Privacy policy — BTMZ Note Taker

The short version

Your notes live on your phone first. Nothing is uploaded until you sign in.
Signed in, your notes, media and places are backed up to a server operated by BTMZ Studios LLC.
Other people see only what you choose to share. “Only you” is always available.
We run no ads, no cross-app tracking, no data sales and no third-party analytics.
Two optional features send content to AI services to do their job. They are described below.
Account → Delete account removes your data from our server.

What the app stores

Notes you write, photos, voice memos and videos you attach, the places you tag them to, and the location of your phone at the moment you save a note. Location is requested only while the app is in use; the app does not track you in the background. All of it is stored on your phone first, and the app works fully without an account.

Maps on iPhone are drawn by Apple Maps, which is governed by Apple’s privacy policy.

Backup, once you sign in

If you sign in, your notes, media and places are backed up to a server operated by BTMZ Studios LLC so you can restore them on another phone. You sign in with your email address (we email you a one-time code) or with Sign in with Apple. We keep your email address and, for Apple, the identifier Apple gives us. If you use Apple’s private relay address, that is the address we hold.

Nothing you write is visible to anyone else until you are signed in and your audience settings allow it.

Your profile

If you set one up, your handle, display name, short bio and profile photo are visible to other signed-in people, and people can find you by searching your handle or name. Your email address is not part of your public profile.

Profile photo. A photo you choose is stored on our server and shown to other signed-in people, except anyone you have blocked or who has blocked you. It is never shown to people who are not signed in, and the app fetches it through short-lived links. Replacing or removing it deletes the old file from our server, and deleting your account deletes it too.

Audience: who can see a note or place

Only you: Never shown to anyone. Available for every note and every place.
Connections: Visible to people you have accepted a connection with.
Anyone: Visible to anyone who can reach it, whether or not they have an account.

You set a default for your profile in Account (Anyone or Connections; for a new account it starts as Anyone) and can override it for a single note or a whole place. A note’s own choice wins over its place’s, and its place’s wins over your profile default. Widening your default never silently widens notes that already exist: the app asks first and lets you keep them as they were. Anything someone has already seen, saved or screenshotted cannot be recalled.

Connections and invites

A connection is a request that the other person accepts. Inviting a friend records that the invite was opened and claimed, so we can show you who joined; if either of you later deletes your account, that link is cleared and the bare event remains.

Share links and location precision

You can create a link to one note or place. Anyone holding the link can view what you chose to share until it expires or you revoke it. For each link you choose a location precision:

Precise shows the exact point and the address.
General shows a point rounded to roughly a kilometre, with no address.
Obscured shows no coordinates at all, only “somewhere nearby”.

Blocking and hiding

You can block a person from their profile. A block works in both directions: neither of you can read the other’s notes, places, media or shared conversations through the app, and it also stops either of you from starting or joining a conversation or pick that includes the other. You can review and undo blocks under Manage Blocked People. A block does not delete a group that other people still share, and it cannot recall anything already seen or copied.

Place conversations

A place conversation is a private group chat about one place, started by inviting people you are connected to. Its messages are visible to the people currently in it, with your name or handle attached. Leaving ends your access; your earlier messages stay attributed to you for the people still there. A conversation can draw on participants’ notes about that place: Anyone notes always count; Connections notes count only when everyone else in the conversation is connected to the author. A note you have kept hidden is included only if you explicitly opt in after seeing who is in the conversation, and that opt-in is cleared whenever the group changes. Opting in does not change the note’s own audience.

Quick picks

A quick pick is a short vote between up to three places among people you invite. Everyone in the pick can see its candidates, who is in it, and how each person voted.

Notifications

The app has an in-app inbox for things like connection requests, accepted connections and joined invites. It does not use push notifications and does not ask for notification permission.

AI processing

Two features send content to AI models. Neither runs unless someone uses the feature.

Conversation summaries

When a participant in a place conversation asks for a summary, our server sends the place name, the conversation’s recent messages and the notes participants have permitted for that conversation (titles, text and dates, each labelled with the author’s name or handle) to Anthropic’s Claude model, which writes a short summary. Photos, voice memos, video and coordinates are not sent. The request goes to Anthropic directly; if Anthropic cannot answer, it may instead go through Google’s Antigravity service, which runs the same family of Claude models. The summary is stored on our server for the participants to read and is discarded and rewritten if its sources change.

The providers process the request to return a result, under their own terms: Anthropic, Google.

Cartoon profile photos (optional)

If you choose to make a cartoon from a photo, that photo is sent from our server through OpenRouter to Google’s Gemini image model, which generates the cartoon. We keep only the result you choose to save as your profile photo. The providers process the photo to return the result under their own terms: OpenRouter, Google. If you never use this feature, no photo is sent.

Other services we use

Place lookup. To suggest which restaurant or shop you are at, the app sends your coordinates (or the name you type when you search) to Google Places through our server. No notes, account details or identity go with the request. Governed by Google’s privacy policy.

Sign in with Apple, if you use it, is provided by Apple under its own policy.

What we do not do

No advertising. No tracking across other apps or websites. No selling or renting of your data. No third-party analytics or advertising SDKs in the app; the only counting we do is whether an invite was opened and claimed.

Deleting your data

In the app, go to Account → Delete account. That removes your data from our server: your notes, places, media files, profile and profile photo, connections, the messages you wrote, conversations and picks you started, and your login. It then signs you out. Deleting the app removes the copy on your phone. If you only delete the app, your backup stays on our server until you delete the account.

If you cannot use the app, email privacy@btmz.ai from the address you signed up with and we will delete the account for you. See also the support page.

Contact and changes

Questions or requests about your data: privacy@btmz.ai. We update this page when the app changes and show the date at the top. BTMZ Studios is registered in Texas as BTMZ Studios LLC.