito never receives your Woolworths sign-in or card.

Usage and security records

• Allowance counts: how much of your AI, voice, picture and file allowance you have used this day or month.
• Attempt counters: to stop people guessing passwords or keys, we count failed attempts. The counter is linked to a scrambled form of the IP address (a keyed hash), never the address itself. Counters are deleted about a day after their time window ends.
• Error log: what failed and when, so that we can fix it. It holds no note text, no account and no IP address. We keep the newest 2,000 entries.
• Daily totals: numbers for the whole service, such as how many accounts there are and how much AI was used that day. They are not about any one person.

Cookies and the sign-up check

Notaito uses one cookie to keep you signed in. It lasts up to 90 days and holds your account ID, name and email address, signed so that nobody can change it. Two more cookies last 10 minutes and are used only while you sign in or connect an app. One more, set only when you arrive through a link that names where it came from, holds that name (such as "sozou.ai") for up to 30 days (see How you found Notaito). There is no advertising, analytics or tracking cookie. Apart from the sign-up check below and Stripe’s payment form when you open it, Notaito loads no scripts from other companies.

The first time you sign in, and each time you ask for a sign-in code by email, Cloudflare Turnstile checks that you are a person and not an automated program. To do this, Cloudflare receives your IP address and basic details of your browser, under its Turnstile privacy terms.

What stays on your device

To work offline and to keep what you type safe if the connection drops, Notaito keeps a copy of your notebook, your unsaved changes and your settings in your browser’s own storage. Signing out deletes the notebook copy, the unsaved changes and the locked-notes key envelope from that browser. Your display settings stay. Signing out does not turn off reminders on that device; turn them off in Settings first.

The Kitchen keeps a copy of your pantry, shopping list, saved recipes and supermarket orders in your browser’s storage too, so that it opens without a connection (for example in the supermarket). Signing out of Notaito deletes it from that browser, and when someone else signs in on the same browser the copy is dropped before their own kitchen is loaded.

If you try Notaito before signing up (the demo at /try), the sample notebook and everything you write in it stay in your browser’s storage, and nothing is sent to us. If you then sign up, the notes you wrote are added to your new notebook and removed from the browser.

When you speak a note, most browsers turn speech into text with their own speech service. Depending on the browser, your voice may be sent to the browser’s maker (for example Google for Chrome, or Apple for Safari) under that company’s terms. Notaito receives only the text.

Notaito listens for your note agent’s name (“Hey Kiki”). This is on by default in the app (not in the demo); it starts after you first tap or type in Notaito, your browser asks for the microphone first, and you can switch it off in Settings › Voice. While it is on, the microphone stays on while Notaito is open on screen in that browser. The listening is done on your device: by Chrome’s on-device speech recognition where Chrome has it, and otherwise (for example in Safari or the app on an iPhone or iPad Home Screen) by a small speech model that your browser downloads from Notaito once (about 21 MB) and runs on the device. Nothing you say is sent anywhere while it waits. What you say after the name becomes a spoken note as described above, and Notaito receives only its text. The name you give your note agent, and the name it calls you (your sign-in’s first name unless you type another), are kept with your notebook.

After the name, the note agent may answer out loud (“Hey Heng, what’s up?”, “mm-hmm”, “okay, got it”). In the app it speaks with a natural voice made by ElevenLabs: each line is made once and kept as a sound file with Notaito, so the same line is not made again. The lines are fixed phrases; the only personal detail is your first name in the greetings, which is sent to ElevenLabs once, when those greetings are first made. To keep the voice on your device instead, choose “This device’s own” under Settings › Voice › Agent’s voice; it then uses only the voices built into your device, and nothing it says is sent anywhere. It answers only after its name, so switching off “Listen for ‘Hey Kiki’” in Settings › Voice stops it.

Why we use it

• To run Notaito: to sign you in, store and sync your notebook, share what you choose to share, and send your reminders.
• To run the AI features you use (next section).
• To keep Notaito safe and fair: allowances, attempt counters and the sign-up check.
• To fix faults and to plan how much capacity Notaito needs.

We do not sell or rent your data, use it for advertising, build profiles of you, or use your notes to train AI models. We do not look at your notes, except when you ask us for help and agree to it, when we need to check content reported on a public link, or when the law requires it.

AI features

Each AI feature sends only what it needs, only when it runs. Results come back into your notebook.

Groq’s terms do not allow it to use this data to train or fine-tune AI models. Groq does not keep it, except in logs for reliability and abuse checks, which it keeps for up to 30 days. Cloudflare does not use content sent to Workers AI to train AI models, and does not keep it once it has answered.

AI can be wrong. A filing suggestion only moves a note; it never changes your words or deletes anything, and you can move the note back.

Who else handles your data

These companies run parts of Notaito for us. They handle your data only to provide their service to us, under their data processing terms.

Other people see your data only when you choose:

• People you share a project with see that project’s notes (not notes you hide from sharing), its comments, your email address and your profile picture.
• Anyone with a public link sees that project’s notes and comments, and can edit them if the link allows it. A public link does not show your email address, except on comments you write. Comments show the email address of the person who wrote them to everyone who can see the project, including anyone with a public link.
• AI apps you connect receive what you allow. If you allow reading, the notes an app reads go to that app and its AI provider, under their own terms.

We may also disclose information when the law requires it, for example under a court order.

Data outside Australia

Your notebook and files are stored in Cloudflare’s Oceania region. Some data still leaves Australia:

• United States: what the AI features send to Groq, sign-in with Google or Microsoft, payments with Stripe, and Cloudflare’s own systems.
• Other countries: Cloudflare’s network carries and protects traffic from data centres around the world, and Workers AI runs where Cloudflare has capacity. Push services deliver reminders from their own countries.

How long we keep it

Security

• All traffic is encrypted (HTTPS). Sign-in cookies are signed and cannot be read by the page’s scripts.
• AI-app keys, quick-capture keys and access tokens are stored only as one-way fingerprints, and IP addresses only as keyed hashes. Share links work like a password for that project: anyone who has one can open it, so share them with care and make a new one if a link goes too far.
• Locked notes and the Logins tab are encrypted on your device with a passphrase you choose. We never receive the passphrase or the recovery code, so we cannot read them. If you lose both, we cannot get them back for you. Before a note is locked, its wording may already be in its earlier versions or have been sent for AI filing; locking a note deletes its earlier versions.

No system is perfectly secure. Keep your own copy of anything important: Settings › Export notebook downloads everything.

Data breaches

If we learn that your data has been accessed or lost without permission, and this is likely to cause you serious harm, we will tell you as soon as we can, and we will follow the steps of the Notifiable Data Breaches scheme, including telling the Office of the Australian Information Commissioner (OAIC). To report a security problem, email [email protected] with the subject “Security”.

Your choices and rights

• See and download your data: Settings › Export notebook.
• Correct it: edit any note or project. To correct your name or email address, change them in your Google account and sign in again.
• Turn features off: Auto-organise with AI and reminders each have their own switch. Disconnect AI apps in Settings › Connect an AI agent. Disconnect a connected mailbox, turn off your Notaito email address or get a new one in Settings › Connect your email; it takes effect at once. Remove Notaito’s access to your Google account at myaccount.google.com/permissions.
• Delete your account: Settings › Delete my account. This page says what is deleted and what stays. If you cannot sign in, email [email protected] from the address you signed in with.
• Ask us: for a copy of what we hold about you, a correction, or an explanation, email [email protected]. We will reply within 30 days.

Complaints

If you have a concern about your privacy, email [email protected] first, and we will reply within 30 days. If you are not satisfied with our answer, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au.

The Australian Privacy Principles

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988.

Automatic limits and decisions

Notaito applies some limits automatically, such as daily AI allowances and limits on failed sign-in attempts. A limit only pauses a feature for a while, and Notaito tells you when it will work again. AI filing only suggests where a note goes. Notaito makes no automatic decision that significantly affects your rights or interests.

Children

Notaito is for people aged 16 and over. If you believe a child under 16 has an account, email us and we will delete it.

People outside Australia

Notaito is run from Australia, under Australian law. If you live in the European Union or the United Kingdom, data protection law there may also give you rights: to see, correct, delete or download your data, to object to or limit how we use it, and to complain to your local data protection authority. We use your data to provide the service you signed up for, to keep it secure, and for optional features only when you turn them on. To use any of these rights, email [email protected].

Google user data

Notaito’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information from your Google account is used only to sign you in, to identify your notebook, and to show your name and email address to people you share with.

Changes to this policy

If we change this policy, the new version will appear here with a new date. If a change affects how we use the data you have already given us, we will tell you in Notaito at least 30 days before it takes effect.