Privacy Policy

1. On-Device Processing and Your Sharing Choices

2. Website and Support Information

You can send feedback or report a bug through the shared Protomota feedback form. Choosing Send Feedback in Jotley opens the form in your browser. An optional personal support account lets you submit one Jotley issue, verify a support-ticket purchase and track its status. Only information you choose to submit is included in your request. The apps do not automatically attach your notes, transcripts, audio or diagnostic reports.

Our website uses analytics and hosting services that may process browser information, page visits, IP addresses and interaction events. Website analytics are separate from your locally stored app content.

3. Apple, Connected Agents and Website Services

Apple Intelligence

Jotley uses Apple Intelligence on your device to work with your notes. Your notes are not sent to Jotley servers for AI processing. Apple Intelligence availability depends on your device, system settings, language and region.

Optional Mac Agent Connection (MCP)

On Mac, you can enable Model Context Protocol (MCP) access in Settings → Integrations → MCP and connect a compatible agent running on the same Mac, such as Claude Code. MCP is not available in the iPhone or iPad app. Access starts off, requires a private access token and works only while Jotley is open. Jotley's MCP server listens only on this Mac; it is not exposed to your local network or the internet.

Read only lets connected agents list, search and read the library currently open in Jotley, including note titles, dates, tags, transcripts, summaries and note text. This can include content synced through your personal iCloud. Access is to the open library, not just a single selected note. Read & write also permits creating, editing, duplicating and permanently deleting notes. For example, an agent can find a meeting note and rewrite its summary as a checklist. MCP does not provide access to your microphone, general filesystem or app settings. Deletion through MCP has no undo.

The connection between Jotley and your agent is local, but the agent may send retrieved content to its AI provider or retain it in its own history and logs. That handling depends on the agent, provider and settings you choose, including their retention, training and deletion policies. These are services you choose, not Jotley's built-in on-device AI. Review their policies before connecting them. We do not receive your note content through this connection.

You can change Note access to Read only immediately, turn off Enable MCP access, or quit Jotley to stop further requests. Rotating the access token revokes the old credential; reconnect clients using the new setup command or configuration. Keep those commands and configurations private because they contain the token. Disabling access or rotating the token does not remove content an agent or provider has already received; manage those copies with that service. Changes made by an agent are saved in Jotley and follow your existing iCloud sync setting.

Optional App Store Tips

When you open the tip picker in an App Store edition, the app initializes RevenueCat to display and process optional one-time purchases through Apple. RevenueCat processes an anonymous app-specific identifier, app and platform information, and purchase records such as product and transaction identifiers, purchase or refund status, price and currency. This supports purchase validation, fraud prevention and aggregate tip reporting. No Jotley account is required, and we do not attach your name, email address, notes, transcripts or audio. Advertising identifier collection and optional RevenueCat diagnostics are disabled.

Our purchase endpoint may receive anonymous transaction and refund notifications from RevenueCat. Optional tips do not create subscriptions or attach purchase records to a Jotley account.

Apple handles payment details; Jotley and RevenueCat do not receive your payment card information. Purchase records are retained to reconcile transactions and refunds under the providers' policies. See RevenueCat's Privacy Policy and Apple's Privacy Policy. Tips are optional and unlock no note-taking features. The direct-download Mac app does not include this RevenueCat integration.

Optional Personal Support

Personal support uses Sign in with Apple. Supabase stores your Apple-linked support account, contact email or Apple relay address, verified purchase references, request text, conversation messages and ticket status. Your support account is separate from your locally stored notes. You can use Hide My Email. We identify your tickets by your account identifier rather than your email address.

Direct-download Mac support purchases use Stripe Checkout; App Store support purchases use Apple In-App Purchase. We receive product and transaction references, payment or refund status and the support account linked to the purchase. Stripe or Apple handles payment details. We do not receive your full card number. Support purchases are one-time purchases for personal technical support, separate from optional tips.

Resend sends your request confirmation to the contact address supplied by Apple, including a ticket reference and account link. Email delivery records may include the recipient address, message identifier and delivery status. Support messages are stored with each ticket so you can read and reply in the app or on the website. Brad, Jotley’s support administrator, can read and reply to these conversations. Our providers process this information to authenticate you, verify purchases, deliver email and fulfill your support request. See Supabase's Privacy Policy, Stripe's Privacy Policy and Resend's Privacy Policy.

You can export your support requests and purchase references from your account. Use Delete support account in the app or website to permanently delete your support profile, tickets and conversations. This leaves your local notes intact; unused support tickets are forfeited and deletion does not initiate a refund. After deletion, you can also remove Jotley’s authorization under Sign in with Apple in your Apple Account. For other privacy requests, contact jotley-legal@protomota.com. Some transaction records may be retained when needed to reconcile payments, refunds or legal obligations. Support pages do not send ticket content or account details to website analytics.

Mac App Updates

The direct-download Mac app uses Sparkle to check for and download signed updates from jotley.ai. Requests include the ordinary network information needed to deliver a file, such as your IP address. Sparkle system profiling is disabled. No audio, notes, transcripts or summaries are included. Automatic checks can be turned off in Settings.

Optional iCloud Sync

When iCloud sync is enabled (the default), notes, transcripts, summaries, folders and tags sync through your personal iCloud under Apple's Privacy Policy and iCloud Terms. Sync is optional; Jotley's transcription and AI features run on your device.

Website Analytics and Support

With your permission, the website uses Google Analytics cookies to measure site visits, page views, video plays and clicks on download, newsletter and bug-report links. Analytics stays off until you choose Allow analytics. We do not send names, email addresses, audio or notes to Analytics. Google signals and advertising personalization are disabled, and page URLs exclude query strings and fragments. See Google's Privacy Policy. Bug reports are submitted through GitHub; see GitHub's Privacy Statement. These website services do not receive your locally stored notes through the app.

4. Your Content and Optional Sharing

You control the notes and exports on your device. Private iCloud sync is on by default and can be turned off in Settings; it is not required to transcribe, summarize or chat with your notes.

Connecting an agent through MCP is another optional sharing choice. Only connect agents you trust with the open library, and choose Read only unless you want to permit note changes and deletion.

Do not include private notes, audio, passwords or other sensitive information in GitHub bug reports.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. Beyond the third-party services listed above, we may share your information only in the following limited circumstances:

Service Providers

Our website, purchase and support services use the providers described in Section 3 under their applicable policies. Agents and AI providers you independently connect through MCP handle retrieved content under your relationship with those services; they are not Jotley's processing providers.

Legal Requirements

We may disclose your information if required by law, regulation, or legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.

6. Data Security and Retention

We implement industry-standard security measures to protect your information, including encryption, secure servers, and regular security assessments. However, no method of transmission over the internet is 100% secure.

Retention Periods

• Website analytics data: Retained for analytics and improvement purposes under our service providers' retention settings
• GitHub bug reports: Stored on GitHub under its policies and the issue tracker's settings

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request information about what personal data we have about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a structured, machine-readable format
• Restriction: Request that we limit how we use your information
• Objection: Object to our processing of your information for certain purposes
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis

To exercise these rights, please contact us at jotley-legal@protomota.com. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

Optional Google Analytics cookies help us understand website usage. You can decline analytics or change your choice through Analytics settings in the footer. Withdrawing permission disables analytics and clears its cookies. We store your analytics choice and theme preference in this browser using local storage. The optional support account uses essential, HTTP-only session cookies to keep you signed in; these are separate from optional analytics.

Website analytics does not affect the app's on-device functionality.

9. International Data Transfers

Our website and support services are primarily hosted in the United States. Your app content stays on your device except for private iCloud sync when enabled (the default), exports you share, or access you enable for connected agents. An agent's AI provider may process retrieved content in other countries under that provider's policies. If you are located outside the US, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

10. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected information from a child under 16, we will delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at jotley-legal@protomota.com.

11. State-Specific Privacy Rights

California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.

European Union, United Kingdom, and Swiss Residents

Under the General Data Protection Regulation (GDPR), you have enhanced rights regarding your personal data. These include all the rights listed in Section 7 above, plus the right to lodge a complaint with your local data protection authority.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting a notice on our website, sending an email notification, or through the app. Your continued use of our services after such changes indicates your acceptance of the updated policy.