Privacy Policy
Effective date: 14 October 2026
Last updated: 14 October 2026
This Policy explains how Sunny SA (PTY) LTD ("MagiNotes", "we", "us", or "our"), a company incorporated in South Africa, handles personal information when you use the MagiNotes website, app, APIs, and support services.
1. Information we handle
Depending on the features you use, information handled by our services may include account and sign-in details, the note content or audio you choose to submit for cloud features, support messages, subscription or token entitlement records, and technical information needed to operate and secure the service. Content you record or submit may contain sensitive or confidential information.
Recordings, transcripts, profiles, scanned documents, and related files are stored on your device for local use. The current app does not upload or synchronize your local note library as a general cloud backup feature. Account identity, billing entitlements, and cloud-feature usage records are processed by MagiNotes services when you use those features.
2. How we use information
We use information to provide and maintain the app, authenticate users, process purchases and cloud-feature usage, respond to support requests, protect the service from abuse, troubleshoot problems, and meet legal obligations.
3. Transcription, AI, and connected services
On-device Whisper transcription processes audio on your device after the model is available there. If you choose cloud transcription, the selected audio is sent through MagiNotes' backend to OpenAI for transcription. If you use cloud AI, the prompts, conversation context, note content, and attachments included in the request are sent to the selected AI provider. Google Gemini requests may be sent directly or through our backend, depending on the app version and configuration. If you configure a personal OpenAI API key, AI requests are sent directly from the app to OpenAI using that key. Cloud processing is optional; avoid submitting content you do not have permission to process.
If you choose Google sign-in or connect Google Calendar, relevant authentication or calendar data is exchanged with Google to provide those features. Apple may process sign-in and App Store purchase information. Website payments, where offered, may be processed by PayFast. Our backend and account services use hosting and database infrastructure providers. Those providers process data under their own terms and privacy notices.
AI providers may retain request content for safety and abuse monitoring. Under their standard API settings, OpenAI says abuse monitoring logs may contain customer content and are retained for up to 30 days; Google says Gemini API prompts, context, and outputs are retained for 55 days for abuse monitoring and related legal disclosures. Google may review content flagged by its safety systems. These periods and practices may differ if a provider account has approved data-retention controls. See OpenAI API data controls and Gemini API usage policies .
These website pages load fonts from Google Fonts. Your browser connects to Google to retrieve those resources, which exposes connection information such as your IP address and browser request details to Google.
We do not sell your note content. Information is shared with service providers only as needed to provide features you request, operate and secure the service, or meet legal requirements.
4. Retention and deletion
We keep information for as long as reasonably needed to provide the service, maintain security and business records, resolve disputes, and comply with law. Retention can vary by data type and feature. You can delete local content using the app's controls. Signed-in account deletion can be requested in the app when the account service is available; it deletes associated account records from MagiNotes services, subject to information we must retain by law. Deleting an account does not itself delete files stored locally on your device.
5. Security and international processing
We use reasonable safeguards designed to protect information. No internet service or storage system can be guaranteed completely secure. MagiNotes and its providers may process information in countries other than South Africa. Where required, we take steps intended to protect information transferred across borders.
6. Your choices and rights
Depending on applicable law, you may request access to, correction of, or deletion of personal information, object to or restrict certain processing, withdraw consent where applicable, or lodge a complaint with a relevant regulator. We may need to verify your identity before responding. To make a request, email admin@maginotes.online.
7. Children and third-party links
MagiNotes is not directed to young children. The app and website may link to third-party services; their own privacy policies apply to information they handle.
8. Changes and contact
We may update this Policy and will post the revised version here with a new update date. For privacy questions or requests, contact Sunny SA (PTY) LTD at admin@maginotes.online.
You may also request account deletion through the app when available or contact us at the address above.