Privacy Policy

Last updated: 17 October 2026

This policy explains what Cnota (cohesnotes.com and the Cnota Android app) collects when you use it, why, and what choices you have. We keep it short and we collect only what the service needs to work.

What we collect, and why

• A device ID. The app creates a random ID, and a secret key, on your device. We use them to remember which notes you have opened, your free notes, your reading position and your subscription on that device. They do not contain your name.
• Your mobile money number and network. Only when you pay or restore a subscription. We use it to send the payment request to your phone, to attach your subscription to your number, and to let you restore it on a new device (a subscription works on up to two devices).
• A recovery password. If you set one to protect your subscription. We store only a scrambled (hashed) version, so we cannot read it.
• Payment records. The amount, network, status, reference and time of each payment. The payment itself is processed by our payment provider and your mobile network. We never see or store your mobile money PIN.
• Reading data. Your last position in a note and any highlights you make, so you can carry on where you stopped.
• Usage and security records. Which notes were opened or downloaded and when, with a scrambled (hashed) form of your IP address. We use this to stop abuse of free notes and sharing of subscriptions. These records are deleted after 30 days.
• Country check. Your IP address is used, at the moment you connect, to check that you are in Uganda. We do not keep your location.

What we do not do

• We do not show advertising and we do not use advertising or analytics trackers.
• We do not sell your information.

Who handles data for us

• Cloudflare delivers the website and protects it from attacks, so it sees connection details such as your IP address.
• Supabase hosts our database.
• Relworx processes mobile money payments.
• Google Fonts supplies the typefaces, so your browser contacts Google to load them.

On your device

Cnota stores settings (such as your theme), your device ID and any notes you save for offline reading in your browser or app storage. You can clear this at any time from your browser or phone settings, but clearing it removes your device ID, so you would need to restore a subscription on that device.

How long we keep things

• Usage and security records: 30 days.
• Subscription, payment and reading records: while your device or subscription is in use, and for as long as we need them for support and accounting.

Your choices

You can ask us what we hold about your device or number, or ask us to delete it, by emailing [email protected]. Please include your device ID and the mobile money number you used so we can find it. We will reply as soon as we can.

Security

Cnota is served over HTTPS, passwords are stored hashed, and access to our systems is restricted. No service can promise perfect security, so if you notice anything wrong, tell us at the address above.

Who Cnota is for

Cnota is meant for students. It is not directed at young children.

Changes

If we change this policy, we will update the date at the top of this page.