Privacy Policy

This Privacy Policy describes how Novella, LLC ("we", "us", or "our") collects, uses, and discloses your personal information when you visit https://novella.app (the "Site"), use the Novella desktop application (the "App"), or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Our Approach to Your Privacy

Novella is a desktop writing application designed to work fully offline. Your writing data is stored locally on your device by default and is never sent to our servers unless you explicitly opt in to optional cloud features. We follow a principle of data minimization — we do not collect what we do not need.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Services. We collect different information depending on whether you use the App locally, create an account, or enable optional features.

Information Stored Locally on Your Device

Your writing content, projects, notes, snippets, and all related data are stored in a local database on your device. This data never leaves your device unless you explicitly enable cloud sync (a premium feature). We do not have access to your locally stored data.

Account Information

If you choose to create an account for premium cloud features, we collect:

• Your email address
• Authentication credentials (managed securely via our authentication provider, Supabase)

Creating an account is optional. The App is fully functional without one.

Analytics and Telemetry (Opt-In Only)

We use PostHog for anonymous usage analytics to help us understand how the App is used and to improve it. This telemetry is strictly opt-in — no analytics data is collected unless you explicitly consent via the in-app consent dialog that appears on first launch.

If you choose to enable telemetry:

• A random, anonymous identifier is generated that is not linked to your account or any personally identifiable information.
• We collect anonymous usage events such as feature usage patterns and app interactions.
• We do not store your IP address — IP data is used only for approximate geographic location (country/region) and is then discarded by our analytics provider.
• Session recording is disabled.
• We do not collect any of your writing content, project names, or other user-created data.

You can enable or disable telemetry at any time from the App's settings. Disabling telemetry stops all future data collection immediately.

Information We Collect Through the Site

When you visit our website, we may use cookies and similar technologies to collect basic usage data such as pages visited and browser information. This helps us understand Site traffic and improve our online presence.

Customer Support Information

If you contact us for support, we collect the information you choose to provide in your communications with us, such as your email address and the content of your message.

Payment Information

If you purchase a premium subscription, payment information is collected and processed by our third-party payment processor. We do not directly store your credit card or payment details.

How We Use Your Personal Information

• Providing the Services. We use your account information to provide cloud features, manage your account, and process transactions.
• Improving the App. If you have opted in to telemetry, we use anonymous usage data to understand how features are used and to prioritize improvements.
• Communicating with You. We may use your email to send you important service-related communications, such as security notices or changes to our terms. We may also send promotional emails, which you can opt out of at any time.
• Security and Fraud Prevention. We use information to detect and prevent fraudulent, illegal, or malicious activity.
• Legal Compliance. We may use your information to comply with applicable legal obligations.

How We Disclose Personal Information

We may disclose your personal information to third parties in the following circumstances:

• Service Providers. We use third-party services to help operate our Services, including Supabase (authentication and cloud database), PostHog (anonymous analytics, opt-in only), and payment processors. These providers only receive the information necessary to perform their services.
• Legal Requirements. We may disclose information to comply with applicable laws, legal processes, or government requests.
• Business Transfers. In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your personal information. We do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.

Cookies

Our website may use cookies to improve your browsing experience and to analyze site traffic. The desktop App does not use tracking cookies. You can control cookie preferences through your browser settings.

Data Storage and Security

Your writing data is stored locally on your device in an encrypted database. If you enable cloud sync, your data is stored securely in our cloud infrastructure with encryption in transit and at rest. We implement appropriate technical and organizational measures to protect your personal information, but no method of transmission or storage is 100% secure.

Data Retention

We retain your personal information only for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Anonymous telemetry data is not linked to your identity and is retained for product analytics purposes.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

• Right to Access. You may request access to the personal information we hold about you.
• Right to Delete. You may request that we delete your account and associated personal information. You can delete your account directly from the App's settings, which will remove your cloud data and authentication records. Your locally stored data remains on your device under your control.
• Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
• Right of Portability. You may request a copy of your personal information in a portable format.
• Right to Withdraw Consent. Where we rely on your consent (such as for telemetry), you may withdraw it at any time through the App's settings. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Managing Communication Preferences. You may opt out of promotional emails at any time using the unsubscribe link in our emails.

You may exercise any of these rights by contacting us using the contact details provided below, or where available, directly through the App's settings. We will respond to your request in a timely manner as required under applicable law.

International Data Transfers

If you are located outside the United States, please be aware that your information may be transferred to and processed in the United States, where our servers and service providers are located. By using the Services, you consent to this transfer. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy.

Third Party Websites and Links

Our Site or App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with any personal information.

Children's Data

The Services are not intended to be used by children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us so we can delete it.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at info@novella.app.