NoteDove has no accounts, no analytics, no advertising and no tracking. There is no server of ours that stores your notes, and no version of this app in which we can read them.
What we collect
Nothing. There is no sign-up, so we never learn your name, email address or phone number. There is no analytics or crash-reporting library in the app, and no third-party SDK of any kind. We do not use advertising identifiers and there is nothing for an App Tracking Transparency prompt to ask you about.
Where your notes live
When you send a note it is written directly into the recipient’s own private iCloud storage, using Apple’s CloudKit. The text of a note and any photo are held in fields that CloudKit encrypts end to end, which means the contents are unreadable to Apple and to us. We hold no copy and have no mechanism to obtain one.
Because the storage is the recipient’s own iCloud account, notes count against their iCloud allowance rather than sitting on infrastructure we control.
Who can send you notes
Only people you have explicitly approved. There is no directory, no discovery and no way for a stranger to reach you. Approval is mutual and is enforced by Apple’s own sharing controls rather than by our app code.
You can remove someone at any time. They are not notified, and they immediately lose the ability to send anything to you. You can also mute someone, which silences their notes without removing them — that is deliberately a separate action, so going quiet does not require a confrontation.
Photos
Photos are downsized on the sending device before they are sent, so a full-resolution original never leaves it. On the receiving device the widget can only ever read a deliberately low-resolution rendition — the detail is genuinely absent from that file rather than merely hidden. The full-quality version is kept in NoteDove’s own protected storage, which is unreadable while the device is locked.
A photo the sender marks private requires Face ID or your passcode to open, can be viewed once, and is then deleted from the device rather than re-locked.
Notifications
Arrival notifications are off unless you turn them on, and they name the person who wrote rather than what they wrote. The optional Lock Screen widget works the same way.
The push that tells your phone something has arrived is sent by Apple’s own CloudKit service, carries no content, and is only a signal to check. Your device then fetches the note and decrypts it locally, and NoteDove writes the notification itself, on your phone. The words you write therefore never pass through Apple’s notification servers — or ours.
Siri, Shortcuts, sharing and Messages
NoteDove can be used from Siri and the Shortcuts app, from the iOS share sheet, and from inside a Messages conversation. None of these change how your data is handled: the note takes the same encrypted path to the same place. When you speak or share a request, iOS handles it under Apple’s privacy policy and NoteDove receives only the finished text.
Purchases
Purchases and subscriptions are processed entirely by Apple through the App Store. We never see your payment details. NoteDove asks Apple whether the current account has an active purchase; it does not receive, store or transmit anything else about you.
Children
If iOS tells NoteDove that an account belongs to someone under 18, photos are disabled for that account in both directions, and a connection request made by a minor requires a parent or guardian’s approval through Apple’s own system prompt. We do not knowingly collect personal information from anyone, of any age, because we do not collect personal information at all.
What we cannot protect you from
Anyone you send a note to can screenshot it or photograph their screen. NoteDove reduces accidental exposure — photos arrive blurred, private ones are shown once, and the screen is blanked while a private photo is open — but no app can stop a person from capturing what they can already see. We would rather say so than imply a guarantee we cannot keep.
Deleting your data
Removing a connection deletes the shared storage that carried notes between you. Deleting the app removes everything it kept on your device. Anything already delivered to someone else sits in their iCloud and is theirs to delete, exactly as a text message would be — we have no ability to reach into it.
Changes to this policy
If this policy changes, the date at the top changes with it and the current version appears on this page. If a future version of the app ever collects something, this policy will say so before that version ships.
Contact
Email support@itotallyneedthat.com and a human will read it. Postal mail reaches us at I Totally Need That LLC, Chandler, AZ 85225, United States.