Organize
Privacy
Private notes, private notebooks, app lock and what the AI can see
You control what the AI sees, note by note and notebook by notebook.
Private notes and private notebooks
| Private note | Note in a private notebook | |
|---|---|---|
| AI reads it (title, summary, keywords) | No — no AI of any kind | Yes, for your own summary |
| Added to your memory — agents can recall it | No | No |
| Used by chat | No | No |
| Found by web search | No | No |
| Found by search in the app | Yes | Yes |
| Can be shared | No | No |
Turn a note private from its Private switch, or make a notebook private when you create or edit it. While a notebook is private, links to its notes stop working.
Turn the AI off
Settings → Memory → AI enhanced notes turns off AI reading for all notes. Two more switches there control the link between notes and your memory — see Notes and your memory.
App lock
Settings → App lock protects the app with a PIN and Face ID or your fingerprint. With app lock on:
- the app is covered in the app switcher;
- notification previews don’t show note content.
Location tagging
On by default. Each new note gets a place name, shown under Meta data. For notes that go to your memory, the place is visible to your agents. Turn it off in Settings → Location tagging.
Usage analytics
The app sends anonymous usage analytics to help improve it — never the content of your notes. Turn it off in Settings → Share usage analytics.
The services the AI uses
When the AI reads a note, these services may process it:
| Service | For |
|---|---|
OpenRouter, normally with zero-data-retention routing and data_collection: deny | Language models that read and summarise notes. Batch note import is a documented exception that may use a provider endpoint retaining requests while still denying provider data collection. |
| Brave Search | Looking up products, places and other public items |
| Unstructured | Reading PDFs and Office documents |
| Web page readers | Fetching the pages you save |
See Subprocessors for the full register.