Harbor Effective July 15, 2026

Privacy Policy

Harbor is a personal notes app made by Cloudmanic Labs, LLC, a small company in Oregon, USA. Your notes are some of the most personal data you have, so this policy is written to be read — plain English, no walls of legalese. If anything is unclear, email us at help@harbor.my and a real person will answer.

The short version

The whole policy in five bullets.

  • Your notes are yours. We never sell your data, never share it with advertisers, never show you ads, and never use your content to train AI.
  • We collect the minimum needed to run Harbor: your account details, the content you choose to store, payment records (handled by our payment processors — we never see your full card number), and a small amount of usage and log data.
  • Optional zero-knowledge encryption lets you lock down notes so that even we cannot read them.
  • You can export everything and delete your account at any time, whether you’re a paying subscriber or not.
  • No ad trackers anywhere — not in the apps, not on this website.

Who we are

A small, independent US company. One product, one way we make money: subscriptions.

Harbor is operated by Cloudmanic Labs, LLC, a limited liability company based in Oregon, United States. Harbor’s servers are located in the United States. We make money one way: subscriptions. We are not in the data business.

For anything privacy-related, contact us at help@harbor.my.

What we collect

Account info, the content you store, payment records, and a little usage data. That’s it.

Account information. Your name (if you provide one), email address, and sign-in credentials. Passwords are stored only as secure hashes — we cannot see them. If you sign in with Apple, Google, or a passkey, we receive only what’s needed to identify your account. Two-factor settings, session and device records (so you can see and revoke where you’re signed in) are stored with your account.

Your content. The notes, notebooks, tags, tasks, reminders, attachments, audio recordings, web clips, and templates you store in Harbor — this is the service. Emails you send to your private @m.harbor.my address become notes in your account and are treated the same as any other content.

Payment information. Payments are handled by our payment processors — Stripe, Apple (App Store), or Google (Google Play), depending on how you subscribe. Your full card number goes directly to the processor; we never see or store it. We keep records of your subscription status, invoices, and transactions so we can run billing and support.

Usage data. We record product usage events — things like “a note was created” or “a clip was saved” — tied to your account, so we can understand which features matter and improve Harbor. These events describe actions, never the content of your notes. We also keep minimal server logs (IP addresses, timestamps, request metadata) for security, debugging, and abuse prevention such as rate limiting.

This website. The harbor.my marketing site uses Plausible Analytics, a privacy-friendly analytics tool that uses no cookies and collects no personal data. There are no ad trackers on this site or anywhere else in Harbor.

How we use your data

To run Harbor for you. Nothing else.

We use your data to:

  • Store, sync, back up, and display your content across your devices.
  • Make your content searchable (see the next section on OCR and transcription).
  • Process payments, send receipts, and manage your subscription.
  • Send you transactional email — verification, password resets, billing notices, reminders you set, and warnings before anything is deleted.
  • Keep the service secure: detect abuse, enforce rate limits, investigate problems.
  • Improve Harbor, using the action-level usage data described above.
  • Answer you when you write to us.

Things we never do with your data:

  • Sell it or rent it. To anyone. Ever.
  • Share it with advertisers or data brokers.
  • Show you ads.
  • Use your notes or attachments to train AI models — ours or anyone else’s.

Processing that makes your content searchable

We run OCR and transcription on your files so search works. Encrypted content is excluded.

Part of what you pay Harbor for is finding things. To deliver that:

  • OCR: attachments like photos, images, and scanned PDFs are processed server-side to extract text, so search can find words inside your files. Some OCR runs on our own infrastructure; some may be processed by trusted cloud OCR services (such as AWS Textract or Google Cloud Vision) acting on our instructions.
  • Audio transcription: audio recordings you save are transcribed into searchable text by our transcription provider (AssemblyAI). If you request an AI summary of a recording, that summary is generated through the same provider, only when you ask for it.

This processing exists solely to power features in your account. Content you encrypt with Harbor’s optional zero-knowledge encryption is never OCR’d, transcribed, or indexed — we can’t read it, so we can’t process it.

Encryption

Everything is encrypted in transit and at rest. Optionally, you can encrypt notes so even we can’t read them.

All traffic between your devices and Harbor is encrypted in transit with TLS, and your data is encrypted at rest on our storage infrastructure.

On top of that, Harbor offers optional zero-knowledge encryption for the notes you choose. When you turn it on, your content is encrypted on your device (Argon2id-derived key, AES-256-GCM) before it ever reaches us. We never hold your keys or passphrase. That means:

  • We cannot read, recover, OCR, index, or search your encrypted content — and neither can anyone who compromises our servers.
  • Encrypted content is excluded from search, OCR, and the API/CLI/MCP.
  • If you lose your passphrase, we cannot restore that content. Nobody can. That’s the point — but it’s your responsibility.

Who else touches your data (subprocessors)

A short list of providers we use to run the service — each gets only what it needs.

Like every small SaaS, we rely on a few service providers to operate. Each one receives only the data needed to do its job, under its own contractual and security obligations:

  • Payment processing: Stripe, Apple, and Google (depending on how you pay).
  • Hosting: our cloud hosting providers, including DigitalOcean, with servers in the United States.
  • File storage: attachments are stored in S3-compatible cloud object storage.
  • Email delivery: transactional email is sent through Amazon SES.
  • OCR and transcription: as described above (AssemblyAI for audio; cloud OCR services for some documents).
  • Product analytics: action-level usage events are processed by PostHog. These events never contain note content.

We do not have “data partners.” No one on this list may use your data for their own purposes.

Your own AI tools

If you connect an AI to Harbor, that’s your choice and your keys — we don’t sit in the middle.

Harbor has no built-in AI. You can connect your own AI tools to your account via our API, CLI, or MCP server using access tokens you create. When you do, your AI provider receives whatever your tools request from your account — that access is initiated and controlled by you, governed by your agreement with that provider, and revocable by you at any time (delete the token). Encrypted content is never reachable this way.

If you publish a note, it’s public. Unpublish it anytime.

You can publish a note as a read-only public page. Anyone with the link can view it — no account required — so don’t publish anything you want to keep private. You can unpublish a note at any time, which disables the link.

How long we keep data, and how deletion works

Deleted means deleted. Lapsed accounts keep their data. Only long-abandoned free accounts get cleaned up — after plenty of warning.

  • Trash: deleted notes go to your trash first, where you can restore or permanently expunge them.
  • Account deletion: you can delete your account yourself, from settings, at any time. There’s a 30-day grace window in which you can change your mind; after that, everything — notes, attachments, account records — is permanently erased from our systems. Residual copies in encrypted backups age out shortly after.
  • If your subscription lapses: your account becomes read-only, but your data stays put. You can still export everything and delete your account. We never hold data hostage to a payment.
  • Inactive free accounts: a free account that goes completely unused for about six months may be deleted — but only after a series of email reminders and warnings over several months, so nothing disappears by surprise. Paid accounts are never subject to this.
  • Logs and billing records: operational logs are kept briefly; billing and tax records are kept as long as the law requires.

Your rights: export, access, correction, deletion

Take your data with you anytime. Full stop.

At any time, subscriber or not, you can:

  • Export everything — as ENEX, HTML, or ZIP, including a full account export — right from the app.
  • Access and correct your account information in settings.
  • Delete your account and all of its data, as described above.

If you’re in a region with formal privacy rights (such as the GDPR or CCPA), these tools cover the core of them — access, portability, correction, and erasure. For anything they don’t cover, email help@harbor.my and we’ll handle it directly. Because we are a US company with US servers, using Harbor means your data is transferred to and processed in the United States.

Children

Harbor is not for kids under 13.

Harbor is not directed at children under 13, and we don’t knowingly collect data from them. If you believe a child under 13 has an account, contact us and we’ll delete it.

Changes to this policy

If something meaningful changes, we’ll tell you — not bury it.

We may update this policy as Harbor evolves. The date at the top always shows the latest revision. If we make a material change — anything that affects what we collect or how we use it — we’ll notify you by email or in the app before it takes effect. We will never quietly change this policy to start selling data; that’s not a loophole we’re leaving open.

Contact

Questions, concerns, requests — email help@harbor.my. A real person at Cloudmanic Labs, LLC reads every message.