Privacy Notice

notabook is a product of Asmaa Consultancy, which acts as the data controller for the personal data described in this notice. Asmaa Consultancy is registered at Zone 38, Street 231, Building 83, 7th Floor, Office 54, Doha, Qatar. Contact: asmaa@notabook.me.

Account data: name, email, and login credentials. Content: journal entries, goals, check-ins, and onboarding answers you choose to write. Coaching data: session bookings, shared entries (only what you mark shared), and coach notes. Support messages you send us. Usage and device data: pages visited, feature usage, device identifiers, and IP address.

We use your data to create and secure your account, provide and improve the service (including AI reflections on your own entries), enable coach–client collaboration you opt into, prevent fraud and abuse, provide customer support, and — with your consent — send you product updates. Legal bases: performance of our contract with you, our legitimate interests in securing and improving the service, your consent where required, and compliance with legal obligations.

Service providers and subprocessors that host and operate the service (cloud hosting, analytics, support tooling). Paddle, our Merchant of Record, for the sale of subscriptions, payments, tax compliance, and invoicing. Professional advisers (legal, accounting). Authorities where required by law. Your coach sees only the entries you explicitly mark as shared — nothing else.

We keep your data for as long as your account is active and as needed to provide the service. When data is no longer needed — for example after account deletion — it is deleted or anonymised, except where the law requires longer retention.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. If you are in the UK or EEA, you also have the right to complain to your supervisory authority, and we will respond to requests within one month. To exercise any right, email asmaa@notabook.me.

Some of our service providers process data outside Qatar, the UK, or the EEA. Where data leaves these regions, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We apply appropriate technical and organisational measures, including encryption in transit and strict access controls; private journal entries are visible only to you. We use essential cookies to keep you signed in and the service working, and may use privacy-respecting analytics; you can manage cookies in your browser settings.