Applies to Notif for iPhone and iPad.
Notif has no accounts, no analytics, no advertising, and no cross-app tracking. Almost everything stays on your device. When Insights are on, writing a note — in Notif or in Apple Reminders — lets Notif send that note's words, over an encrypted connection, to Notif's server and on to an AI provider to write its Insight. Chat sends a note only when you open it, and once while you set Notif up, to show an answer about the note you write there. Private notes are encrypted on your device and are never sent to Notif's server or to any AI.
Your notes live on your device and — for notes you sync — inside Apple's own Reminders and Calendar under your existing iCloud settings. Notif keeps a small local database (text, colors, positions, settings); a private note's text is encrypted there. There is no Notif account and no Notif cloud copy of your notes.
Notif has two features that use a cloud AI model. Both send only one note at a time, never your whole library and never a private note. With the note's words goes a little context to help: the date and time, your time zone and language, any reminder time already set, a place or contact the note names (with the contact's number, for a call or message button), what your phone already found about the note (a link's page title, a looked-up fact), your category names, your city and the weather if you've allowed Location, the "About you" line if you've written one in Settings, and a short summary of anything you've told Chat about that note. Chat also sends the conversation so far and the note's Insight, and on Pro, when it looks for something nearby, the closest match's name, address and distance.
Your device sends the note over HTTPS to Notif's server (a Cloudflare Worker), which forwards it to an AI provider (currently OpenAI and/or Anthropic) and returns the response. For a note that names a book, the server also looks up the book's title, and nothing else from the note, in Apple's book catalog, so the button can open it in Apple Books. Notif's server does not store your note content, and Notif's logs never contain note text. So it never pays twice for the same work, it keeps two things that never say who you are. One: the public web links a search found, for 30 days, under a scrambled code of the search. Two: once at least two different people have written short notes that mean the same thing, one answer to that meaning, for 30 days, under a scrambled code of the question, kept for each town when the answer depends on where you are; the answer can repeat the note's words. The book reads only a copy your phone makes of each such note, with no numbers, links or names it could find and with any date taken out, and a smaller AI model reads that copy first to tell what it means. To count those people, it keeps each such code for up to 30 days with only the day it was asked and a mark that many phones share, so it can't tell whose note it was. The AI provider processes the request under its API terms; these providers' APIs do not use API content to train their models by default. To keep anyone from overusing the AI features, the server counts each install's requests for the day under a code that changes every day, and clears the count after.
Your name, the greeting and the morning summary are worked out on your device and never sent anywhere.
A note you mark private is encrypted on your device with AES-256 (Apple's CryptoKit), and opening it asks for Face ID, Touch ID or your passcode. The key is kept in your iCloud Keychain, which Apple cannot read and Notif never sees. A private note is never sent to Notif's server or to any AI, and Notif takes it out of Apple Reminders. It is excluded from the AI features, from widgets, from search and from every network feature, enforced in code. Private notes move to a new iPhone through iCloud Keychain — keep it on. Without it, a new iPhone cannot open them: Notif has no copy of the key, and neither does anyone else. Like the rest of Notif's data on your iPhone, a private note's encrypted copy is part of your own iPhone backup, and it cannot be read without the key. Notes that look sensitive (passwords, PINs) never get an Insight on their own.
Each is optional and used only for the feature it names: Reminders and Calendar (your notes are these items), Contacts (searched on your device to find the person a note names, for a call or message button), Location (nearby places, and your city for an Insight or a chat), Photos / Camera / Microphone / Speech (turning a photo or dictation into text), Weather (the forecast where you are, sent with an Insight or a chat for a note dated up to ten days ahead, or one about the weather).
Notif Pro is sold through Apple's In-App Purchase. Apple handles payment; Notif never sees your card or Apple account details, only whether a valid subscription is active on the device.
No cross-app tracking. No advertising. No analytics or third-party tracking SDKs. No sale or sharing of your data.
Turn Insight off in Settings and no note is sent for an Insight; turn off only Automatic Insights and an Insight is written only when you tap for it or chat about that note. Chat sends a note only when you open it, and once while you set Notif up. On Pro, you can mark a note private to keep it on your device; notes already marked private stay on your device, free or Pro. Deleting the app removes its local database. The key for private notes stays in your iCloud Keychain, so notes restored from a backup can still be opened there.
Questions: hello@trynotif.app.