Effective date: 24 June 2026
This Privacy Policy explains how OXU ("OXU", "we", "us") handles information in connection with the OXU Note application for iOS ("the App", "the Service"). It is written to reflect how the App actually works: OXU Note is end-to-end encrypted, and our servers are designed so that we cannot read your notes.
By using OXU Note, you agree to the handling of information as described here.
1. The short version
Your notes — their content, titles, notebook names, timestamps, and audio — are encrypted on your device before they are stored or synced.
Our cloud (OXU Cloud) is zero-knowledge: it stores only encrypted data it cannot read, plus a small amount of operational metadata needed to sync.
We never receive your decryption keys, your PINs, or any plaintext note content.
Because of this design, we cannot recover your data for you, and we have no plaintext to disclose to anyone — including in response to legal demands.
The rest of this policy is the detail behind those statements.
2. Who we are (Data Controller)
The Service is provided by OXU. For privacy matters, OXU acts as the data controller for account-level and operational data described below. Where you use OXU Note through an organization or workspace, that organization may act as a controller for notes created within its workspace; in those cases this policy applies together with your organization's own policies.
Contact: [email protected]
3. Information we process
We have deliberately minimized what we can access. The categories below are exhaustive for the App.
3.1 Account and identity information
When you sign in, authentication is handled by OXU Identity (OXU IDP). We process:
Your account identifier and the email address associated with your OXU account.
The workspace(s) your account belongs to and your membership status.
Authentication tokens used to keep you signed in (stored securely on your device; see Section 6).
3.2 Encrypted content (which we cannot read)
Encrypted note data — the ciphertext of your note content, titles, notebook names, timestamps, and audio recordings. This is encrypted on your device and is opaque to us.
3.3 Operational metadata
To synchronize your encrypted notes and resolve conflicts between devices, OXU Cloud processes a small amount of non-content bookkeeping per note:
An internal note identifier (an opaque ID, not your title).
A version counter (to determine the most recent edit).
A timestamp of when the encrypted data was last updated.
The size of the encrypted data.
This metadata does not reveal your note content, and it cannot reveal whether a note uses Stealth Mode or how many PINs a note has.
3.4 Device and connection information
Basic technical information inherent to any networked service, such as device/app version and the date and time your device connects to sync.
This may include IP address as processed transiently by our infrastructure and providers to deliver the Service and protect against abuse.
3.5 What we do not collect or have access to
Your note content, titles, notebook names, or audio in readable form.
Your PINs (app PIN, per-note lock PINs, or Stealth Mode PINs).
Your encryption keys or Recovery Key.
The contents of your device's clipboard, photos, contacts, or location.
Advertising identifiers — OXU Note contains no advertising and no third-party trackers.
4. How we use information
We use the information in Section 3 only to:
Provide the Service — authenticate you, store and synchronize your encrypted notes across your devices, and resolve sync conflicts.
Maintain security and integrity — detect and prevent abuse, fraud, and technical faults.
Support you — respond to requests you send us.
Comply with law — meet legal obligations that apply to us.
We do not use your information for advertising, profiling, or training machine-learning models, and we do not sell your information.
5. Legal bases for processing (where applicable)
Where data-protection law (such as the GDPR) applies, we rely on the following legal bases:
Performance of a contract — to provide the Service you have signed up for.
Legitimate interests — to keep the Service secure and functioning, balanced against your rights.
Legal obligation — where we must process data to comply with law.
Consent — for any optional processing that requires it (for example, device permissions you grant, such as the microphone for Audio Notes), which you can withdraw at any time.
6. Encryption, keys, and security
All encryption and decryption occur on your device. Plaintext exists only in device memory while you actively use a note and is cleared when you close it or background the App.
Your encryption keys, PINs, and authentication tokens are stored in the iOS Keychain, protected by your device's hardware security. They are not stored in iCloud and are never transmitted to us.
Keys move to a new device only via your Recovery Key (or a single-use, time-limited QR transfer initiated by you). There is no cloud key backup.
OXU Cloud stores only ciphertext and the operational metadata in Section 3.3, and holds no decryption keys.
Permanently deleting a note securely destroys its unique encryption key, rendering that note's ciphertext unrecoverable.
No system is perfectly secure, but this architecture is designed so that a compromise of our servers does not expose your note content.
7. Data sharing and processors
We do not sell or rent your information. We share information only as follows:
OXU Identity (OXU IDP) — our identity provider, which processes your account and authentication information so you can sign in.
OXU Cloud — our storage and sync infrastructure, which stores your encrypted data and operational metadata.
Your organization / workspace administrator — where you use OXU Note through a workspace, your administrator manages your membership and access (but cannot read your encrypted notes through us).
Legal and safety — we may disclose information if required by valid legal process or to protect rights and safety. Because we hold no keys and no plaintext, we cannot produce readable note content in response to any such request.
These providers are part of the OXU ecosystem operated by or on behalf of OXU and process data under appropriate confidentiality and security obligations.
8. International transfers
Your encrypted data and operational metadata may be processed in jurisdictions other than your own. Where required, we use appropriate safeguards for international transfers. Note that your content is end-to-end encrypted, so it remains unreadable regardless of where the ciphertext is processed.
9. Data retention
Encrypted notes are retained on OXU Cloud while your account is active and the notes exist.
Deleted notes move to Trash and are automatically cleared after 30 days, after which permanent deletion securely destroys their keys.
Account and operational metadata are retained while your account is active and for a limited period afterward as needed for security, legal, and operational purposes.
When your account is deleted, your encrypted data is removed from OXU Cloud in accordance with our deletion processes.
10. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to certain processing.
You can access and delete your notes directly in the App at any time.
You can request deletion of your account and associated account-level data by contacting us.
Important limitation: because notes are end-to-end encrypted, we cannot provide your note content in readable form in response to an access request — we do not have it. The most complete and reliable copy of your notes is the one decrypted on your own device.
To exercise your rights, contact [email protected]. You also have the right to lodge a complaint with your local data-protection authority.
11. Device permissions
OXU Note requests device permissions only when needed for a feature you use:
Microphone — to record Audio Notes. Audio is encrypted on your device; no plaintext recording is written to disk.
You can review and change permissions at any time in iOS Settings → OXU Note.
12. Children
OXU Note is not directed to children and is not intended for use by anyone under the age required by your jurisdiction (for example, 16 in parts of the EEA, or 13 elsewhere). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.
13. Changes to this policy
We may update this Privacy Policy to reflect changes to the App or to legal requirements. When we make material changes, we will update the effective date above and, where appropriate, notify you in the App. Your continued use of OXU Note after an update means you accept the revised policy.
14. Contact us
Questions or requests regarding this policy or your information:
OXU Note Email: [email protected]