Privacy

Pearls is a personal notes tool. It stores the notes you write and the email address you sign in with. That’s it. This page explains what we keep, where it lives, and the controls you have.

What we store

• Your notes. The content you create belongs to you. We store it so we can show it back to you across your devices.
• Your email. Used only to send your one-time sign-in codes and, occasionally, essential account messages. No marketing email.
• Minimal usage events. Lightweight activity (e.g. a note was read, a pearl was captured) to make features like your streak and recent activity work. We do not sell or share this.

Where it lives & who can access it

Data is stored in Supabase (PostgreSQL) and served through Vercel. It is encrypted in transit (HTTPS) and at rest. Access is scoped per account at the database level: only you can read your own notes. Other users cannot see your content, and we don’t read it except where strictly necessary to operate or debug the service with appropriate safeguards.

Sign-in codes

We use email one-time passcodes (via Resend) instead of passwords. Codes are short-lived and single-purpose. We don’t use third-party advertising or tracking cookies.

Your controls

• Export. You can request a copy of your notes at any time.
• Delete. You can delete your account and all associated content. Deletion removes your notes and account record; some minimal logs may persist briefly before routine purging.
• Contact. Email privacy@getpearls.app for any export, deletion, or privacy request.

Retention

We keep your notes until you delete them or close your account. Usage events are retained only as long as needed for the features they power and are periodically pruned.

Pages you publish

Notes are private by default. If you choose to publish a page, it becomes readable by anyone with the link, without signing in, and can be indexed by search engines and copied by others — unpublishing it later cannot undo that. You decide what gets published, and you are the publisher of it.

No patient information

Pearls must not be used to store patient-identifiable information, published or not. It is not a medical record, we do not enter into Business Associate Agreements, and we make no claim of HIPAA or PHIPA compliance. See the Terms for the full rule and what counts as identifiable.

Found a page that contains patient information or your own personal information? Email privacy@getpearls.app with the URL. You don’t need an account to report it. We aim to acknowledge within 2 business days and will normally unpublish first and investigate afterwards.

Not medical advice

Pearls does not provide clinical or medical advice. It is a generic notebook, like any notes app. The content of your notes is authored by you and is your responsibility.

Region & changes

Pearls is operated from Canada and aims to align with PIPEDA-style expectations for personal data. If we materially change how we handle data, we’ll update this page and its “last updated” date. Questions or a data-breach concern? privacy@getpearls.app.