Privacy Policy
Douya Note (“Douya”) is developed and operated by Enhua Yan. Our principle is simple: your notes live on your own Mac by default. Douya only sends something over the network when you use a feature that needs it, and only what that feature needs.
1. What stays on your Mac
Notes, attachments (images, recordings, sketches), the search index, note versions, the AI audit log and your settings are all stored on your Mac: notes in the folder you choose (by default “Documents / Douya Note”), everything else in “~/Library/Application Support/Douya”. We never receive them. Douya has no analytics, tracking, ads or automatic crash reporting.
Voice transcription and text recognition in images use macOS’s built-in features on your Mac.
2. Features that use the network — only when you use them
| Feature | What is sent, and to whom |
|---|---|
| Update checks | A request to this site’s update feed (appcast.xml) for the latest version. It includes the app version and your IP address, never note content. |
| AI with your own key | When you use an AI feature, the text of the relevant notes goes directly from your Mac to the provider you chose (such as Anthropic, OpenAI or DeepSeek). It doesn’t pass through us; that provider’s privacy policy applies. |
| Douya AI | When you use an AI feature, the text of the relevant notes passes through our relay to Anthropic’s Claude, and the answer comes back the same way. The relay does not store or log content; it only records usage (time, model, token counts and the resulting cost) to track your allowance. Anthropic processes these requests under its commercial terms. |
| Nearby collaboration | Devices on the same Wi-Fi or within Bluetooth range connect directly over an encrypted link, with no server. |
| Douya Cloud (account, cloud collaboration, sync between your Macs) | See section 3. |
Notes set to “Keep from AI” are never sent by any AI feature, and attachment files themselves are never sent to AI. Every AI request is logged on your Mac (time, purpose, provider, whether it went direct or via Douya, note ids and length — never the content).
3. Douya Cloud
When you sign in to Douya Cloud, we store:
- Your account: email address (with Sign in with Apple this may be a relay address from Apple), account id and sign-in records.
- Your public key and device name: end-to-end encryption needs your public key. Your Mac’s name is used as your display name, which collaborators can see.
- Collaboration: who belongs to which shared note, their permissions and join requests. Collaboration codes are stored only as hashes.
- Synced and shared content: ciphertext that is end-to-end encrypted on your devices before upload. We don’t have the keys and cannot read your notes or attachments; even note ids and attachment paths are scrambled. All we can see is their size and timing.
- Subscription status: your plan, status, renewal date, and Paddle customer and subscription ids.
- Douya AI usage: see section 2.
When you set up a new Mac, your account’s private key can sync through iCloud Keychain; or your old Mac can encrypt it for the new one and pass it through our server (the server only ever handles ciphertext, and pairing requests expire after 15 minutes); or you can enter your recovery code.
4. Payments
Payments are processed by Paddle (Paddle.com Market Limited) as our reseller and merchant of record. Paddle handles your card and other payment details; we never receive them. We only receive your subscription status from Paddle. See Paddle’s privacy policy.
5. Service providers
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Douya Cloud accounts, database and encrypted file storage | United States |
| Vercel | This website, the update feed, checkout and the Douya AI relay | United States |
| Paddle | Payments, invoices and sales tax | United Kingdom / United States |
| Anthropic | The model behind Douya AI (only when you use Douya AI) | United States |
We don’t sell your personal information or use it for advertising.
6. How long we keep data
- Account and subscription records: for as long as your account exists, and deleted within 30 days after you delete it, except transaction records we’re legally required to keep.
- Synced and shared ciphertext: kept for 30 days after your subscription ends (you can still download it back to your Mac during that time), then deleted automatically. Cloud collaborations you started are ended; members’ local copies are not affected.
- Douya AI usage records: kept for 12 months, then deleted.
- Data on your Mac: entirely up to you. Uninstalling Douya doesn’t delete your notes folder.
7. Your rights
You can access, export (“Export All” in the app), correct or delete your data at any time, withdraw consent, or delete your Douya Cloud account. Email service@douyanote.cc for account deletion or any other request; we’ll respond within 15 days. You can also exercise any other rights your local law gives you (for example under the EU GDPR, China’s Personal Information Protection Law or California’s CCPA).
8. Children
Douya Cloud is not intended for children under 14. If you believe a child has created an account without a guardian’s consent, contact us and we’ll delete it.
9. Changes
If this policy changes materially, we’ll let you know in the app or on this site in advance.
10. Contact
Enhua Yan · service@douyanote.cc