Privacy Policy
1. Core Architecture & Local Storage
Sulata Note is built on a single, non-negotiable principle: your notes stay on your device, and we have zero access to their contents. Notes, tags, folders, colors, and Recycle Bin items are stored only in your browser's IndexedDB on your device. We run no central database of notes. Ordinary notes and tags are stored locally without password protection and are not encrypted at rest; use the Vault for notes that need a password.
2. Website & Affiliate Disclosures
This marketing website (sulatanote.com) stores your light/dark appearance preference in localStorage (key: sulata-theme). It runs no general behavioral analytics, fingerprinting, profiling, or unrelated trackers. For affiliate purchase attribution, sulatanote.com loads LemonSqueezy's official affiliate script using store slug sulatanote. Sulata.app does not perform affiliate tracking. The Sulata Note app itself loads no third-party scripts.
3. The Encrypted Vault (Zero-Knowledge)
Vault note titles, body content, tags, colors, and pin state are encrypted locally via PBKDF2-HMAC-SHA-256 (600,000 iterations) and AES-GCM-256 before storage. Sulata Note never stores, logs, or transmits your Vault password, and it cannot be recovered: if it is lost, the Vault notes cannot be read by anyone. Decrypted Vault data exists only in your browser's memory while the Vault is unlocked. Vault backups are separate encrypted files, and ordinary JSON backups never contain Vault notes. Each Vault backup is protected by a backup password you choose at export; it may differ from your Vault password, is never stored by Sulata Note, and cannot be recovered.
4. Ephemeral Private Transfer Relay
Private Transfer locks your notes on your device before they are sent. The relay receives only the locked bundle and a lookup ID, never your 3-word code. The bundle is deleted on the first download or after 5 minutes, whichever comes first. For abuse prevention, the relay keeps short-lived rate-limit counters keyed by a one-way hash of your IP address, never the raw address, and removes them automatically about an hour after your last request.
5. License Verification
If you buy a Pro or Max license, only your license key and a device instance ID are sent to our license proxy, which checks them with LemonSqueezy. No note content or personal data is sent. When you are online, your license is re-checked about every 7 days.
6. Sulata Study & Sulata Snap
Sulata Note makes no AI requests and sends nothing to any AI service for Sulata Study or Sulata Snap. The app only loads the prompt text from its own files and copies it to your clipboard when you ask. Anything you paste or upload into an external AI service, including the prompt, your topic, your notes, and your photos, is handled under that service's own terms, and Sulata Note never receives it. Only the JSON you choose to import comes back into Sulata Note, where it is stored on your device like any other note.
Terms of Service
1. Software License Grant
Free tier is perpetually free. Pro ($24 one-time) grants simultaneous activation on up to 5 devices. Max ($32 one-time) grants activation on up to 10 devices and includes the exclusive Prismatic Aurora avatar badge. Both paid licenses include all future premium updates. Licenses are non-transferable and may not be resold.
2. Sulata Note Max
Max is a full-price license sold independently of Pro. No prorated credit or price difference is applied if you already hold a Pro license.
3. Future Premium Features
Pro and Max license holders receive all future premium features at no additional cost for the lifetime of their license, including features added after the purchase date. Sulata Note decides which features are premium and which are free.
4. Vault Data & License Lapse
If a paid license becomes inactive, existing Vault data is preserved in read-only mode (allowing unlock, read, export, and deletion). You are responsible for regular JSON and encrypted Vault backups. The Vault password cannot be recovered or reset, and each encrypted backup requires the backup password chosen when it was exported.
5. Provided As-Is & Limitation of Liability
Sulata Note is provided "as is" and "as available," without warranty of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that it will be uninterrupted, error-free, or free of harmful components, and you are solely responsible for your use of it and for any data loss. To the maximum extent permitted by applicable law, Sulata Note and its developer are not liable for any indirect, incidental, special, consequential, or punitive damages, including loss of data, loss of profits, or business interruption, arising from your use of or inability to use Sulata Note.
6. Merchant of Record & 14-Day Refund Window
LemonSqueezy is the merchant of record for all purchases. Full refunds are provided within 14 days of purchase upon contacting support@sulata.app.
7. Sulata Study & Sulata Snap
Sulata Study and Sulata Snap are prompts you can copy into a third-party AI service of your choice. Content made with them is generated by that service, not by Sulata Note, and Sulata Note does not guarantee its accuracy or completeness. You are responsible for having the right to use anything you upload or paste into those services, including photos and documents. The prompts are provided as-is, like the rest of Sulata Note. Sulata Note is not affiliated with, or endorsed by, any AI provider.