Privacy policy
Deja New is a personal knowledge tool. This policy explains what it collects, why, who else handles it, and what you can ask for at any time.
What data is collected
- Your email address, used to create and sign in to your account.
- The content of the notes you capture, including titles, text, categories and tags.
- Source URLs you save, along with the type of source (link, article or video).
- The chat messages you send to the assistant so it can capture and retrieve notes.
Visit counts and tracking
Deja New records an anonymous count of page visits: the page that was opened and the time it was opened, nothing else. There are no cookies, no IP addresses, no device fingerprints, and no third-party analytics or tracking scripts. A visit is never linked to your account, your notes or anything else that could identify you.
The only places your data is sent are Supabase (your account and notes), Anthropic (only when you have added your own API key, and only for your own requests) and Stripe if billing is added later. Nothing else.
Why it is collected
The data is used solely to provide the service: capturing what you say as structured notes, organising them, and finding them again when you ask. Your notes are not used for advertising and are not sold.
Legal basis
- Contract — processing your account details and notes is necessary to deliver the service you signed up for.
- Consent — where processing goes beyond delivering the service, it happens only with your consent, which you can withdraw at any time.
Who processes your data
- Supabase stores your account and your notes in a database with row-level security, so only your account can read your own records.
- Anthropic processes the chat messages you send, through its API, in order to generate the assistant's responses and structure your notes.
- Stripe will process payment data if and when billing is added to Deja New. No payment data is collected today.
How long data is kept
Your account details and notes are kept until you delete your account. When the account is deleted, the associated notes and profile record are deleted with it.
Your rights under UK GDPR
- Access — ask for a copy of the personal data held about you.
- Rectification — ask for inaccurate details to be corrected.
- Erasure — ask for your account and notes to be deleted.
- Portability — ask for your notes in a portable, machine-readable format.
- Objection — object to processing that is not needed to deliver the service.
Erasure and export requests can be made from your profile dashboard, or by emailing juliana@smart-frames.co.uk. You also have the right to complain to the Information Commissioner's Office.