Privacy Policy

1. Introduction

voidai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our note-taking application and related services (collectively, the "Service").

By using voidai, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.

2. Our Privacy Philosophy

voidai is built on the principle of "zero knowledge." This means:

• Your notes are stored locally on your device, not on our servers
• We cannot access, read, or analyze your content
• We do not track your behavior or usage patterns
• We do not sell, share, or monetize any user data
• We do not use third-party analytics or tracking tools

3. Information We Do NOT Collect

To be absolutely clear, voidai does NOT collect:

• Your notes, documents, or any content you create
• Your name, email, or personal identifiers (unless you voluntarily provide them for optional features)
• Your IP address or precise location
• Device identifiers or fingerprints
• Browsing history or search queries
• Usage analytics or behavioral data
• Cookies for tracking purposes

4. Information We May Collect

In certain optional scenarios, we may collect minimal information:

4.1 Optional Account Creation

If you choose to create an account for cloud sync features (entirely optional), we may collect:

• Email address (from OAuth provider)
• Display name (from OAuth provider)
• Profile picture URL (from OAuth provider)

This information is only used to identify your account and is never shared with third parties.

4.2 Feedback and Support

If you voluntarily contact us for support or submit feedback, we may collect information you provide such as your email address and message content.

4.3 Error Logs

Our servers may automatically log technical errors for debugging purposes. These logs contain only technical information (error type, timestamp) and do not contain any user content or personal information.

5. Local Data Storage

voidai stores your data locally using:

• IndexedDB: Your notes and documents are stored in your browser's IndexedDB storage
• LocalStorage: Your preferences and settings are stored in LocalStorage

This data never leaves your device unless you explicitly choose to sync or export it. You have full control over your data and can delete it at any time through the app settings or by clearing your browser data.

6. Encryption

voidai uses industry-standard encryption to protect your data:

• At Rest: Your local data can be encrypted using AES-256-GCM encryption with a key that only you possess
• In Transit: All network communications use TLS 1.3 encryption
• P2P Sync: Device-to-device sync uses end-to-end encryption via WebRTC with ephemeral keys

We implement a "zero knowledge" architecture where encryption keys are generated and stored locally. We never have access to your encryption keys.

7. Third-Party Services

voidai integrates with the following third-party services only when you explicitly enable them:

7.1 OAuth Providers (Optional)

If you choose to sign in with Google or GitHub, their respective privacy policies apply to the authentication process:

• Google Privacy Policy: https://policies.google.com/privacy
• GitHub Privacy Policy: https://docs.github.com/en/site-policy/privacy-policies

7.2 Cloud Storage Providers (Optional)

If you choose to backup your data to a cloud storage provider (Google Drive, Dropbox, etc.), your data is encrypted before upload. The respective provider's privacy policy applies to storage:

• Google Drive: https://policies.google.com/privacy
• Dropbox: https://www.dropbox.com/privacy

Note: Because your data is encrypted before upload with a key only you possess, these providers cannot read your content.

8. Cookies

voidai does not use cookies for tracking or advertising purposes. We only use essential cookies/local storage for:

• Storing your theme preference
• Maintaining your session if you choose to log in
• Storing your app settings

These are strictly necessary for the app to function and are not shared with any third parties.

9. Children's Privacy

voidai is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. Data Retention

Since your data is stored locally on your device, you control how long it is retained. You can delete your data at any time by:

• Using the "Delete All Data" option in Settings
• Clearing your browser's storage
• Uninstalling the application

If you created an optional account, you can request account deletion by contacting us at privacy@voidai.wtf.

11. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request access to your personal data (though we likely have none)
• Deletion: Request deletion of your data
• Portability: Export your data at any time using our export feature
• Correction: Correct any inaccurate data
• Objection: Object to processing of your data

Since voidai stores data locally on your device, you can exercise most of these rights directly within the app without contacting us.

12. International Data Transfers

Your data is stored locally on your device and is not transferred to our servers. If you choose to use optional cloud sync features, data transfers to your chosen cloud provider are protected by encryption, and the data transferred is encrypted end-to-end.

13. Security

We implement industry-standard security measures including:

• AES-256-GCM encryption for data at rest
• TLS 1.3 for data in transit
• QUIC protocol for enhanced connection security
• End-to-end encryption for P2P sync
• Regular security audits of our codebase

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

14. Open Source

voidai is open source software. You can review our source code to verify our privacy practices at: https://github.com/voidai/void

We encourage security researchers to audit our code and report any vulnerabilities through responsible disclosure.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Displaying a notice in the app (for significant changes)

Your continued use of voidai after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

• Email: privacy@voidai.wtf
• GitHub: https://github.com/voidai/void/issues