ArtisnotesArtisnotes privacy policy
Last updated: 16 October 2026 (fixing what was heard sends that recording to OpenAI)
Artisnotes is an app for Even Realities G2 glasses, published by L'ART DU WEB (EURL, SIREN 911 121 754), 3 place Jean Giraudoux, 94000 Créteil, France. Contact: artisnotes@gmail.com.
This policy explains what happens to your data when you use Artisnotes.
The short version
- Your notes stay in your Workflowy account. Our server keeps no copy, except the steps of a change that is not finished yet. Your phone keeps a list of your note titles, so search is fast.
- Your voice is recorded only while you hold the ring. If the country of your Even account is in Europe, it is turned into text in the European Union; otherwise in the United States. It is not kept by us, and we ask our speech provider not to keep it.
- We have no ads, no analytics and no tracking, and we never sell data.
How Artisnotes works
Artisnotes runs inside the Even Realities app on your phone. The Even app carries sound and screens between your glasses and Artisnotes; Even Realities' own privacy policy covers that part.
To reach Workflowy and OpenAI, Artisnotes sends requests through our server, called the relay, at relay.artisnotes.com, hosted by Fly.io in Ashburn, Virginia, United States. Your voice does not go through the relay: the app sends it straight to Deepgram, and, only when you scroll to fix what was heard, straight to OpenAI.
What goes where
Your notes. When you read or change a note, the relay passes the request to Workflowy with your Workflowy key, and passes the answer back. It does not store your notes. One exception: while a change with several steps is in progress, the relay keeps those steps, which can include note titles, so it can finish them safely after a lost connection. When the change is finished, the steps are removed and only a short receipt stays: a job number, a check value, how many steps were done, and the ids of any new notes. Receipts contain no note text and no key. We keep them so the same change is never made twice, and delete each one a week after it last changed.
Your voice. The glasses microphone is on only while you hold the ring, and the glasses show that they are listening. The app on your phone sends the sound straight to Deepgram, which turns it into text. The sound does not pass through our server. Every request asks Deepgram not to keep the sound or use it to train its models. The app keeps the words in memory only until you finish.
Other people. The microphone hears whoever is speaking, not only you. Do not record other people without their permission, and do not use Artisnotes to keep health or other sensitive information about other people. In France, recording someone's private words without their consent is a crime (Criminal Code, article 226-1), and other countries have their own rules.
Note titles that go with your voice. When you use Find, Ask AI or Propose an action by voice, the app also sends Deepgram the titles of the notes around the one you are on: the notes above it, your top-level notes, its children and the notes beside it, up to 60 titles. They are sent only to help Deepgram recognise your own words, such as unusual names, correctly. They are sent even if you do not say them. They travel in the address of the request. We ask Deepgram not to keep the request, but we cannot check Deepgram's own technical logs. For everything else you say (a new name, a new note, a thought, or Say what to do), no titles are sent.
Where your voice is turned into text. It depends on the country of your Even account. The app reads that country from the Even app when it starts. It uses the country only for this choice, does not store it, and sends it to nobody.
- If that country is in the European Economic Area, or is the United Kingdom or Switzerland, your voice goes to Deepgram's address in the European Union.
- If it is another country, your voice goes to Deepgram's address in the United States, because it is closer to you and answers faster.
- If the app cannot read your country, your voice goes to the European Union.
You can also choose yourself, under Voice region on the Artisnotes setup screen on your phone: Automatic (as above), EU or US. Your choice is kept on your phone and applies to your next voice request.
The country of your account is not always the country where you live. This choice only decides where Deepgram works. It does not change your rights: this policy, and European privacy law, apply to every user, wherever the voice is turned into text.
Fixing what was heard. After you speak, the glasses show what Deepgram heard. If it is wrong, you can scroll on that screen to have it fixed. Only then, the app sends that recording straight from your phone to OpenAI's transcription service, with what Deepgram heard and the titles of the notes around you, so OpenAI can hear your words a second time. Then the relay sends what both services heard, and those titles, to OpenAI's AI, which writes one line: what you said. Nothing is sent to OpenAI if you do not scroll. The recording is kept only in your phone's memory while that screen is open, and is gone when you leave it. OpenAI may keep requests for up to 30 days to check for abuse, or longer when the law requires it, and does not use them to train its models.
Your AI questions. When you ask AI, the relay sends your question, and the notes you chose to include, to OpenAI. If you switch "Web" on before you ask, OpenAI may also search the web to answer, using words from your question and from those notes. When it does, the answer's last line names the websites it used. The answer is saved in your Workflowy outline, under your question, and marked as AI. Every request asks OpenAI not to store the answer. OpenAI may keep requests for up to 30 days to check for abuse, or longer when the law requires it, and does not use them to train its models.
Signing in. To sign in, you type your email address on the Artisnotes setup screen. The relay passes it to WorkOS, which emails you a six-digit code; you type the code, and WorkOS confirms it is you. Your phone then keeps a short sign-in pass and a renewal ticket, so you stay signed in. The relay passes the code and pass on without storing them. It keeps the verified email in the account record described below. WorkOS keeps your email address and when you signed in, in the United States. There is no password.
Your Artisnotes account. After the sign-in service verifies your email code, the relay keeps your email and WorkOS account id. It uses them to identify your account and answer support requests. When you choose Delete account, the relay closes the account immediately and refuses its passes. It keeps the closed record for 12 months for support and disputes, then removes it automatically. A retry does not restart that period. Your WorkOS identity is deleted separately; a missing reply means that deletion is unconfirmed. The relay never stores your code, sign-in pass or renewal ticket. This beta does not yet keep subscription records.
Your consent. Each time you give or withdraw your consent creates a separate record. After verified sign-in, the relay records your account and sign-in session ids, the action, its receipt time, the notice version, a SHA-256 fingerprint of the exact words, and the app version. A fingerprint is a check value that identifies those words. It also keeps the phone's reported click time and whether you clicked before signing in. An earlier click is attached to the account you later sign into. The server receipt time does not claim to be the time of that earlier click.
The relay records a shortened network address: the first three parts of an IPv4 address, or the first three groups of an IPv6 address. It reads the connection address, not an address supplied by the phone. Behind a hosting proxy this can identify the proxy instead. If no valid address is available, it records that fact. We keep these records while the account is open and for five calendar years after closure, separately from the twelve-month account list. The exact notice words and reconstructed screen images are kept in the source archive. A lawyer must confirm this retention before public release.
Your phone keeps unsent clicks until the relay confirms them. A failed connection or storage write is shown on the setup screen with a retry action. Withdraw consent blocks this phone immediately; a failed upload remains pending. The relay blocks new provider requests when it has no current agreement or has received a withdrawal. Speech sent directly from this phone is also checked before it starts and while a live recording continues. Data already sent cannot be recalled. After confirmed account deletion, unsent local records for that account are removed; deletion first attempts to send them.
Messages you send us. On the phone setup screen, under Support, you can send a message to the developer. The relay keeps your message, your account's email address (so we can answer you), when you sent it, and the app version. If you tick "Add the diagnostic report", it also keeps that report, which holds no keys and none of your outline text. We use these only to answer you and to fix problems. A message is deleted 12 months after you sent it, or when you delete your account, whichever comes first.
Your keys. Your Workflowy, Deepgram and OpenAI keys are stored on your phone, in the Artisnotes area of the Even app. They are encrypted before they are sent to the relay, which uses them for that one request and never stores them.
On your phone. Artisnotes keeps your settings, a list of your note titles (so search is fast), thoughts you captured but have not saved yet, unfinished changes, and a log of errors. This stays on your phone. The error log leaves your phone only if you choose to send it to us.
Server logs. For each request, the relay logs the time, which service was used, the result code, how long it took, its size, and a random attempt number. Logs contain no note text, no sound, no AI answers and no keys. Our host may also record your IP address. Logs are kept for 7 days, then deleted by our host.
Who receives your data
| Who | What | Where |
|---|---|---|
| Workflowy | your notes | United States |
| Deepgram | your voice, and the titles of nearby notes, to turn your voice into text | European Union if your Even account is in Europe, otherwise United States |
| OpenAI | your AI questions and the notes you include; when you scroll to fix what was heard, that recording and the titles of nearby notes | United States |
| Fly.io | hosts the relay | United States |
| WorkOS | your email address and when you signed in, to sign you in with a code | United States |
| Even Realities | carries data between your glasses and the app; tells the app your account's country | see their own policy |
You use your own accounts with Workflowy, Deepgram and OpenAI, so their terms and privacy policies also apply to you. Fly.io, which hosts our relay, is on the EU-US Data Privacy Framework list.
To do before release (legal review of 2026-10-13, finding C): for each company that receives data in the United States, name the legal protection that covers it (for example the EU's standard contractual clauses) and who signed or accepted it. Until that is checked, this policy does not claim one.
Why we use your data
Only to give you the features you ask for: reading and changing your notes, turning your voice into text, answering your questions, and replying to the messages you send us. Under European law (GDPR), the legal reason is that we need it to provide the service you chose. Even's rules for apps also require your explicit agreement before we share your data with these services, so the setup screen asks for it.
Your choices and rights
- Before Artisnotes sends anything to Workflowy, Deepgram or OpenAI, the setup screen on your phone shows what goes where and asks you to agree. Nothing is sent before you agree.
- You can withdraw your consent at any time with "Withdraw consent", under Account and privacy on the same screen. This phone stops sending immediately, and tries to record the withdrawal on the relay. If that fails, the screen shows that it needs a retry.
- In the phone setup screen, open Account to sign out on this phone or sign out everywhere. The phone removes its saved sign-in. Sign out everywhere also asks WorkOS to cancel every renewal ticket. A pass already issued can remain valid for up to 10 minutes. If the server does not confirm revocation, the screen says so. Signing out does not cancel a subscription.
- In Account, choose Delete account, then confirm. This permanently deletes your Artisnotes identity from WorkOS and cannot be undone. A missing server reply is shown as unconfirmed. Your notes and accounts with Workflowy, Deepgram and OpenAI are not deleted, and their keys stay on the phone. Our relay retains your email and account id for 12 months after closure, and sharing-permission evidence for five years, as explained above. Removing erased data from disk copies within 5 days of its actual erasure is a hosting requirement; this release has not verified those live copies. Subscription deletion will be added with payment support.
- If the phone cannot remove the saved sign-in, the screen reports the failure and blocks a new sign-in until cleanup succeeds.
- You can remove your keys at any time on the Artisnotes setup screen on your phone.
- You can ask us to see, correct or delete any data we hold about you, by writing to artisnotes@gmail.com. Receipts on the relay are not linked to your name, so we may not be able to find yours; each one is deleted within a week anyway.
- If you live in the EU or the UK, you can complain to your data protection authority. In France, this is the CNIL (cnil.fr).
Children
Artisnotes is not meant for children under 16.
Changes
If we change this policy, we will update the date above and, for important changes, say so in the app listing.