GDPR

Very Simple Notes is built in the EU and hosts your data in the EU. This page summarises how we handle the GDPR. It is an honest description of the service, not legal advice.

Controller

Portfoliobox Stockholm AB (org. no. 556894-4382), Rånövägen 30, 168 39 Bromma, Sweden, provides Very Simple Notes and is the data controller for your account and notes. Contact us at verysimple@portfoliobox.net for any data-protection request.

What we process and why

• Account identity (Apple/Google identifier, email, name), to sign you in and sync your notes. Legal basis: performance of our contract with you.
• Your notes, to provide the app's core function and, where you connect one, to let your assistant work with them. Legal basis: performance of our contract.
• Subscription status from Apple, to know whether you may edit and connect. Legal basis: performance of our contract.
• Security logs, to keep the service safe. Legal basis: our legitimate interest in a secure service.

Where it is processed

In Amsterdam (EU), on Fly.io infrastructure. We do not transfer your notes outside the EU. If you connect a third-party assistant, that assistant's own provider processes the notes you let it access under their terms. That is your choice, and you control it with the token you can revoke.

Your rights

• Access and portability: request a copy of your data in a portable format.
• Rectification: correct anything; you can edit notes and your name in the app directly.
• Erasure: delete a note in the app, or your whole account and everything tied to it under Account, Danger zone.
• Restriction and objection: ask us to pause or stop certain processing.

To exercise any of these, email verysimple@portfoliobox.net. You also have the right to complain to your local data-protection authority.

Sub-processors

• Fly.io: hosting and database (Amsterdam, EU).
• Apple: sign-in, subscription billing, and app distribution.
• Google: sign-in, when you choose it.