Short, because there is very little to say. We do not receive your notes, so almost everything a privacy policy normally covers does not apply here.
gemnotes is operated by Shenzhen Jingqing E-Commerce Technology Co., Ltd. (深圳市晶擎电商技术有限公司), a company registered in the People's Republic of China under Unified Social Credit Code 91440300MAK288CP13, at Room 763, Yuemeite Building, No. 1 Gaoxin South 7th Road, Yuehai Subdistrict, Nanshan District, Shenzhen, Guangdong, China. That company is the data controller for anything you submit on this site.
gemnotes is still prelaunch, no hardware has been manufactured and no payment is taken. This policy describes our actual practices; it has not yet been reviewed by a lawyer, and we'll say so until it has. For a Data Processing Agreement, contact us; a HIPAA BAA and formal certifications are not available yet, see the security page.
When an entity exists, this page gets replaced with a reviewed version and the date at the top changes.
The gemnotes applications keep your strokes in a folder on your own computer (~/gemnotes/notebooks/) and an index derived from them (~/gemnotes/index.db). Handwriting recognition runs on your own hardware. The sync between your tablet and your computer happens over your local network.
No part of this process sends your notes to us or to any third party. This is a property of how the software is built, not a promise about how we behave, you can confirm it with any network monitoring tool.
If you connect your own AI assistant to the local MCP server, that assistant may read pages you ask it about, under your own account with that provider. That is your relationship with them, not ours, and it is off unless you set it up.
Only what you type into a form on this website, and only when you submit it:
| Form | What it collects | Why |
|---|---|---|
| Wishlist | Email; optionally your name, the device you write on, the size of your backlog, which features you'd use, your occupation, and anything you type in the free-text box | To decide what to build first, and to write to you once when there's something real |
| Device reservation | Email; optionally name, quantity, current device, your occupation, and your free-text answer | To hold your early price and to count demand against a written condition |
| Notify me | Email; optionally which platform build you want and how much RAM the machine has | To tell you when there's an installer, and to work out our minimum requirements |
Submissions are received by our own form service and stored in our own database. They are not routed through a third-party form provider. Along with your answers we store the time of submission, the page you submitted from, the referring URL if your browser sent one, your browser's user-agent string, and the IP address the request came from, all standard request metadata, kept to identify abuse.
One third-party request: a web font from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), which means Google receives your IP address in order to serve it. Nothing else, no analytics, no advertising, no session recording, no A/B testing script, no cookies set by us.
The site is served by Vercel, which processes standard web-server logs on our behalf. Form submissions are handled by our own service running on Railway with a PostgreSQL database. Those are the only two processors involved.
Form submissions are kept until you ask us to delete them, or until the project ends. Because the whole point of the wishlist is to shape what gets built, we keep answers for as long as the project is being built. We will not repurpose them for anything else.
Whatever jurisdiction you're in, we will do all of the following on request, without asking why:
Email hello@gemnotes.me from the address you signed up with. We aim to act within a few days; the legal maximum in the EU and UK is 30 days and we do not intend to use it.
If you are in the EU or UK: our lawful basis for holding your email is legitimate interest in building a product with the people who asked for it, and consent where you gave it explicitly. You can withdraw at any time by asking us to delete the record.
This is not directed at children and we do not knowingly collect anything from anyone under 16. If you believe we have, email us and we'll delete it.
If this policy changes materially, particularly if anything ever starts leaving your machine, we will say so plainly and email everyone on the list rather than quietly editing this page. The date at the top is the only version marker.