Your data is yours.

Account

When the app is opened for the first time, a guest account is created in the background. At that point no email address or other identifying information is requested; the data stays bound to the browser you are using. If that browser's data is cleared, the account and its contents cannot be recovered.

Connecting with Google or Apple is optional, and it is what makes syncing across devices possible. When you connect, the provider passes on only your email address and an account identifier. Your password is never seen or stored by panonu at any stage.

What is processed

Boards and cards

Notes, tasks, habit records, weekly plans and the contents of other cards.

Collections

Book, film, series, recipe, study, place and saved-item records.

Images

Images added to cards. They are downscaled in the browser before upload.

Preferences

Hidden collections and default card variants.

Kept on the device

Session information, a local copy for offline use, and your theme and language choice. These live in the browser's own storage (localStorage).

The text of what you save is not read, not analysed, and not used to train any artificial intelligence model.

Where it is stored

Data is held on Supabase infrastructure (database and file storage) and the site is hosted on Vercel. Both providers act as hosting providers only; they do not use the data for their own purposes.

Every row in the database is locked to its own account. Even someone who knows the application's address and its public access key cannot reach another account's records.

Who can reach it

• You. From every device signed in to the same account.
• People you share with. When you turn a record or a board into a link, anyone who has that link can view it; the link itself acts as an access key, and distributing it is under your control. Those pages are closed to search engine indexes.
• People you collaborate with. Only on the board they were invited to, and only at the permission level you set.
• The operator — counts only, never content. The admin screen reads numbers alone: how many accounts, how many boards, how much space. Board names, card text and collection records are never shown there.

Friends and sending

Friend requests are sent using an email address. The system returns the same answer in every case; whether an account exists for that address cannot be inferred from the response. Raw email addresses are not shown in your friend list — the display name on the account is used instead.

Cards and records that are sent to you wait in your inbox; nothing is added to your own data until you accept it.

What is not done

• No cookies. The site writes none.
• No analytics, no tracking. There is no third-party measurement software.
• No advertising; no advertising identifier is created and no profiling is done.
• No email is sent. The app has no mail sender: no newsletter, no announcements, no marketing email under any circumstances.
• Notifications are only the ones you switch on. The mobile app schedules no reminder without notification permission, and asks for that permission only when you turn on a switch under Settings → Notifications. Reminders are scheduled on the device itself; what triggers them are the dates you typed onto your own cards, and they are not pushed from a server. No marketing or “come back” notifications are sent.
• Data is never sold or shared with third parties for marketing.

Deletion and retention

Deleted cards move to the trash and can be restored for seven days. The fact that a record was deleted is kept for thirty days so that syncing with your other devices cannot bring it back; that entry holds an identifier and a timestamp only, never content. Images no longer used by any card are removed after seven days.

To delete the account itself, use Settings → Account → Delete account inside the app; the account and every record attached to it are deleted. The route to take when you cannot reach the app, and the full list of what is deleted, are on the account deletion page. Before deleting, you can download all of your data as a single file from Settings → Backup.