Privacy Policy
Last updated: October 4, 2026
unforget.it ("unforget", "we", "us") is a notes app. It saves your X bookmarks, YouTube videos and web pages as notes, and lets you search them and ask questions about them. This policy explains what we collect, why, who helps us process it, and how you can delete it. Contact: unforget.it@icloud.com.
What we collect
- Account details. Your email address, and if you sign in with Google, your Google account's name, email and profile picture. Passwords are stored as hashes by our authentication provider. We never see them in plain text.
- Your notes. Everything you write or save: note text, titles, tags, folders, and where each note came from.
- YouTube data, if you connect YouTube. We ask Google for read-only access to your YouTube account (
youtube.readonly). We use it only to list your playlists and read the playlists you choose to import. For each video we save its title, description, channel, link, thumbnail link and publish date as a note. If you turn on captions for a playlist, we also fetch that video's captions. We cannot post, edit, delete, subscribe, comment or change anything on YouTube. - X data, if you connect X. We ask X for read-only access (
tweet.read,users.read,bookmark.read,offline.access). We use it only to import your bookmarks as notes. We cannot post or change anything on X. - Pages you save with the Chrome extension. When you choose to save a page, we store its address, title and text. The extension can also suggest saving a page you are reading. It only does this on sites you have granted it access to, and that check happens inside your browser. Nothing is sent to us unless you save the page.
- Questions you ask Eli. Eli is the assistant inside unforget. We store your conversations with Eli so you can see them again.
- Usage counts. We count how many imports, saves and questions you use each day or month. This is how plan limits work.
- Connected AI apps. If you connect Claude, ChatGPT or another app through our MCP server, we keep a record of that connection. Those apps can search and read your notes. They cannot change them.
- Server logs. Our hosting providers record technical information such as IP address, browser type and errors, for security and debugging.
We do not use advertising trackers or sell your data. The app and this website do not use analytics cookies.
How we use it
- To run the app: store, show, search and sync your notes.
- To answer questions. Eli and connected AI apps find the notes most related to your question and use them to write an answer.
- To enforce plan limits and keep the service secure.
- To contact you about your account, such as invitations, password resets and important changes to these terms.
We do not use your notes, YouTube data or X data to train AI models, and we do not allow the providers below to train on it.
Who processes your data
We use these service providers. Each one receives only what it needs to do its job.
| Provider | What it does | Data it receives |
|---|---|---|
| Supabase | Database, sign-in, file storage, background jobs | All account and note data |
| Vercel | Hosts the app and this website | Server logs |
| Google Cloud | Runs Eli | Your question, the related notes, your Eli history |
| OpenAI | Turns note text into search vectors (embeddings) | Note text |
| Google (Gemini API) | Writes Eli's answers | Your question and the related notes |
| TranscriptAPI | Fetches YouTube captions, only if you turn captions on | YouTube video IDs |
| Google (YouTube Data API) | Lists and reads your playlists | Your YouTube access token |
| X | Reads your bookmarks | Your X access token |
If you connect Claude, ChatGPT or another AI app, the notes it reads go to that app's provider under their own privacy policy.
We may also disclose data if the law requires it, or to protect the safety of users or the service.
Google and YouTube data
unforget's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. In short:
- We use YouTube data only to show and search your imported videos inside unforget, and to answer your questions about them.
- We do not sell it, use it for advertising, or use it to train general AI models.
- No person at unforget reads it, unless you ask us to for support, it is needed for security or the law, or it has been aggregated and made anonymous.
By connecting YouTube you also agree to the YouTube Terms of Service. Google's handling of your data is covered by the Google Privacy Policy.
You can disconnect YouTube in unforget at any time. This deletes our copy of your YouTube access token and revokes it with Google. You can also revoke access from your Google account permissions page. When you disconnect, imported video notes stay in your account until you delete them. If you delete your unforget account, they are deleted too.
How long we keep it
- Notes, Eli conversations and imported data: until you delete them or delete your account.
- Notes you move to the trash: until you empty the trash or delete your account.
- YouTube and X access tokens: until you disconnect, or until the provider revokes them. Tokens are encrypted when stored.
- Server logs: as long as our hosting providers keep them, usually no more than 30 days.
When you delete your account, we delete your data from our database within 30 days. Copies in backups are removed when those backups expire, within 30 days after that.
Your choices and rights
- See and export: your notes are visible in the app. To get a full copy of your data, email us.
- Correct: edit any note in the app.
- Delete: delete notes in the app. To delete your whole account, email unforget.it@icloud.com from the address you signed up with. We reply within 30 days.
- Disconnect: disconnect YouTube, X or any connected AI app at any time.
Depending on where you live (for example the EU, UK or California), you may have further rights: to object to or restrict processing, to data portability, or to complain to your local data protection authority. To use any of these rights, email us.
Our legal basis for processing is the contract with you, meaning we need the data to provide the service you signed up for, and our legitimate interest in keeping the service secure.
Where data is stored
Your data is stored in Tokyo, Japan (Supabase region ap-northeast-1). Our AI providers may process it in the United States. Where data moves between countries, we rely on our providers' standard contractual clauses or similar safeguards.
Security
All data travels over HTTPS. Access to your notes is limited to your account by database-level rules. Third-party access tokens are encrypted. No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.
Children
unforget is not for anyone under 18, and we do not knowingly collect their data.
Changes
If we change this policy, we will update the date at the top. If a change is significant, we will email you before it takes effect.