ADHD Notes is operated by Useful Tools LLC, a North Carolina limited liability company (“Useful Tools,” “we,” “us,” or “our”). ADHD Notes is an adult productivity tool. This Privacy Policy explains what information we collect, how we use it, when we disclose it, and the choices available to you.
Your data is yours. We do not sell personal information. We do not share personal information with advertisers or use it for targeted advertising.
When you create an account, we collect your name and email address. Authentication credentials are handled by Supabase, our authentication provider.
We store the content you choose to create or import, including tasks, notes, contacts, meetings, reminders, and related details. If you import or drag an email into ADHD Notes, the content you choose to import is stored as part of the task or note you create.
Handwritten ink created in the Notes handwriting workspace is saved on that device rather than as account content. Signing out does not delete that local ink. It enters your saved Notes only when you review text and explicitly choose to add it. You can separately export or delete the local ink journal, and clearing the browser's site data may also remove it.
The former wellness tracker is no longer available and ADHD Notes does not accept new wellness entries. Legacy wellness entries from prior use may remain in an existing account until the account holder exports or deletes the account, or asks us to delete them. We retain the dormant data structure only to preserve deletion and export compatibility.
The student and classroom module is shelved. It is unavailable, student links are disabled, and ADHD Notes does not accept new student information. Limited records from earlier private testing may remain only as needed for deletion, security, consent documentation, or legal obligations. Our Legacy Student Privacy Notice explains how to request review or deletion.
We collect basic events and technical information needed to operate, improve, and protect the service, such as marketing page visits, calls to action, signup steps, sign-ins, timestamps, account or device identifiers, browser or device type, error information, security events, and rate-limit or abuse-prevention records. Marketing measurements do not include your prompt text, notes, task content, email address, or name. Optional first-party product analytics, such as app opens and feature use, remain off unless you affirmatively enable them in Settings. Product analytics may be linked to your account but never include task content, notes, or contact names. We do not use this information to track you across unrelated apps or websites.
We use a session cookie or similar technology to keep you signed in. ADHD Notes also caches account content in your browser's local storage so the app can respond quickly. For first-party marketing measurement, we store a random visitor identifier, session identifier, and limited first-touch campaign or referring-domain information. We do not store full referring URLs or use third-party advertising cookies.
If you connect self-text capture, we collect the mobile number you verify, your consent choices, opt-out commands, and content-free delivery records. The content you text is stored in your Remember inbox. Free accounts receive routine task and nudge reminders through app push notifications. If you have a paid plan and separately enable text reminders, we use your number to send the automated task and nudge reminders you request. SMS is not end to end encrypted.
If you choose to connect Google Calendar, ADHD Notes initially requests read-only access to events on Google calendars you own. For the date range shown in the app, ADHD Notes retrieves only the event identifier, title, and start date and time needed to display your schedule in the On the clock and Calendar views. If you separately select Enable writing and approve Google's owned-event write permission, ADHD Notes can create or update only the ADHD Notes events you explicitly send to your owned primary calendar. It does not silently upgrade an existing grant, change unrelated events, share calendars, or manage calendar access.
Google OAuth credentials are encrypted and stored server-side. Google Calendar event details are read on demand and are not retained as ADHD Notes account content, sent to AI providers, used for advertising, or sold. You can disconnect Google Calendar at any time; disconnecting revokes the provider credential and removes the stored connection. ADHD Notes' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
If you contact us, we collect the information you provide, such as your email address, message, and any attachments or troubleshooting details.
If you use the in-app control to report an AI response, we receive the reported response, the note you choose to add, your account email address, and the part of the app where the response appeared. We use this information to review safety and quality problems. The app shows exactly what will be sent and asks you to confirm before sending.
If you affirmatively choose product news and occasional tips in Settings, we record that choice and may use your account email address to send those optional messages. This choice is separate from account, security, service, and support communications. You can turn marketing email off in Settings. Any marketing message we send will also include an unsubscribe control. We keep limited consent and suppression records so we can document your choice and avoid sending messages after you unsubscribe.
We use information to:
Before ADHD Notes sends content to an external AI provider on a device, it presents a disclosure and asks for permission. When you then use Daily Brief, Enhance, the assistant, or another AI feature, the text needed for that request is sent to the selected language-model provider to generate the result. Depending on the feature and provider availability, our hosted service may use OpenAI, Google Gemini, or Groq. If you add your own provider key in Settings, the selected content is sent to the provider you choose, which may include OpenAI, Anthropic, Google, or a local model you configure.
By default, ADHD Notes replaces recognizable email addresses and phone numbers with neutral labels before a hosted or external model receives a request. You can adjust those controls and optionally protect exact known contact names in Settings. Redaction reduces exposure but may not identify every sensitive detail, and it does not change your saved wording.
Handwriting transcription has a separate permission. When you explicitly transcribe a handwritten draft, the app reflows its visible ink in chronological order and sends one or more tightly cropped images through ADHD Notes to Google Gemini. The raw stroke vectors, note title, timestamps, and account identifier are not included in the model request. Image redaction is not available, so erase or remove anything you do not want sent before continuing. Google may retain the request and response for up to 55 days for abuse monitoring under its service terms, and authorized Google employees may review content flagged by its automated abuse-detection systems. ADHD Notes does not store the cropped images as account content; the suggested transcript stays with the local ink journal until you review it, and it is added to Notes only at your direction.
Meeting transcription has a separate recording-and-link permission. When you choose a recording, ADHD Notes uploads it privately, converts supported media to audio, and sends the audio to Groq for transcription. When you paste a supported video-page link, a media-extraction service may retrieve the media before the audio is sent to Groq. Temporary uploaded media is deleted after processing on a best-effort basis. Those services process media under their own terms, which ADHD Notes does not control. Only transcript text you review and save is added to the meeting. Use this feature only when everyone whose agreement is required has agreed and you have permission to share the recording or link.
If you enable web lookup, your query is sent to Google Search through Gemini to return an answer with sources.
If you connect a compatible outside assistant through the ADHD Notes connection page, you choose one workspace and approve repository permissions. The assistant may search and receive the full contents of tasks, notes, lists, journal entries, meetings, appointments, and calendar events in that workspace, including descriptions, note bodies, attendees, checklist items, and dates. It may also create records, update explicit fields, complete tasks, and archive supported records when you ask. It cannot access another workspace, change account settings, share content, invite people, send messages, permanently delete records, or change an outside calendar. ADHD Notes derives your account and workspace from the approved connection rather than accepting them from the assistant. The connection keeps content-free security and usage records such as the client, tool name, time, outcome, and retry identifier; those records do not include titles, bodies, attendees, or other workspace content. Existing connections remain create-only until you reconnect and approve the expanded access, and you can revoke access in Settings.
Useful Tools does not use your content to train its own AI models. Third-party providers process information under their own terms, privacy policies, and service settings. Do not submit content to an AI feature if you do not want it processed by the applicable provider. AI features are optional.
Data retrieved from a connected calendar is handled as described in “Connected calendars and Google user data” below, which governs where that data may and may not be sent.
ADHD Notes can connect to an outside calendar so your existing events appear on your daily timeline alongside your tasks. Connecting a calendar is optional, is always started by you, and can be undone at any time.
ADHD Notes supports optional calendar connections to Google Calendar and Microsoft Outlook Calendar. Each connection starts read-only, is separate, and connecting one does not connect the other. Calendar writing is a separate permission you enable explicitly for one provider at a time.
If you connect a Google account, ADHD Notes initially requests read-only access to events on Google calendars you own using the https://www.googleapis.com/auth/calendar.events.owned.readonly scope. If you later choose Enable writing, Google asks you to replace that grant with https://www.googleapis.com/auth/calendar.events.owned so ADHD Notes can create and update the ADHD Notes events you explicitly send to your owned primary calendar. The connection does not request Google identity scopes, does not access other Google products, and does not change unrelated events, sharing, or calendar access.
If you connect a Microsoft account, ADHD Notes initially requests the delegated Calendars.Read scope. If you later choose Enable writing, Microsoft asks you to replace that grant with delegated Calendars.ReadWrite so ADHD Notes can create and update the ADHD Notes events you explicitly send to your default Outlook calendar. ADHD Notes does not request application-wide mailbox access for this feature.
If you choose “Continue with Google” to sign in, we receive your name, email address, and Google account identifier in order to create and authenticate your account. Signing in does not grant calendar access. Connecting a calendar is a separate, later step that asks for your permission explicitly.
Access and refresh tokens are encrypted at rest using AES-256-GCM and are used only for the calendar access you approve. Event details read from a provider are used to render your current timeline view and are refreshed rather than accumulated. When you send an ADHD Notes event to a connected calendar, ADHD Notes sends that event's title, description, date, time, and time zone and retains a private mapping between the ADHD Notes event and the provider event so later edits update the same copy. We do not build a permanent archive of your calendar history.
Google user data is excluded from ADHD Notes' AI features. Events retrieved from a connected calendar are shown to you directly. They are not sent to any language-model provider, are not included in Daily Brief, Enhance, assistant, or web lookup requests, and are not used to generate AI output.
You can disconnect a connected calendar at any time in Settings. Disconnecting deletes the stored tokens and stops all further access. You can also revoke access directly from your Google Account at myaccount.google.com/permissions. Revoking access in either place takes effect immediately.
ADHD Notes' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not use it for advertising or targeted marketing, and we do not use it to develop, improve, or train any generalized artificial intelligence or machine learning model. We do not transfer Google user data to any third party except as necessary to provide the features described above, or as required by law.
We disclose information only as described below.
We use service providers to host data, authenticate users, provide infrastructure, deliver requested text messages, provide analytics and operational support, and generate AI responses. These providers may process information only for the services they provide to us, subject to their agreements and applicable law.
We disclose information when you direct us to do so, such as when you export content, use an AI provider you selected, initiate a text message, or share information outside the service.
We may disclose information if we reasonably believe disclosure is required by law or legal process, or is necessary to protect the rights, safety, or security of users, Useful Tools, or others; investigate fraud or abuse; or enforce our agreements.
If Useful Tools is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be disclosed as part of that transaction, subject to appropriate confidentiality protections and applicable law.
We do not sell personal information. We do not share personal information for cross-context behavioral or targeted advertising.
We keep account information and content while your account is active or as needed to provide the service. Items placed in Trash are scheduled for permanent deletion after 30 days unless you restore them sooner.
First-party product and marketing analytics events are scheduled for deletion after 60 days. Aggregated reports that no longer identify an individual may be retained longer.
You may export your data and request deletion of your account and associated data. Deletion removes active account content, subject to limited exceptions. Some information may remain for a limited period in backups, security logs, consent records, transaction records, or records we must retain to comply with law, resolve disputes, prevent fraud, or enforce agreements. We delete or de-identify information when it is no longer reasonably needed for the purpose for which it was collected.
Legacy student test records and wellness entries are not used to provide current features. They are retained only as reasonably necessary to preserve account export and deletion, honor a verified request, document consent where required, protect the service, or meet legal obligations. Parents, authorized organizations, and account holders may request access, correction, or deletion.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information based on the nature of the information and the service. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. You are responsible for using a strong password, protecting your account credentials, and keeping exported copies secure.
You can review and update certain account information in the app, export your data, remove content, disable optional AI features, separately withdraw text, handwriting-image, or meeting-transcription media permission, control text redaction, opt in or out of product analytics and optional marketing email, choose whether to enable web lookup, manage your own AI provider key, and request account deletion.
Depending on where you live, you may have rights to request access, correction, deletion, or a copy of personal information, or to object to or limit certain processing. We will honor verified requests as required by applicable law. We may need to verify your identity before completing a request.
To make a privacy request, email calvin@adhd-notes.com. An authorized agent may submit a request where permitted by law, but we may require proof of authority and verification of the user's identity.
Because we do not use personal information for targeted advertising or sell it, we do not offer an advertising opt-out. We do not respond differently to browser “Do Not Track” signals. Where legally required, we will honor recognized opt-out preference signals for processing to which they apply.
ADHD Notes accounts are for adults. The service is not directed to children under 13, the student module is unavailable, and we do not knowingly accept new personal information from children. If you believe a child's information remains from earlier private testing, email us so we can review and delete it as appropriate.
Self-text capture and reminders are optional. Message frequency varies and message and data rates may apply. Reply STOP to cancel all ADHD Notes texts or HELP for help. We keep limited consent and suppression records so we can document your choice and prevent messages after an opt-out. We do not sell mobile numbers or share mobile opt-in or consent information with third parties for their marketing. More information is available on our Text messaging page.
Useful Tools is based in the United States. Our providers may process information in the United States and other countries where they operate. Those countries may have data protection laws different from the laws where you live. By using the service, you understand that information may be processed in these locations, subject to applicable law.
We may update this Privacy Policy as the service, vendors, or law changes. We will update the date above and provide additional notice when a change is material and applicable law requires it. Your continued use after the effective date is subject to the updated policy, but we will seek consent when required.
ADHD Notes is operated by Useful Tools LLC.
Privacy questions and requests: calvin@adhd-notes.com
Legacy student privacy information: adhd-notes.com/kids/privacy
Text messaging information: adhd-notes.com/sms