Privacy Policy

This policy explains what information Neutrino (“we”, “us”) collects when you use the hosted Neutrino service at getneutrino.app and its web, iOS, Android, macOS and Windows apps (the “Service”), how we use it, and the choices you have.

Neutrino is open-source software that anyone can run on their own server. If you use a Neutrino server run by someone else, such as your employer, that server's operator is responsible for your information and this policy does not apply to it.

The short version

• Your files, documents, spreadsheets, presentations, notes, drawings, diagrams and photos are end-to-end encrypted on your device. We store them but cannot read them.
• Some information is not end-to-end encrypted; it is listed below.
• We do not sell your information, show ads, or use analytics or tracking tools.
• You can delete your account at any time.

End-to-end encryption

Content you store in Drive, Docs, Sheets, Slides, Notes, Drawing, Diagrams and Photos is encrypted on your device with a key that only you hold, before it reaches our servers. We cannot decrypt it, and neither can anyone who obtains a copy of our servers. This also means we cannot recover that content for you if you lose every copy of your encryption key.

Even with end-to-end encryption, our servers can see:

• file and folder sizes, types, and when they were created, changed and opened;
• file and folder names and how your folders are arranged, where the app stores them unencrypted;
• who you share files and folders with, and their access level;
• the capture date of your photos and other details your device reads from a photo before encrypting it, which the Photos app uses to sort and group your library;
• how much storage you use.

Information we collect

Account information

Your email address, name and password when you create an account. We store your password only as an Argon2 hash. You can also add profile details such as a photo, bio, website, locale and social links. Your public encryption key is stored so others can share files with you. Your private key is created and kept on your own devices and is not sent to us; accounts set up with an earlier version of the app may still have a copy stored with us, encrypted with a passphrase only you know, until it is removed.

Information that is not end-to-end encrypted

The following are stored on our servers in a form we can read, because the Service needs to process them:

• calendar events, reminders and tasks (saved places for location reminders are encrypted);
• comments on files and documents;
• team names, team membership and team activity;
• your settings and preferences.

Connected calendar accounts

If you connect a Google, Microsoft Outlook or Apple iCloud calendar, we store the access credentials that let the Service read and update that calendar for you: an OAuth token for Google and Microsoft, or the app-specific password you enter for Apple. We copy your events into your Neutrino calendar and refresh them periodically while the account is connected. Disconnecting the account in Settings deletes the stored credentials.

Neutrino's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to show and sync your calendar in Neutrino. We do not use it for advertising, do not sell it, and do not let people read it except with your permission, for security, or where the law requires.

Usage and device information

Our servers keep logs of requests made to them, including your IP address, browser or app version, the address requested, and the time. We use these logs to run, secure and debug the Service.

Information stored on your device

We use your browser's local storage, not cookies, to keep you signed in and to remember preferences on that device. If you use AI features, the API key you provide is stored on your device, not on our servers.

How we use information

• to provide the Service: store and sync your content, and share it with the people you choose;
• to send emails you need, such as account confirmations, invitations and password resets;
• to keep the Service and its users secure, and to prevent abuse;
• to diagnose problems and improve the Service;
• to comply with the law.

Services we use and where your information goes

• Hosting. Our servers and the data on them are run by a hosting provider on our behalf.
• Email. Account and invitation emails are sent through Resend, which receives the recipient's address and the message.
• Calendar providers. When you connect Google, Microsoft or Apple, we exchange calendar data with them on your behalf.
• AI providers. AI features use the provider and API key you choose in Settings (Anthropic, OpenAI or Google). The text or images you send to an AI feature pass through our server to that provider and are handled under your agreement with them.
• Maps and place search. Maps load tiles from OpenStreetMap, and searching for a place sends your search to OpenStreetMap's Nominatim service, directly from your device.
• Dictionary and thesaurus. Looking up a word in Docs sends that word to dictionaryapi.dev or Datamuse, directly from your device.
• Content you embed. Videos you embed from YouTube, Vimeo or Loom, and images you link from other websites, load from those sites.
• Software libraries. Some features load code or shape libraries from unpkg.com and GitHub, which see your IP address when they do.

We may also disclose information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the Service, in which case this policy will continue to apply to your information. End-to-end encrypted content stays unreadable to us and anyone we disclose it to.

Retention and deletion

We keep your information while your account exists. You can delete your account from Settings. Your account is closed at once and can be restored for 30 days, after which your files and the rest of your account's data are permanently erased. Server logs are kept for a limited period for security and debugging, and copies in backups may persist for a limited time before they are overwritten.

Your choices and rights

• You can view and change your account and profile details in the app.
• You can download your files at any time.
• You can disconnect calendar accounts and delete your account in Settings.
• Depending on where you live, you may have the right to access, correct, delete or move your information, or to object to how we use it. Email support@getneutrino.app and we will respond within 30 days.

Security

Besides end-to-end encryption, we use encrypted connections (HTTPS) between your device and our servers and limit who can access our systems. No service is perfectly secure, so please keep your password and encryption key safe.

Children

The Service is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has an account, contact us and we will delete it.

International users

We operate the Service from the United States. If you use it from elsewhere, your information will be transferred to and processed in the United States.

Changes to this policy

We will post any changes on this page and update the effective date. If a change is significant, we will tell you by email or in the app before it takes effect.

Contact

Questions or requests about this policy: support@getneutrino.app. See also our Terms of Service.