Privacy, plainly.

What stays in the vault. What stays outside it. And what happens when you visit this website.

Last updated 14 November 2026 · Current private beta

Your vault stays on your device.

NOT FOR AI is a private vault for notes, photos and documents. The app stores vault notes, files and filenames encrypted on your device. It does not require a cloud account and does not operate a service that receives your vault contents.

When the vault is open, content is decrypted so you can read and use it. Decrypted previews and thumbnails are held in memory rather than kept as permanent plaintext preview files.

Unlocking and automatic locking.

Your recovery passphrase unlocks the vault. You can optionally enable device unlock using Face ID or your iPhone passcode. Apple's system authentication handles this process; NOT FOR AI does not receive your face scan or biometric template.

The vault locks when the app becomes inactive or moves to the background. You can also lock it manually. The app covers its content while inactive. Passphrases entered in forms are not saved as plaintext or included in app diagnostics.

Imports make a separate copy.

Importing a photo or document creates a copy inside the encrypted vault. The original remains outside NOT FOR AI's protection. That includes originals in Photos, Files, iCloud, other apps, backups and Recently Deleted.

Photos source cleanup is optional and asks for confirmation. Deleting a source may sync through iCloud, and other copies can remain. Files providers may require you to remove originals manually. Review each location separately before deciding what to delete.

Backups are your choice.

You can create an encrypted .nab backup and save it to a location you choose through the iOS file interface. A compatible version of the app and the correct recovery passphrase are required to restore it on a fresh installation. Device unlock enrollment is not included in the backup.

Where you save the backup matters: a cloud or file provider processes that file according to its own practices. Keep your passphrase separately. We cannot recover a forgotten passphrase or decrypt your backup for you.

Permissions have a purpose.

Diagnostics and the private beta.

The app records a limited set of operational events in Apple's local system logging, such as an unlock failure or a cancelled import. These events do not include vault content, passphrases, filenames or file paths. Device authentication diagnostics also record operational outcomes.

The current app is distributed through private TestFlight. Apple manages TestFlight installation, crash information and any feedback you choose to send through TestFlight. Those Apple services are separate from the encrypted vault.

This website is separate from your vault.

This website has no analytics, advertising trackers or app account system. Its fonts and assets are served with the site. It does not connect to your vault or request your vault content. Submitting the optional Early Access form shares your email address with the website operator; it does not share your vault.

Early Access emails and your consent.

If you request Early Access, Alan Brutenic stores your email address, the UTC request timestamp and the privacy-notice version you agreed to. We use these only to contact you about beta invitations and the app launch. We do not sell the list or use it for unrelated marketing.

The legal basis for these optional emails is your consent (Article 6(1)(a) GDPR, where applicable). The form uses an unchecked consent box. You can choose not to register and can withdraw at any time without affecting your use of the app. A request does not guarantee access or automatically invite you to TestFlight. No automated marketing emails are sent by this form.

Consent notice version: early-access-2026-11-13. Duplicate requests return the same confirmation and do not create another registration or extend the original retention period. The form validates email syntax; it does not verify ownership of the mailbox.

Cloudflare hosting and storage.

Cloudflare hosts notforai.app. The Early Access form uses Cloudflare Pages Functions and Cloudflare D1 to process and store registrations on behalf of the operator. The D1 registration table stores only email, request timestamp and notice version. Our form code does not store IP addresses, user-agent strings, device fingerprints or names in D1, and does not log form bodies or email addresses.

Cloudflare necessarily processes connection and request information, which may include your IP address, requested URL and browser information, to deliver and protect the website. Infrastructure logs, security events, backups and account-level settings are separate from the registration table. We do not claim zero infrastructure logging. Provider processing may involve international transfers under the applicable Cloudflare contractual safeguards. See Cloudflare's Privacy Policy.

On 14 November 2026, the operator verified that there were no account Logpush jobs, no zone Logpush subscription or configuration for notforai.app, and no OpenTelemetry observability destinations. No custom external log export destinations were identified in those settings. Standard Cloudflare operational logging, service metrics and security analytics may still apply. Their retention follows the applicable Cloudflare service policies and settings, not the 12-month Early Access email retention period. We do not claim zero infrastructure logging.

Retention, withdrawal and deletion.

Early Access registrations in the active list are retained for a maximum of 12 months from the original request, or deleted earlier if you withdraw consent or request deletion. An automated cleanup runs daily at 02:00 UTC. It removes registrations due to expire before the next daily run, so some entries may be deleted up to a day early. Alan Brutenic handles withdrawal and individual deletion requests. Identifiable administrative exports must follow the same retention and deletion rules.

Email [email protected] from the registered address to withdraw consent, request deletion, or ask to access or correct your registration. We may request proportionate confirmation before disclosing or changing personal data. Withdrawal stops future Early Access and launch contact and does not affect the lawfulness of processing before withdrawal. Subject to applicable law, you may also have rights to restriction, portability and to complain to your competent data-protection authority, including the Czech Office for Personal Data Protection.

Deletion removes the active registration. Cloudflare D1 Time Travel keeps provider-managed recovery history for up to 30 days on the existing Workers Paid plan, so a deleted record may remain in that recovery history until it expires. We do not restore historical Early Access registrations into the active list; if a list must be rebuilt after an incident, we start fresh and collect consent again. Identifiable administrative exports must also be deleted when no longer needed or when a registration is withdrawn or expires.

The limits are part of the promise.

Protection applies to content inside the encrypted vault while it is locked. NOT FOR AI does not provide system-wide AI blocking, revoke access to copies you have shared elsewhere, or guarantee protection on a compromised device. An unlocked vault is available for authorized use. Strong passphrases, a secure iPhone passcode and careful backup handling matter.

Your choices.

You choose what to add, whether to enable device unlock, and whether to create backups. You can delete items from the app. Manage external originals, backups and shared copies separately. Deletion is not a promise of secure erasure from every device, storage medium or backup.

Operator and privacy contact.

NOT FOR AI is operated by Alan Brutenic in the Czech Republic.

For privacy questions, email [email protected]. For help using the app, visit Support.

Please do not send your recovery passphrase, unencrypted private content or a vault backup when requesting help.