Uma tradução da política inglesa. Leia o original em inglês

Política de Privacidade Strawberry Notes

Effective date: October 15, 2026

Strawberry Notes é fabricado por Strawberry Notes LLC ("nós", "nos"). Esta política explica quais informações o aplicativo Strawberry Notes, o site e os serviços relacionados tratam, por que, quem mais as recebe e as opções que você tem.

A versão curta

• Your notes are yours and live on your devices. Notes, documents, flashcards, tasks, calendar events and AI chat history are stored on your device. If you turn on iCloud sync, they are also stored in your own iCloud account. We do not have access to them.
• No ads. No tracking. We do not show ads, we do not track you across other companies' apps or websites, and we do not sell or share your personal information for advertising.
• Handwriting recognition runs on your device. Your handwriting is read on your device, and the search index stays on it.
• An account is optional. You only need one (Sign in with Apple or Google) to use the AI assistant with credits or to publish to the community library.
• The AI assistant asks first. Before anything is sent to an AI provider, the app shows you what will be sent and to whom, and waits for your permission. You can withdraw permission at any time in Settings.
• Your calendar stays with you. Calendar events are never sent to our servers or to AI providers.
• You can delete your account in the app (Settings > Account > Delete Account).

1. Informações que permanecem no seu dispositivo (ou no seu iCloud)

• Notes and library. Your notes, drawings, typed text and documents, imported PDFs, images, scans and videos stay on your device, as do flashcards and study history (including decks you import from Anki, which are read on your device), tasks and reminders, calendar events, templates, bookmarks, tags and AI chat history.
• iCloud sync (on by default, can be turned off in Settings > Sync). Your library, including your AI chat history and calendar events, is stored in a private Strawberry Notes folder in your own iCloud Drive, so it can sync between your Apple devices. The app also keeps a few small settings in your iCloud key-value storage, such as an identifier for your synced library. Apple handles this under the Apple Privacy Policy. We cannot read your iCloud data.
• Backups and exports. A full-library backup (.sbarchive) or exported note is a file you create and save wherever you choose. We never receive it. If the app asks for Face ID or your passcode before exporting a backup, that check is done by your device; we never receive biometric data.
• Handwriting recognition and search.
  • Handwriting is recognized on your device using Google ML Kit, and the search index is stored only on that device.
  • The first time a language is used, the app downloads its recognition model (about 20 MB) from Google.
  • Google's ML Kit may send Google limited technical information to operate and improve the SDK, such as device model, OS and app version, and performance metrics. Your handwriting is not sent.
  • See Google's ML Kit data disclosure and Google Privacy Policy.
• Reminders. Task, flashcard and calendar reminders are local notifications scheduled on your device. We do not send push notifications.
• Calendar.
  • Events you create in Strawberry Notes (title, notes, location, time, repeat rules and alerts) and the dates you give tasks are stored on your device and, with iCloud sync, in your iCloud. Each event also records a random identifier for the device that created it, so your devices can keep their copies in step.
  • Calendar events are never sent to our servers or to AI providers.
• Apple Calendar sync (off unless you turn it on).
  • When you turn it on, the app asks for access to your calendars. You can turn the sync off in the app and remove access at any time in iOS Settings.
  • The app reads the events in your other calendars to show them beside your Strawberry Notes events. It reads them on your device when it shows them; it does not copy them into your library or send them anywhere.
  • It creates a calendar named "Strawberry Notes" and keeps a copy of your Strawberry Notes events in it (title, notes, location, time, repeat rules and alerts). Each copy carries a link back to Strawberry Notes, so the app can recognize it. The app changes and deletes only the copies it made.
  • Whether the sync is on is kept in your iCloud key-value storage, so your other devices follow the same choice.
  • Your calendars are kept by Apple, or by the calendar account you chose for them, under its own privacy policy.
• Dictation for the AI assistant.
  • Speech is converted to text by Apple's speech recognition, on your device by default.
  • If on-device recognition is unavailable and you turn on "Allow online dictation", Apple may process your audio on its servers (Apple Privacy Policy).
  • The resulting text is sent to the AI assistant like any typed message (see section 3).

2. Sua conta (opcional)

Se você fizer login com Apple ou Google, receberemos:

• seu nome e endereço de e-mail compartilhados por Apple ou Google (Apple pode nos fornecer um endereço de retransmissão privado)
• um identificador desse provedor

Armazenamos isso em nossos servidores, executados na Cloudflare, para operar sua conta. Uma conta é usada para:

• o saldo de créditos da IA e seus registros de compra e uso
• publicar e moderar a biblioteca comunitária
• bloqueio e relatórios

Nunca recebemos sua senha Apple ou Google.

3. O assistente de IA

The AI assistant only sends data after you allow it on the "Before you use the AI assistant" screen. Your permission is kept on the device where you gave it, so each of your devices asks once. You can withdraw it in Settings > AI Assistant & Dictation, and the assistant stays off until you allow it again.

What is sent when you use it:

• your question and the earlier messages in that chat
• the part of your note your request is about: its typed text, recognized handwriting and pictures of it. A lasso selection tells the assistant what to focus on, and it reads more of the note only when it needs the context. If you say "only this page", only that part is sent. A general request, such as "make a game", can send the whole note, including pictures of its pages and drawings
• the text of a document you ask the assistant to summarize, continue or rewrite
• for a simulation or game: your request, the part of your note it is about (up to the whole note) and pictures of it
• short snippets from your other notes when the assistant searches your library (the search itself runs on your device)
• when the assistant searches the web, its search terms

Who receives it:

• With AI credits, requests travel through the Strawberry Notes server to OpenRouter. OpenRouter passes them to the company behind the model you choose. The current selectable models use Z.ai, OpenAI, Google or Anthropic; chat titles use Alibaba Cloud (Qwen). OpenRouter may also use a partner that hosts a model.
• One permission, every model. The permission screen names example providers and links to this list. Your permission covers every model the app offers, including models added later, so this list may change as models are added. Each request goes only to the provider of the model you choose (and, for chat titles, Alibaba Cloud).
• No keeping or training, as far as we can ask for it. With every request we tell OpenRouter to use only providers that do not store requests or train on them (OpenRouter's "data collection: deny" setting).
• With your own OpenRouter key, requests go directly from your device to OpenRouter under your OpenRouter account, to the same companies. Your key is stored in your device's keychain, on that device only, and is never sent to our server.
• Web search terms are sent to Exa, OpenRouter's search partner.
• These companies handle the data under their own terms and privacy policies, which may include processing in other countries. We do not send them your name, email or account identifier.

What we keep:

• Chat content. We do not store the content of your chats on our server. Your chat history stays on your devices and in your iCloud.
• Usage records. For each request we record the model, the amount of AI usage, its cost and the time, so we can charge credits and prevent abuse.
• Simulations and games. When you use AI credits, simulations and games are built on our server.
  • The note excerpt and pictures sent to build one are deleted from our server as soon as building ends, whether it succeeded or failed. If anything goes wrong, a game's pictures are deleted automatically at most 3 days later.
  • The finished page is deleted from our server once it reaches your device, or after 7 days if it never does.
  • We keep a record of each one with your account: the model, its status and its cost, which we use to charge credits and to show the job in the app. Until the result reaches your device (or for at most 7 days if it never does), the record also holds a short description of what was asked for, the title and outline of the result, and the reason if building failed; then those are removed. The record is deleted when you delete your account.
  • With your own OpenRouter key, simulations and games are built on your device and nothing passes through our server.

As respostas de IA são geradas por modelos de terceiros e podem estar erradas. Não inclua informações pessoais confidenciais sobre você ou outras pessoas nas solicitações de IA.

4. Compras

• Pagamentos Apple. Assinaturas, compras vitalícias e créditos de IA são adquiridos através do Apple. Nunca recebemos os detalhes do seu cartão de pagamento.

• O que Apple nos diz. O aplicativo verifica sua assinatura com Apple no seu dispositivo. Para créditos de IA, Apple fornece ao nosso servidor informações de transação, como produto, identificadores de transação, datas e reembolsos, para que possamos adicionar créditos ao seu saldo e lidar com reembolsos.

• Evitar que as compras sejam reutilizadas. Mantemos registros de compras resgatadas e reembolsadas sem nome ou e-mail anexado, mesmo após a exclusão da conta. Isso evita que a mesma compra seja resgatada duas vezes.

• Depois de excluir uma conta que usou o assistente de IA. Mantemos uma chave codificada de cada login Apple ou Google da conta usada, junto com qualquer saldo de IA ainda devido. Pode surgir um saldo não pago, por exemplo, quando Apple reembolsa créditos que já foram gastos. A chave é um hash unidirecional e não pode ser devolvida à sua conta Apple ou Google. Se mais tarde você fizer login novamente com a mesma conta Apple ou Google, poderemos reconhecê-lo: qualquer saldo não pago será transferido para a nova conta e a nova conta não receberá um segundo subsídio inicial. Nada mais sobre a conta excluída é mantido com ela. Isto evita o abuso do subsídio inicial e dos reembolsos.

• Superwall. Usamos Superwall para mostrar nossas telas de assinatura e verificar o status da assinatura. Superwall recebe:

  • informações do dispositivo e do aplicativo, como modelo do dispositivo, versão do sistema operacional, idioma, região, versão do aplicativo e um identificador específico do aplicativo
  • eventos sobre telas de assinatura e compras

  Usamos o Superwall apenas para executar e medir nossas próprias telas de assinatura, não para publicidade ou rastreamento entre aplicativos.

5. Publicação na biblioteca comunitária

• What becomes visible. When you publish a note, template or flashcard deck, the published content becomes visible to everyone who uses Strawberry Notes, and is served through our public catalog service. That covers the content itself, its title, description and tags, its download count and your author name. Your author name is shown as your first name and the initial of your last name.
• Review. Every submission is screened automatically, using an AI model accessed through OpenRouter, and then reviewed by a person. The screening sends a picture of the first page and the title, description and tags you wrote, with the same instruction that providers may not store it or train on it. Messages between you and our reviewers are stored with the submission.
• Reports and blocks. When you report content, we store the report and email an alert with the item, the reason and your words to our moderation inbox, without your identity. When you block an author, we store the block.
• Downloaded copies. People who add your published content to their library keep their copy even if you later withdraw it.
• Withdrawing. You can withdraw published content at any time from My Submissions.

6. Suporte e feedback

Se você enviar feedback do aplicativo, receberemos:

• sua mensagem
• seu endereço de e-mail, se você decidir fornecê-lo
• a versão do seu aplicativo, modelo do dispositivo e versão do sistema operacional

Usamos isso para responder e corrigir problemas. Nós os mantemos apenas pelo tempo necessário para atender sua solicitação e qualquer questão relacionada, a menos que a lei exija um período mais longo.

Se você usar o formulário de contato em nosso site, receberemos o endereço de e-mail, assunto e mensagem que você enviar. O formulário pode usar Cloudflare Turnstile para verificar envios automatizados; A Cloudflare processa as informações técnicas necessárias para essa verificação de segurança. Usamos essas informações para responder a você e proteger o formulário contra abusos.

Nosso site usa o Vercel Web Analytics e o Cloudflare Web Analytics para estatísticas agregadas de visualizações de página. Nenhum dos dois usa cookies analíticos nem retém identificadores que nos permitam rastreá-lo entre sites. O site também pode gerar registros comuns de hospedagem e segurança. Usamos essas estatísticas e registros para entender o desempenho do site e manter o serviço funcionando.

7. Páginas da web e vídeos dentro do aplicativo

• Your browser pane. The built-in browser and the YouTube pane load pages directly from those websites. The sites and YouTube (Google) receive your request, including your IP address, under their own policies, and YouTube can tell that the video is played inside Strawberry Notes. Searches you type in the browser go to Google or YouTube.
• Cookies in the browser pane. Like Safari, the built-in browser keeps cookies and website data on your device, so websites you sign in to can remember you. We do not read them.
• Clipped pages. Pages you clip become images in your notes, stored with your notes.

8. Logs e segurança do servidor

• What the servers log. Our servers run on Cloudflare. When your device talks to them, they process technical information such as IP address, request time and error details. We use it to operate, secure and debug the service. Our logs record identifiers, error codes and counts; they never contain the content of your notes or chats.
• How long logs are kept. Logs are kept for a short period and then deleted automatically.
• Protection. We protect data in transit with TLS and limit access to people who need it.
• No guarantee. No method of storage or transmission is completely secure.

9. Por que usamos suas informações (bases legais)

Where laws such as the GDPR apply, we rely on:

• Contract: to provide the app, your account, purchases, AI credits and publishing.
• Consent: to send data to AI providers, for online dictation, and for Apple Calendar sync. You can withdraw consent at any time; this does not affect processing that already happened.
• Legitimate interests: to keep the service secure, prevent fraud and abuse (including purchase-reuse records and the scrambled sign-in keys kept after account deletion), moderate public content, respond to support requests, measure aggregate website use and fix problems.
• Legal obligation: to keep records the law requires and respond to lawful requests.

Não utilizamos tomadas de decisão automatizadas que tenham efeitos legais ou igualmente significativos sobre você. A triagem automatizada de conteúdo sinaliza apenas os envios para um revisor humano.

Criar uma conta, comprar créditos, publicar ou entrar em contato com o suporte é opcional. Se você não fornecer as informações necessárias para um desses recursos, não poderemos fornecer esse recurso nem responder a essa solicitação.

10. Com quem compartilhamos informações

We do not sell your personal information and do not share it for cross-context behavioral advertising. We share information only:

• with the service providers named in this policy, to run the features you use:
  • Cloudflare (hosting, website analytics and website form security checks)
  • Vercel (website analytics)
  • OpenRouter, the AI model providers (Z.ai, OpenAI, Google, Anthropic and Alibaba Cloud) and Exa (AI features you allow)
  • Superwall (subscription screens)
  • Apple (payments, iCloud, sign-in, dictation, Apple Calendar if you turn on its sync)
  • Google (sign-in, handwriting models)
• when the law requires it, or to protect the rights, safety and security of our users, the public or us
• as part of a merger, acquisition or sale of assets, with notice to you

11. Transferências internacionais

Nós e nossos prestadores de serviços podemos processar informações em outros países que não o seu, incluindo os Estados Unidos. Quando a lei assim o exigir, contamos com salvaguardas adequadas, como as Cláusulas Contratuais Padrão da Comissão Europeia. Você pode solicitar informações sobre essas proteções, ou uma cópia, quando disponível, em [email protected].

12. Por quanto tempo mantemos as informações

Excluir sua conta exclui:

• sua conta e links de login
• seu saldo de IA e registros de uso
• seus trabalhos de simulação de IA
• tudo que você publicou
• os relatórios e bloqueios que você fez

If the account used the AI assistant, we keep only a scrambled key of its sign-in, with any balance it still owed (see section 4). Cost records of individual AI requests (the model and what it cost) may also be kept for accounting, with nothing that links them to you. For Sign in with Apple, deletion also revokes the app's access to your Apple ID. Your notes on your devices and in your iCloud are not affected. Content that others already downloaded stays with them, and requests already sent to AI providers are governed by their policies.

13. Seus direitos e escolhas

• In the app:
  • Delete your account (Settings > Account > Delete Account).
  • Withdraw AI data sharing (Settings > AI Assistant & Dictation).
  • Turn Apple Calendar sync off, or remove calendar access in iOS Settings.
  • Turn iCloud sync on or off.
  • Export your whole library to one file.
  • Withdraw published content.
• Depending on where you live (for example the EU, UK, or US states such as California), you may have the right to:
  • access, correct, delete or receive a copy of your personal information
  • object to or restrict certain processing
  • withdraw consent
• How to ask. Email [email protected]. We may need to verify your request, and we will not discriminate against you for exercising your rights.
• Complaints. If you are in the EU, you may complain to your local data protection authority. If you are in the UK, you may complain to the Information Commissioner's Office.
• California residents. We do not sell or share personal information as those terms are defined under California law, and we do not use sensitive personal information for purposes that require an opt-out.

14. Crianças

Strawberry Notes não é direcionado a crianças menores de 13 anos. Não coletamos intencionalmente informações pessoais de crianças menores de 13 anos ou abaixo da idade mínima de consentimento digital em seu país, se esta for maior. Se você acredita que uma criança nos forneceu informações pessoais, entre em contato com [email protected] e nós as excluiremos.

15. Mudanças nesta política

We will update this policy when our practices change and change the effective date above. If a change is significant, we will tell you in the app before it takes effect. If we change the kinds of information the AI assistant sends, the app will ask for your permission again. Adding a new model does not by itself change that; new models are listed in section 3.

16. Contato

Strawberry Notes LLC
E-mail: [email protected]