Privacy Policy

Our Core Principle

We never see your notes. Period.

This is not a promise we make — it is a property of our architecture. Your notes are encrypted on your device before anything leaves it, using keys that never leave your device. We built Prevon this way because we believe your private thoughts should stay private.

What We Collect (And Why)

Free tier: nothing. Your notes stay on your device, encrypted with keys that never leave your device. We do not collect any note content, metadata, or personal information.

Ghost Sync (not live during the beta): when it ships, we will store the encrypted data and the minimum routing information needed to deliver it. The storage layer holds no name, email, or account identifier tying any of it to you, and we cannot read the contents. We do not store your password or recovery phrase. Sync is switched off for the current private beta — until it ships, nothing you write leaves your device, so there is nothing on our servers to describe.

Analytics

We do not use analytics trackers. We do not collect usage data. We do not sell your data, because we do not have it.

AI Processing

Prevon offers two ways to use AI features:

• On-device (default): AI processing runs entirely on your device using a local model. Nothing leaves your device.
• Remote AI (optional, opt-in): if you choose to connect a remote AI provider (such as Anthropic's API or an OpenAI-compatible service), your typed messages and conversation history with the AI assistant are sent to that provider to generate a response. Your note content is never included in these requests — only what you type directly to the assistant and recent assistant conversation history. You can see which mode is active, and switch back to on-device-only at any time, in AI Settings. This cloud channel is not enabled in the current beta build; it is described here because the setting and its data flow exist in the product.

We do not use your data to train AI models.

Data Retention

Free users: we retain nothing. Your data never leaves your device.

Ghost Sync users (once it ships): your encrypted sync data would remain on our servers while your subscription is active. Sync is switched off for the current private beta, so there is no such data today.

Data Deletion

When you delete a vault or close your account, the encryption key protecting your data is destroyed on your device. Without that key, any encrypted data remaining on our servers becomes permanently unreadable — to us, and to anyone else — forever. This is called cryptographic erasure.

Because our sync relay is designed to never know which encrypted blob belongs to which user, we could not selectively locate and remove your data from our storage after deletion. What we can guarantee is that it becomes, and remains, cryptographically inaccessible the moment your key is destroyed. During the private beta this is moot — sync is off, so nothing of yours is on our servers at all.

Your Rights

You own your data. Your notes are stored on your device, under your control, not locked into a proprietary system — you can access, back up, or move them at any time. If you are located in the EU/UK or California, you may have additional rights under GDPR or CCPA; contact us to exercise them.

Cookies

The Prevon website uses minimal session cookies for basic functionality. We do not use tracking or advertising cookies.

Children

Prevon is not intended for users under 13. We do not knowingly collect data from minors.

Changes to This Policy

If we make material changes, we will notify you via the app and our website. We will not reduce your privacy protections.

Contact

Questions about this policy? Contact [email protected].