This FAQ summarizes how Goodnotes collects, uses, protects, and shares personal data, including information related to notebooks, diagnostics, Goodnotes AI, and regional privacy rights.
This general information cannot replace the applicable Goodnotes Privacy Policy or regional notices. Refer to those documents for the complete terms.
What is the purpose of the Privacy Policy?
The Privacy Policy explains how Goodnotes protects your privacy and personal data and describes its data-handling practices.
What personal information does Goodnotes collect?
Goodnotes may collect:
- Basic information such as your first name, last name, email address, country, and language.
- Diagnostic data that you choose to share while troubleshooting, which may include document titles, folders, and imported files.
- Additional information that you voluntarily provide through Goodnotes services.
Goodnotes does not collect sensitive data such as racial or ethnic origin, political or religious beliefs, genetic data, or health information.
Does Goodnotes share my data for advertising?
Goodnotes does not sell or rent personal data to third parties for marketing. For data-driven marketing activities, Goodnotes uses third-party services such as Google Analytics and may share anonymized data for that purpose.
How does Goodnotes use my personal data?
Goodnotes processes personal data as needed to provide its services, comply with legal obligations, and meet applicable data-protection laws, including the EU GDPR, UK GDPR, and California Consumer Privacy Act.
Dedicated privacy-notice addenda explain data-handling practices for customers in Hong Kong SAR of China and mainland China in accordance with local laws.
How does Goodnotes protect my information?
Goodnotes uses technical and organizational safeguards, including encryption, secure servers, and access controls, to protect personal data from unauthorized access or loss.
Can Goodnotes view my notebooks or documents?
Goodnotes does not access or collect data from your notebooks or documents without your explicit permission. Anonymized data may be used to improve the service.
Who can Goodnotes disclose my data to?
Goodnotes may share personal data with service providers that perform functions such as:
- Cloud infrastructure and storage
- Analytics and service improvement
- Customer-support request management
- Secure payment processing
These providers must comply with applicable data-protection obligations.
How does Goodnotes use anonymized data?
Goodnotes may use anonymized usage data, such as feature interactions and crash reports, to improve app performance and customer experience. This data does not contain personal information.
What data does Goodnotes collect when I use Goodnotes AI?
Goodnotes collects data from your use of AI features only when you opt in and give explicit consent. This may include feedback, conversation logs, and content used while interacting with the AI features.
For customers who opt in to “conversation sharing”, Goodnotes retains this information for up to 30 days. Conversation history is not retained under this process if you have not opted in.
See Goodnotes AI FAQ for more information.
How can I exercise my privacy rights?
- Review the full Privacy Policy for details about your rights and the available contact options.
- Contact Goodnotes through its support channels to request applicable actions such as access, correction, or deletion.
Do Enterprise customers need to share this policy with their users?
Yes. Enterprise customers act as data controllers under applicable data-protection laws and must provide information to the people whose personal data they hold and use. For this policy, Enterprise customers include educational institutions, businesses, and other enterprises.
Is Goodnotes HIPAA compliant?
Goodnotes is not intended for transmitting Protected Health Information under HIPAA. Do not use Goodnotes to share sensitive health or financial data.
What privacy rights apply in California and Virginia?
Residents of California and Virginia have rights under the CCPA and VCDPA, including rights to access or delete personal data and opt out of certain data uses. See the California Privacy Policy and Virginia Privacy Notice.