Privacy Policy

Last updated 11 September 2026

This policy explains what Very Simple Notes collects, why, and what you can do about it. It is written plainly and describes what the app and service actually do. It is not legal advice.

Who we are

The Very Simple Notes iPhone app and the service at verysimplenotes.com are provided by Portfoliobox Stockholm AB ("we"), org. no. 556894-4382, Rånövägen 30, 168 39 Bromma, Sweden. We are the data controller for the personal data described here. Contact: verysimple@portfoliobox.net.

What we collect

What we do not do

We do not sell your data. We do not share your notes with anyone except the assistant you choose to connect. We do not use your notes to train AI models. We show no ads.

Where your data lives

Your notes and account are stored in a PostgreSQL database hosted by Fly.io in Amsterdam, in the European Union. Traffic is encrypted in transit (HTTPS), and the database's storage is encrypted at rest by the host. Access tokens and sign-in session tokens are stored only as hashes, so a database copy alone does not reveal them.

Connecting an assistant

When you connect an AI assistant (such as Agent Heim), you create a personal API token that lets that assistant read and write your notes on your behalf. You can see and revoke every token in the app under Account. Revoking it cuts off that assistant immediately.

Your rights

Under the GDPR you can access, correct, export, or delete your data. You can edit or delete any note in the app at any time, and delete your account and all its notes in the app under Account, Danger zone. To export everything, or for any other request, email verysimple@portfoliobox.net and we will action it. See our GDPR page for detail.

Retention

We keep your notes and account for as long as your account exists. Delete a note and it is removed; delete your account and we remove your notes, account, and tokens.

Children

The app is rated 4+ but is intended for general audiences. It is not directed at children, and we do not knowingly collect data from children under the age of digital consent without a parent's involvement.

Changes

If this policy changes we will update this page and its date. Continued use after a change means you accept the updated policy.