Privacy Policy

Effective 12 November 2026 · Notchy is provided by Atul Kumar Srivastava

This notice explains what Notchy collects, why, and your rights under India's Digital Personal Data Protection Act, 2023.

What we collect

DataWhyKept
Name, email and profile picture from Google sign-inYour account, support, important noticesUntil you delete your account
Your Gemini API key (encrypted with AES-256)To answer your AI requests with your keyUntil you remove it or delete your account
Plan, trial dates, subscription status, payment referencesBilling and accessAs long as tax and accounting law requires
A one-way hash of your PC's Windows ID, and the PC nameOne free trial per PC, abuse preventionThe hash may be kept after account deletion to prevent repeat trials
Daily count of AI requestsLimits and abuse prevention90 days

What stays on your PC

Your to-dos, shelf, clipboard history, settings, email app password and notes stay on your PC (encrypted where sensitive). Screenshots, camera pictures, voice and your questions are sent to Google's Gemini API only when you use an AI feature, with your key; we don't store them on our servers. If you choose Claude or ChatGPT in the Ask box, questions go through your own Claude Code or Codex app to Anthropic or OpenAI under their policies.

Who we share with

Google (sign-in, Gemini AI), Cloudflare (hosting our servers), Razorpay (payments). We don't sell your data or use it for advertising.

Your rights

You can access and download your data (Settings → Account & plan → Download my data), correct it, delete your account (Settings → Account & plan → Delete account), withdraw consent, and nominate someone to exercise your rights. Write to iatulsrivastav@gmail.com for anything else.

Security

Keys are encrypted at rest, connections use HTTPS, sessions expire and can be revoked, and licences are cryptographically signed.

Children

Notchy isn't meant for children under 18 without a parent's or guardian's consent.

Grievance Officer

Atul Kumar Srivastava
Patia, Bhubaneswar, Odisha 751024, India
iatulsrivastav@gmail.com
We acknowledge complaints within 24 hours and resolve them within 15 days. You may also approach the Data Protection Board of India.