Privacy Policy
Effective date: November 4, 2026 · Operator: SimmerNote LLC
This policy describes how the relaunched SimmerNote app and its service at app.simmernote.com handle information. It does not promise that a countdown hides information from the service operator. SimmerNote is not end-to-end encrypted.
Information we process
We process your account email, sender name, optional profile photo, password hash, account preferences, acceptance of our terms, and credentials used to maintain your sign-in. We do not store your plaintext password.
We store the notes you create, including teaser and reveal text, attached photos or videos, theme, countdown settings, drafts, replies, and inbox associations. We store note-opening events and timestamps for sender view history. When a signed-in viewer is associated with an event, an internal account identifier may be recorded. Counts are activity records, not a reliable count of unique people.
When you enable notifications, we process a device installation identifier and a push-notification delivery token. We also process reports, blocking preferences, and information you send when asking for support.
Our servers process IP addresses and request metadata for connectivity, rate limiting, security, and abuse prevention. We configure operational logs to avoid message content, passwords, recovery links, and account tokens. Email-delivery and push providers may maintain their own service and security records.
Why we use information
We use information to operate accounts, deliver and display notes, enforce countdowns and access controls, provide sender history, support replies, process requested password resets, deliver optional notifications, address support requests, prevent abuse, and maintain service security and reliability. We do not use message contents for targeted advertising. This release does not contain advertising or third-party behavioral-analytics SDKs.
Who can see your notes
A shared note is accessible to anyone who possesses its link. A recipient can forward a link or copy, record, or screenshot content after viewing it. Do not include information that you cannot safely share this way. The server withholds the reveal from recipient access until the deadline; the sender can preview their own content. The sender name and optional photo appear with the note.
Authorized personnel may access notes to investigate reports, respond to support requests, enforce safety rules, or maintain the service. Blocking affects signed-in interactions; it does not identify anonymous browser visitors or recall a link already shared. Delete the note to revoke its service link.
Service providers
We use Amazon Web Services for hosting, private media storage, backups, operational monitoring, and Amazon SES for requested password-reset email. We use Expo's push-notification service and Apple's notification service for optional app notifications. Push payloads contain generic alert text and internal routing identifiers, not your note text or public sharing link. Your email or messaging app handles any links you choose to share; those services operate under their own policies.
We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information when required by applicable law, to protect people or the service, or in a business transfer subject to appropriate privacy protections.
Retention and deletion
Active account information and notes are retained while needed to provide the service, until you delete them or we remove them for safety reasons. Deleting a note revokes access to its service link. You can permanently delete your account in Account & Settings after confirming your password. This removes account access and associated notes and profile from the active database; attached files are queued for removal. Copies another person saved outside SimmerNote cannot be recalled.
Encrypted operational backups are scheduled for expiration after 14 days. In our versioned storage, expired backup versions are scheduled for removal one day later. Deleted or replaced media versions are scheduled for removal after 30 days. Provider processing can add time to these expiration schedules. Closed reports are normally deleted after 30 days, and limited moderation audit records after 90 days. Host system logs are configured to expire after 30 days. Application and container error logs are size-limited and rotated; low-volume error records may persist longer. These logs are configured to exclude message bodies and account credentials. Limited information may be retained longer when necessary for legal obligations, a security investigation, or resolving disputes. Deletion processing can take longer during an outage, and we monitor failed cleanup jobs.
Password-reset links are single use, expire after 30 minutes, and are stored or queued in protected form. Old sessions are revoked after a successful reset. Expired reset records are removed by scheduled maintenance.
Your choices and requests
You can edit your name or photo, remove notes, block a sender, change your password, disable notifications, sign out, or delete your account in the app. Browser recipients do not need an account. The iOS Keychain may retain a saved sign-in after app removal; use Sign out to explicitly end the session. Device photo permissions can be managed in iPhone Settings.
Contact infoandsupport@simmernote.com for access, correction, deletion, or other applicable privacy-rights requests. We may verify your identity before acting. Please do not send passwords or password-reset links. Depending on your location, you may have additional rights and the right to contact a privacy regulator; we will handle requests under applicable law.
Security and international processing
We use HTTPS, access controls, password hashing, private storage, and encrypted backups. No service can guarantee absolute security. The production service stores data in AWS's US West (Oregon) region; service providers may process delivery and operational data elsewhere. Using SimmerNote can involve processing outside your country.
Children and policy changes
SimmerNote is not intended for children under 13 or anyone below the minimum age required to use it under local law. Contact us if a child has provided personal information so we can investigate and remove it when appropriate. We will update this page when practices change and provide additional notice for material changes when required.
Contact
SimmerNote LLC
infoandsupport@simmernote.com