Privacy Policy

Our Core Principle

We never see your notes. Period.

This is not a promise we make — it is a property of our architecture. Your notes are encrypted on your device before anything leaves it, using keys that never leave your device. We built Prevon this way because we believe your private thoughts should stay private.

What We Collect (And Why)

The app itself, free tier: nothing. Your notes stay on your device, encrypted with keys that never leave your device. The app does not collect any note content, metadata, or personal information.

Ghost Sync (not live during the beta): when it ships, we will store the encrypted data and the minimum routing information needed to deliver it. The storage layer holds no name, email, or account identifier tying any of it to you, and we cannot read the contents. We do not store your password or recovery phrase. Sync is switched off for the current private beta — until it ships, nothing you write leaves your device, so there is nothing on our servers to describe.

This website's forms, separately: the waitlist, newsletter, contact form, beta invite applications, and the unlisted report page each collect only what they need to do the one thing you asked them to — reply to you, send a confirmation, or (for beta testers) send your download link, since there's no app store listing or public download URL yet and that step is still done by hand. Redeeming a beta invite code specifically asks for your email for exactly this reason. None of this is note content, none of it is linked to your Vault or anything you write once you're using the app, and it is never sold or used for advertising. It's stored in our own database (not a third-party form service) for as long as needed to do that one job, then deleted on request — contact us any time to have it removed.

Payments

If you purchase Founder Lifetime Ghost Sync or any future paid tier, our payment processor (Stripe) collects your name, email, and payment details to process the transaction and comply with tax law. We do not receive or store your full card number. Payment records are kept only as long as required by law and are never linked to your Vault or its contents.

Analytics

We do not use analytics trackers. We do not collect usage data. We do not sell your data, because we do not have it.

AI Processing

Prevon offers two ways to use AI features:

• On-device (default): AI processing runs entirely on your device using a local model. Nothing leaves your device.
• Remote AI (optional, opt-in): if you choose to connect a remote AI provider (such as Anthropic's API or an OpenAI-compatible service), your typed messages and conversation history with the AI assistant are sent to that provider to generate a response. Your note content is never included in these requests — only what you type directly to the assistant and recent assistant conversation history. You can see which mode is active, and switch back to on-device-only at any time, in AI Settings. This cloud channel is not enabled in the current beta build; it is described here because the setting and its data flow exist in the product.

We do not use your data to train AI models.

Data Retention

Free users: we retain nothing. Your data never leaves your device.

Ghost Sync users (once it ships): your encrypted sync data would remain on our servers while your subscription is active. Sync is switched off for the current private beta, so there is no such data today.

Data Deletion

When you delete a vault or close your account, the encryption key protecting your data is destroyed on your device. Without that key, any encrypted data remaining on our servers becomes permanently unreadable — to us, and to anyone else — forever. This is called cryptographic erasure.

Because our sync relay is designed to never know which encrypted blob belongs to which user, we could not selectively locate and remove your data from our storage after deletion. What we can guarantee is that it becomes, and remains, cryptographically inaccessible the moment your key is destroyed. During the private beta this is moot — sync is off, so nothing of yours is on our servers at all.

Your Rights

You own your data. Your notes are stored on your device, under your control, not locked into a proprietary system — you can access, back up, or move them at any time. If you are located in the EU/UK or California, you may also have the right to access, correct, delete, or export the personal data we hold about you (such as payment records), and to object to how it is processed, under GDPR or CCPA. Contact us to exercise any of these rights.

Website Forms & Vendors

This section covers the marketing website only, not the app (the app is covered above). If you use our waitlist, newsletter, or contact form, we store the email/name/message you provide and, for the contact form, your IP address (for spam prevention). We use Stripe to process payments and Resend to send emails; each receives the data needed to do that job. We do not use these vendors to track you across the web.

Cookies

The Prevon website uses minimal session cookies for basic functionality. We do not use tracking or advertising cookies.

Children

Prevon is not intended for users under 13. We do not knowingly collect data from minors.

Changes to This Policy

If we make material changes, we will notify you via the app and our website. We will not reduce your privacy protections.

Contact

Prevon LLC is the entity responsible for this policy. Questions about this policy? Contact founder@prevonprivacy.com.