This privacy policy applies specifically to the Notes Studio AI app and supplements the general privacy policy of this website, which covers visiting the website itself.
Notice about tracking: When you open this page, your visit is counted anonymously with GoatCounter (audience measurement). GoatCounter sets no cookies and stores nothing on your device. Your IP address is not stored. Only the page visited, the referring page (referrer), browser, operating system, approximate country, language and screen size are recorded. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an overview of page views).
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Server log files are created for technical reasons. Details on GoatCounter, hosting and your right to object are in the general privacy policy of this website. This measurement concerns only the visit to the website, not the use of the app.
Christian Drapatz
Kämpenstrasse 42
45147 Essen
Germany
Email: support@onetwoapps.com
Notes Studio AI is designed so that all notes, images, scans, and sketches are stored exclusively locally on your iPhone or iPad. There is no developer-operated server that this data is transmitted to. The app does not track you, does not include any analytics or advertising SDKs, and does not build usage profiles.
As soon as you insert an image, photo, scan, or sketch into a note, Notes Studio AI automatically reads in the background which text it contains – entirely on your device via Apple's Vision framework. No data is transmitted over the internet, no external service is contacted, and no costs are incurred. The recognized text is stored as an additional search index attached to the note, so search can also find content inside images. For locked notes (see section 5), this recognized image text is protected just like the rest of the note's content and is not searched.
You can optionally enable syncing your notes via iCloud. In that case, your notes, including images, scans, and sketches, are synchronized in encrypted form between your Apple devices (e.g. iPhone and iPad) through your own, private iCloud account. This transfer takes place exclusively via Apple's own iCloud infrastructure; the developer has no access to this data. Apple's privacy policy additionally applies: apple.com/legal/privacy. You can disable iCloud sync at any time in the app's settings.
You can additionally lock individual notes with a password or with Face ID/Touch ID. This is purely on-device access protection, not encryption: the note's content remains technically unchanged in the app database, but is only displayed in the note list and editor after a successful password or biometric check. Only a checksum is stored in your device's Keychain; this is deliberately not synced via iCloud, so on a second device the lock is released separately via Face ID/Touch ID or your device passcode. The developer never has access to your note content or your password at any point.
The app's AI features are entirely optional and disabled by default. To use them, you provide your own API key with a provider of your choice: OpenAI, Anthropic Claude, Google Gemini, Perplexity AI, xAI Grok, or DeepL. Data is only transmitted to your chosen provider once you actively trigger an AI template in the editor or the AI chat:
Formatting, images, scans, sketches, and note locking, by contrast, run entirely offline on your device without any data transfer. The automatically recognized image text (see section 3) only becomes part of a request to an AI provider if you have previously tapped to insert it as a paragraph into the note text – the app does not send it along on its own. The transfer to AI providers happens directly from your device to the respective provider, using your own API key and your own account with that provider. Before first using each provider, a consent dialog explicitly informs you and asks for your approval. Processing by each provider is subject to that provider's own privacy policy:
Your API key is stored exclusively locally in your device's iOS Keychain, encrypted and protected by iOS system security. It is only ever shown masked within the app. The developer never has access to your API key at any point.
Notes Studio AI requires camera access for taking photos and scanning documents, photo library access for inserting existing images, and uses Face ID or Touch ID for the biometric note lock. iOS only requests each of these permissions the first time the corresponding feature is used, and you can revoke them at any time in the iOS settings – the app otherwise remains fully usable, only that particular feature becomes unavailable. The optional AI features additionally require an internet connection to send requests to the chosen provider; the app detects a missing connection and informs you accordingly.
The described data is processed to provide the app functions you requested (Art. 6 (1) (b) GDPR) and, in the case of optional iCloud sync and optional AI use, on the basis of your explicit consent (Art. 6 (1) (a) GDPR).
Your notes are not shared with third parties, except for the described transfer to your chosen AI provider – which you actively trigger – and the technically necessary processing by Apple in connection with optional iCloud sync.
Since your notes are stored exclusively locally or in your own iCloud account, you always have full control over them: you can view, edit, and delete them directly in the app. Subject to the applicable legal requirements, you also have the rights to access, rectification, erasure, restriction of processing, objection, data portability, and to lodge a complaint with a data protection supervisory authority.
August 2026