Last updated: July 26, 2025
This Privacy Policy describes how Bata Labs, LLC ("we," "us," or "our") operates Typelets, and how we handle information in connection with our secure notes application accessible at app.typelets.com (the "Service").
1. Information We Do NOT Collect
Typelets is built on a foundation of privacy. We deliberately minimize data collection:
- We cannot read your notes content - All notes are encrypted on your device before transmission
- No analytics or tracking - We do not use Google Analytics or similar services
- No behavioral data - We do not track how you use the app
- No IP address logging - We do not store or log your IP address
- No device fingerprinting - We do not collect device or browser information
- No location data - We do not access or store location information
- No unnecessary cookies - We only use essential cookies for app functionality
2. Information We Do Collect
To provide the Typelets service, we collect minimal information:
Account Information
- Email address - Required for account creation and authentication
- Encrypted password - Stored using industry-standard hashing (we cannot see your actual password)
- Account creation date - For service administration
Encrypted Content
- Encrypted notes - Your notes are encrypted on your device using AES-256 encryption before being sent to our servers
- Encrypted metadata - Folder names, tags, and organization data are also encrypted
- Backup keys - Encrypted backup keys for multi-factor authentication, which you control
3. How We Use Your Information
We use the minimal information we collect solely to:
- Provide and maintain the Typelets service
- Authenticate your account access
- Enable password reset functionality using your backup keys
- Sync your encrypted notes across your devices
- Provide customer support when you contact us
4. Zero-Knowledge Architecture
Typelets uses zero-knowledge encryption, which means:
- Your notes are encrypted on your device before leaving your device
- We only store encrypted data that we cannot decrypt
- Your encryption keys are derived from your password and never sent to our servers
- Even if compelled by law enforcement, we cannot provide readable content because we don't have access to it
- Our employees and systems cannot read your notes under any circumstances
5. Data Storage and Security
We take security seriously:
- Hosting - Your encrypted data is stored on Amazon Web Services (AWS) servers with enterprise-grade security
- Encryption - All data is encrypted both in transit (HTTPS/TLS) and at rest (AES-256)
- Access controls - Strict access controls limit who can access our systems
- Regular security audits - We regularly review and update our security practices
6. Data Sharing and Disclosure
We do not sell, trade, or share your information with third parties, except:
- Service providers - AWS provides hosting infrastructure under strict contractual obligations
- Legal requirements - We may disclose information if required by law, but remember: we cannot decrypt your notes content
- Business transfer - In the event of a merger or acquisition, your data would transfer under the same privacy protections
7. Data Retention and Deletion
- Active accounts - We retain your encrypted data as long as your account is active
- Account deletion - When you delete your account, all associated data is permanently deleted within 30 days
- Inactive accounts - Accounts inactive for more than 2 years may be deleted after email notification
8. Your Rights and Controls
You have complete control over your data:
- Access - You can access all your data through the Typelets app
- Export - You can export your notes from the app at any time
- Delete - You can delete individual notes or your entire account
- Modify - You can update your email address and password at any time
9. Cookies and Local Storage
Typelets uses minimal cookies and local storage:
- Essential cookies - Only for maintaining your logged-in session
- Local storage - To cache encrypted data for offline access
- No tracking cookies - We do not use advertising or analytics cookies
10. International Users
Typelets is operated from New Jersey, United States. By using our service, you consent to the transfer and processing of your encrypted data in the United States. Your data remains encrypted and protected regardless of location.
11. Children's Privacy
Typelets is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided information to us, please contact us and we will delete such information.
12. Changes to This Policy
We may update this Privacy Policy occasionally. We will notify users of significant changes by:
- Updating the "Last updated" date at the top of this policy
- Sending an email notification for material changes
- Posting a notice in the Typelets app
13. Contact Us
If you have questions about this Privacy Policy or Typelets' privacy practices, please contact us:
- Email: typelets@typelets.com
- Company: Bata Labs, LLC