NoteRun Privacy Policy

Last updated: 4 October 2026

NoteRun collects no data. Your notebooks, code and outputs stay on your device and in the places where you keep them. Only when you use AirCode does anything pass through the developer’s server, and then it is end-to-end encrypted: the server can’t read it.

What NoteRun collects

Nothing. NoteRun has no accounts, analytics, advertising or tracking, and it contains no third-party code that does. The app works without the internet: Python and its packages come with the app. It connects to the internet in two cases only: when you ask it to open a notebook from a link, and when you use AirCode.

Your notebooks and files

• NoteRun opens only the files you choose, from Files, iCloud Drive or another app’s share menu, and saves your changes back to the same file.
• Code you run can use files in the notebook’s folder. For a folder outside NoteRun, the app asks you to give access first.
• When you open a notebook from a link, NoteRun downloads the notebook, and the data files that notebook names, from the site in the link (GitHub, Kaggle or Google Drive). That site sees your IP address and which files were requested, as with any download. NoteRun sends nothing about you or your notebooks, and nothing reaches the developer.
• For a GitHub repository link, NoteRun also reads the repository’s file list from GitHub. If you ask, it downloads the rest of the notebook’s folder or the repository as a ZIP. A ZIP you open from Files is extracted on your device; nothing is sent anywhere.
• If you share a link to NoteRun from Safari or another app, NoteRun receives that link and nothing else from the page. The share step itself doesn’t connect to the internet; the download happens in NoteRun, as above.
• Your code runs inside the app, on your device. NoteRun also reads a notebook’s code on your device to warn you about missing packages; the code doesn’t leave the device.
• Internet access from notebook code isn’t supported in this version. If code you write reaches a website anyway, it does so on your instructions; NoteRun takes no part in it.

AirCode

AirCode moves a notebook from Google Colab on your computer to NoteRun, and back, with the NoteRun AirCode extension for Chrome. It runs only when you start it.

• When you click the extension in a Colab tab, it reads the notebook open in that tab and the data files that notebook’s code names in Colab’s /content folder, and shows you what it will send. It reads nothing else from the page or from other tabs.
• The notebook and files are encrypted on your computer (AES-256-GCM) with a new random key. The key appears only in the QR code, after the # of its address, so it never reaches any server, including this website.
• The encrypted package waits on the developer’s server (api.noterun.fatihkacar.com, run on Cloudflare) for at most 10 minutes and is deleted as soon as your phone downloads it.
• Sending back: your phone encrypts the cell texts and the data files that changed, with the same key, and puts them in a mailbox on the same server; the extension reads them and deletes them. Outputs aren’t sent. The mailbox closes after 7 days.
• The server sees only encrypted bytes, their size and random identifiers; it can’t read your notebooks or files, and it keeps no logs. Cloudflare processes IP addresses to deliver requests and to limit how many a device can make per minute; those counters are short-lived and the developer doesn’t store them.
• The key and the token for sending back stay on your devices: in NoteRun’s keychain on your iPhone or iPad, and in the extension’s storage in your browser. A notebook received with AirCode also records, inside the file, when it arrived and which Colab notebook it came from, so it can be sent back.
• To read the QR code inside NoteRun, the app asks for the camera. The camera is used on your device only to read the code; no image is saved or sent. You can paste the link instead.

Stored on your device

To work as expected, NoteRun keeps a little information in its own storage on your device:

• a recovery copy of edits not yet saved to your file, deleted once they are saved;
• the list of recently opened notebooks (at most 10: name, location and when it was opened) and the folders you gave access to;
• your settings, such as the code text size, and which notices you’ve already seen;
• for the rating request, the last two days you used the app and when a rating was last requested;
• for the NoteRun Intelligence notice, whether you closed it or tapped “Join the waitlist”, and the day and number of times its hint was shown (at most five). Joining opens the form on noterun.fatihkacar.com in Safari; NoteRun itself sends nothing;
• launch timings, only if you turn on launch measurements (a developer option, off by default);
• for notebooks received with AirCode, the key and the token for sending back, in the keychain (useless after the 7-day mailbox closes).

Copies you ask for (“Copy to this device”, “Keep as a copy”) go to NoteRun’s folder in Files. Deleting the app removes its own storage and that folder, including any notebooks saved there. Notebooks you keep elsewhere, such as in iCloud Drive, are not affected.

Diagnostic report

If you need help, Settings › Support can prepare a diagnostic report: app version and language, device model, iOS version, memory, Low Power Mode and thermal state, Python and package versions, and the state of the engine and of saving. It never contains your code, outputs or file names, and paths, email addresses and session tokens are removed. You see the whole report and can leave sections out. It is sent only if you share it yourself.

Rating request

NoteRun may ask iOS to show the standard App Store rating prompt. iOS decides whether to show it, and NoteRun never learns whether or how you rated the app.

Apple

Crash reports reach the developer only through Apple, and only if you chose to share with app developers in iOS Settings › Privacy & Security › Analytics & Improvements. Downloads and ratings are handled by the App Store under Apple’s own privacy policy.

Permissions

NoteRun doesn’t ask for your location, contacts, photos or microphone. It asks for the camera only to read an AirCode QR code, and you can decline. It uses only the files and folders you choose.

Changes

If this policy changes, the new version appears in the app under Settings › Privacy and at noterun.fatihkacar.com/privacy, with a new date.

Contact

NoteRun is developed by Fatih Kacar, an individual developer. For questions about privacy, email info@fatihkacar.com or use the contact page at noterun.fatihkacar.com/contact, which Settings › Support also links to. If you email, your message and address are used only to answer you and are never shared.