Privacy
Last updated 1 September 2026
Our Note has no server. Innovatory does not receive, store or process anything you write in it. This page explains where it does go, and the one place where the app is less private than it might look.
Where your notes live
In your own iCloud. The app keeps its data on the device and syncs it through Apple's CloudKit to the other devices in your family. There is no Innovatory account, no login, and no database of ours holding any of it.
Encryption
What people write is end to end encrypted, using CloudKit's own encrypted fields. That covers the text and photos of an entry, voice notes and their transcripts, the words of a check-in and its sub-feelings, event and idea titles and notes, poll questions and options, thread messages, and birthdays. Apple stores those values without being able to read them.
Some things are not encrypted, and it is worth knowing which. Names, profile emoji and whether someone is a parent or a kid are stored in the clear, as is which of the sixteen faces a person picked for a day, though not the words they wrote with it.
What we collect
Nothing. There is no analytics, no crash reporting, no advertising and no third party code of any kind in the app. It has no software dependencies beyond Apple's own frameworks, and it makes no network requests other than syncing your data through iCloud.
Voice notes
A voice note is recorded on the device and is capped at thirty seconds. It is transcribed on the device itself, using on-device speech recognition, so the audio is never sent anywhere to be turned into text. If a device cannot do the transcription locally, Our Note stores the recording without a transcript rather than falling back to a server.
The microphone and speech recognition permissions are asked for the first time you tap the record button, and only then. Both can be refused and the rest of the app works as normal. The recording and its transcript are stored the same way as everything else: in your family's iCloud, end to end encrypted.
Sharing with your family
A family is shared through one iCloud invitation. Whoever accepts it can see the family's notes on their own device, and nobody outside it can.
Removing someone's profile in Our Note does not revoke their access. It takes their name off the family and, if you ask it to, deletes what they wrote, but their device stays part of the iCloud share and keeps syncing. To actually remove someone you have to remove them as a participant in the iCloud sharing sheet, the same place the invitation came from.
Private events and ideas, honestly
A parent can mark an event or an idea private, and it is then hidden from the children's screens. This keeps birthday plans out of sight, and that is all it is meant to do.
It is not a security boundary, and we would rather say so than let you assume otherwise. iCloud sharing works at the level of the whole family, so a private item still syncs to every family member's device even though the app does not display it to them. Someone determined and technical could find it. Do not use it for anything that actually matters.
Notifications
When another family member writes something, your device works out what changed and raises the notification itself. Nothing is sent from us, and no notification text passes through anyone else on the way to you.
Children
Our Note is built to be used by children as members of their own family, on a device a parent has set up. It asks for no personal information beyond a name, an emoji and an optional birthday, all of which stay in the family's iCloud.
Deleting everything
Delete the app and remove its data from iCloud settings on each device. Because we hold nothing, there is nothing left with us to ask about, and no request to make.