Effective date: .
Current service disclosures reviewed .
Account age and local use
Personal and organization-managed PearaByte accounts require age 13 or older, or a higher applicable product or regional minimum. Personal guardian enrollment and school-managed under-13 accounts are unavailable at initial launch. School approval, a purchase or platform app approval cannot override this restriction.
Neural Notes and PearStead allow basic local use without an account where platform rules permit. Local content and mandatory platform verification or parental-permission requirements still apply. Do not create an adult account for a child or upload a child's information through another account to bypass the restriction.
The initial school offering focuses on eligible high school and college students. School/work identities remain separate from personal identities and use age bands rather than exact DOB by default. School-created under-13 profiles and school-hosted sync are future options, not current services.
An entered birth date is self-declared; a platform age range can also be declared or parent-provided. School SSO, an email domain or a payment does not establish verified age or educational authority. School use requires current organization terms, privacy acknowledgment, data-processing terms and education-use requirements.
Contact support@pearabyte.com about a child's information, review, deletion or stopping further collection. No paid plan or account is required. We verify identity or authority before disclosing another person's information. Do not send identity documents or unnecessary sensitive child information with your initial request.
Local use and account checks
Neural Notes and PearStead open basic local features without requiring account creation, a country or age declaration, or signup-document acknowledgements. Required account age, residence, terms and privacy information is handled through shared PearaByte signup before account/cloud features are enabled.
Cloud eligibility remains separate from local use. The app may ask the device or store for applicable age-range or permission signals when connecting cloud features. Required verification, pending parental approval or revoked approval cannot be replaced by account information or a purchase. Native clients receive derived account eligibility and platform-policy requirements, not the stored account birth date.
Local notes or household records are not sent to PearaByte merely because you use local features. Optional network features, operating-system services and embedded SDKs can still process technical information. Local use is not a promise that the device makes no network requests. Account residence is declared policy information; these checks do not request GPS or prove your current location.
Sign-in, device and language preferences
Remember username stores your sign-in email or username in the device's protected storage, independently of your password. Stay signed in controls ordinary persistent app sign-in: when enabled, the account session is stored using platform-protected credential storage; when disabled, ordinary sign-in lasts for the running app session. Separately enabled biometric quick return can protect a saved account session with device authentication. The app does not save your password or receive fingerprint or face templates.
After successful password sign-in and any required MFA, supported devices can offer biometric setup. Device enrollment changes, session expiry or revocation may require password sign-in again. Signing out ends the ordinary app session. If biometric quick return is enabled, the saved biometric account may remain available until you choose Sign out and forget this device. A remembered username may remain until you turn that preference off. Basic local startup remains available without signing in.
Manage account can open a browser confirmation showing the intended account. Continuing exchanges a short-lived, single-use proof for a secure website session; changing to a different displayed browser account requires confirmation. Browser sign-in and app sign-in have separate session lifetimes. The shared privacy notice explains the presentation-language cookie and the separate saved account-language preference.
Who operates the service
Neural Notes is provided by PearaByte LLC.
PearaByte LLC is a North Carolina limited liability company.
Business mailing address: 510 Central St #180, Hudson, NC 28638, United States.
For support, privacy requests or legal questions, contact support@pearabyte.com or write to the address above. Do not send passwords or recovery keys.
Local use
Free includes unlimited local Standard Neurons and nodes, plus one Secure Neuron. Pro adds unlimited Secure Neurons and eligible cloud sync/sharing. Both sender and recipient need active Pro to send or receive shared Neurons; recipients must first have an eligible 13+ account. Cloud processing follows the account-workspace behavior described below. Payment does not replace required age, privacy or parent/school authorization.
You can use Neural Notes offline and signed out. Notes and settings are stored locally in the app’s workspace database. Account workspaces are separate from the signed-out workspace. Files you explicitly save or export may remain elsewhere on your device.
For an eligible connected account, account-workspace changes sync automatically when the app and connection allow. Signing out or stopping sync does not delete data already stored in the cloud. Device-local appearance, graph-theme and mobile editor-layout choices do not change your notes' storage or encryption rules.
Account and cloud information
When you create or use an account, the service processes your email, display name, password hash where applicable, linked-provider identifiers, sessions, device information, and account capabilities. These support authentication, recovery, sync, sharing, and security. Passwords are hashed; plaintext Secure private keys and recovery credentials are not sent to the backend.
Standard cloud Neurons contain notes, files, and related metadata that the server can process. Secure Neuron content is encrypted on clients; the server stores ciphertext, encrypted key envelopes, public keysets, and the metadata needed for sync, file transfer, and access control. Secure does not mean that all account or sharing metadata is hidden.
If you enable Secure recovery, the server also stores an encrypted account recovery backup and enrollment/code-use records. Recovery is completed in the app using a separate client-only Secure passphrase or an unused one-time emergency code; an enrolled device can also approve another device. PearaByte does not receive these plaintext recovery credentials or private keys and cannot unlock Secure content with your account password.
The encrypted Secure account backup protects recovery keys used to regain access; it is not an independent copy of every note or attachment. Emergency codes are displayed once when generated, and each unused code can enroll a device once through the online service. Protect the Secure passphrase and saved codes separately from your account password. If every enrolled device, the Secure passphrase and all usable emergency codes are lost, Secure data may be permanently unrecoverable. Support cannot decrypt Secure notes or recreate their keys. Key recovery does not guarantee restoration of deleted or overwritten work, and shared Secure Neurons remain controlled by their owner.
A node can contain text, code, checklist items, attachments and, within a Secure Neuron, Secret fields. These sections follow the containing Neuron's access and storage rules. Masking a Secret field controls its on-screen display; people authorized to unlock the shared Secure Neuron may access its contents. An account's interface-language preference may be stored with the account; language does not establish residence or eligibility.
Files, images and camera access
File and image selection uses the device's system picker after you choose an attachment action. The mobile Take photo action requests camera permission when selected; declining retains the other available attachment choices. Captured photos are imported into the selected Standard note after embedded capture metadata is stripped. Files or existing images you choose may retain their own embedded metadata, so review them before sharing. Photos and other files in Standard Neurons follow Standard cloud processing when synced.
App-private notes do not require access to every file or photo on your device. Temporary camera files are cleaned up after import or cancellation, including cleanup of an interrupted capture on a later startup. You can manage camera permission in device settings. Exported or externally saved copies remain under your control.
Sharing and messages
When you invite someone, we process their email and invitation details and may send them an invitation before they have an account. Shared content is available to the authorized recipients. People may retain copies they have already downloaded. Transactional email supports verification, password recovery, invitations, and account deletion.
Service providers and technical records
Hosting infrastructure is provided through OVHcloud. Transactional email uses Resend. Google or Apple processes its own sign-in flow when that option is enabled and used. Stripe processes website and direct-desktop payments, including Microsoft Store desktop purchases; Google Play or Apple processes purchases made through its native billing flow when available. PearaByte receives purchase references and status to provide access and support; it does not receive your full payment-card details. These providers may process data in countries different from yours under their own terms and privacy practices.
Technical and security records can include request times, network addresses, app/device versions, error codes, and delivery status. Manual account and sync diagnostics remain on your device unless you choose Send report in an error dialog or Settings. Close sends no report. Sending requires sign-in. The optional What gets sent? section explains the report, which includes: a random report ID, time, app version, platform/OS, release channel, action, recognized error category, and whether the action was marked as involving Secure features. Reports omit raw error messages and stacks. The server filters reports again before storage in the administrative report queue; account identity, note content, filenames, passwords, access tokens, and Secure secrets are not included in the stored report.
The app keeps up to 120 recent diagnostic entries in memory for the current session. Clearing diagnostics clears that local list, not records already sent. Submitted reports expire after 30 days and are removed by scheduled, bounded cleanup. Reports do not contain your account ID, so account deletion cannot identify individual reports. Diagnostic email forwarding is disabled when this queue is enabled. Network/security logs are separate from report contents. Do not put sensitive content into support messages unless it is necessary to resolve your request.
Optional app usage statistics
Usage statistics starts off on each installation. You can choose Share statistics during setup or change Share usage statistics in Settings. Declining does not limit local notes, sync or other eligible features. The choice is separate from website cookie settings and diagnostic reports.
If you opt in, Neural Notes sends daily flags for app activity, setup completion, use of Graph and Notes views, editing Text, Code or Checklist sections, and adding Standard attachments. Each feature is counted at most once per installation per UTC day. Payloads contain the app, platform, date, fixed feature labels and a fresh random identifier for each upload so retries are not counted twice. There is no persistent analytics user/device identifier or account link. Note contents, titles, filenames, code, searches, clipboard contents, recordings, recovery credentials and Secure editing are excluded.
Unsent flags stay on the device for up to seven days. Turning statistics off clears unsent flags and stops further collection. The service keeps aggregate daily counts for 90 days and upload deduplication records for eight days, then removes expired records through bounded scheduled cleanup. Aggregates cannot identify your contribution for removal. Ordinary network and security records are separate; transmitting a request necessarily exposes connection information to the service. Statistics are used to understand feature adoption and improve the app, not for advertising.
Administration and access records
Authorized administrators can look up accounts, devices, entitlements and cloud Neuron metadata, review submitted reports, and inspect Standard note content for support and moderation. Secure note content remains encrypted and is not available in the admin console. Account changes, manual Pro access and pack grants may be managed by administrators.
Ordinary administrative action and content-access records are eligible for scheduled cleanup 90 days after creation. Billing audit records are eligible for scheduled cleanup two years after creation. Cleanup runs in bounded batches, so removal can occur after these periods. These periods concern PearaByte's audit records, not every account, payment-provider or infrastructure record.
This website
Website sign-in uses a Secure, HttpOnly session cookie. “Remember me” makes it persistent until server expiry; otherwise it is a browser-session cookie. Browsers may restore session cookies. Sign-out and revocation still end access, and authentication credentials are not stored in local storage. Optional first-party analytics records daily aggregate public page views and download/store clicks for 180 days, with no visitor IDs, account information, notes or session recordings. Analytics stays off until you choose it. Cookie settings in the footer lets you withdraw; browser privacy signals disable analytics. We do not currently use advertising or social media trackers. See the cookie and browser-storage details in our shared privacy notice. Opening checkout loads Stripe's payment components, which process technical, payment and fraud-prevention information and may use their own cookies or identifiers. Checkout is optional; it is not loaded merely to read these legal pages. Automatic bounded website/backend error reporting is described in the shared privacy notice.
Retention and deletion
Active account and cloud data is kept to provide the features you use. Neural Notes My Account can delete Neural Notes cloud data while preserving the PearaByte identity and purchases; this signs the account out everywhere so stale clients cannot immediately restore deleted cloud state. Full PearaByte account deletion removes the account database records and owned cloud content when confirmed. A hash of the deletion proof and hashed sign-in identifiers used to block delayed sign-ins expire after 24 hours and is removed by scheduled cleanup. Normal terminal account-mail and action history is pruned after seven days; account deletion removes the account-linked records sooner.
Operational database recovery backups exist separately from active account data. Their retention is currently operator-managed. Deleting active account records does not immediately remove every recovery copy. Operational logs are rotated according to infrastructure limits; the retention interval varies with activity. Records already held by infrastructure, payment, identity or email providers follow their applicable retention practices. Contact us with a privacy request concerning these records.
Content contributed to Neurons owned by others, independent signed-out workspaces, exported files, and copies already held by recipients are not remotely erased by deleting your account. See the deletion page for the complete process and limits.
Your choices and requests
Settings → Advanced → Export data saves Standard notes and workspace data as JSON without requiring Pro. Secure Neurons are excluded. Stored attachment files are referenced rather than bundled into that JSON; save those files separately from each note's Attachments section. This export is not a complete portable backup of notes and files, and it does not include every account or billing record. Contact support for server-held account-data requests.
Use Account controls to manage account settings and remove this device’s account data. Use the app’s available export tools to save your work. You may ask us about access, correction, deletion, or other rights available under the laws that apply to you. We verify identity or authority as appropriate before disclosing or deleting information. Privacy requests and available local Standard exports do not require a Pro purchase.
Email support@pearabyte.com with the subject Privacy request. Tell us which product is involved and whether you want access or a copy, a correction, deletion, or help exercising another applicable privacy right. Include an account email if relevant and a way to contact you. You do not need a PearaByte account to raise a request, including about your information in another person's household or shared content.
A parent or guardian can contact us about a child's information, including review, deletion or stopping further collection. A household invitation alone does not establish parental authority. We may need to verify your identity or authority before disclosing or changing information. Do not send passwords, authentication codes, recovery keys, identity documents or private note, health or household contents with your initial request. If additional information is needed, we will explain what is necessary. Local exports do not include every server-held account or billing record.
The rights, exceptions and response deadlines that apply depend on the request and applicable law. If you disagree with our response, reply to request a review or an appeal where applicable. Contacting us does not waive your right to contact a regulator or use other legal remedies.
Changes
We will update this notice as the service evolves. Material changes will be identified here or communicated through an appropriate account channel.
Regional requirements and privacy choices
Account and cloud availability, age requirements, required residence information and parent or school authority depend on the product and applicable country/state rules. An available country selector is not an announcement that account services or purchases have launched there. Our stated launch offering remains in effect until we announce an additional region.
Terms acceptance establishes the applicable service agreement. A privacy acknowledgment confirms that the notice was presented; it is not blanket consent for optional processing or permission to collect a child's data. Where processing requires a separate consent, that choice must concern the stated purpose and can be withdrawn. Purchasing Pro, store parental permission or school sign-in does not provide that separate authority.
You can contact support@pearabyte.com about applicable access, correction, deletion, objection, restriction, portability or consent-withdrawal rights and help with a privacy complaint. This includes Mexico's applicable access, rectification, cancellation and opposition (ARCO) rights. Rights and response requirements depend on the applicable law. We verify identity or authority before disclosing another person's information; privacy help does not require Pro, a new purchase or acceptance of revised terms.
Organization authority applies only to its separate managed identity and approved service. School authority must cover the educational purpose and applicable jurisdiction; it does not authorize unrelated commercial use or access to a separate personal account. Published notices do not themselves establish a school's authority, an international transfer arrangement or age verification.