Last updated: September 21, 2026
Node ("the app") is a personal organization service operated by Attereon. This policy describes what data the app handles, who handles it with us, and how you stay in control of it.
You sign in to Node with an Attereon account (id.attereon.com), which is where your username, email address, password, passkeys and two-factor settings live, and where subscriptions are billed. Node receives from it only what it needs to recognise you: your account id, username, email address and whether it is verified, your profile photo (if you added one) and your plan. Node never sees your password. The Attereon account's own policy is at attereon.com/privacy.
Node stores the content you create — notes, tasks, reminders, projects, the files and photos you attach, and the settings you choose. This data exists so the app can function: syncing your content across your devices and, when you choose to share an item, with the people you invite.
When you share something, the people you share it with can see the content you shared and your username and photo. Your edits to a shared note are kept as a history so a change can be undone; that history is visible to everyone the note is shared with.
Files and photos you attach to notes are stored on our server and served from an unguessable address. Anyone who has that exact address can open the file — that is how the people you share a note with see its pictures — so the address is only ever given to the app and to them. Deleting an attachment deletes the file.
Node sends email through Resend (resend.com), a delivery service: invitations you send, and, unless you switch them off, two short emails in your first week and — only if you turn it on — a weekly digest of what is due. Every such email has a one-click link to stop them, and Settings → Notifications has the same switches. Resend sees the recipient address and the message; it does not keep your content beyond delivering it.
If you turn on email capture, Node gives you a private address you can forward messages to. Mail sent to it is received by Resend and handed to Node, which files it as a note or task and keeps nothing else about the email. Regenerating or disabling the address retires it immediately.
If you connect Google Calendar, Node accesses your calendars and events only to display them alongside your schedule and to create, update, or sync events you manage in the app. Google tokens are stored encrypted server-side and are never shared with third parties. You can disconnect at any time from Settings, which removes the stored tokens.
Node has no AI of its own and sends nothing to any AI company. Ask your AI hands text to an AI app you already use, on your device, in a step you take yourself. Attereon Connect lets an AI app you connect read and add to the projects you choose — it starts with access to nothing, you can see everything it did, every change it makes can be undone, and you can disconnect it at any time. What that AI app does with what it reads is governed by its own policy.
If you enable notifications, a device push token is stored so due-date alerts you configure can be delivered — through your browser's push service or, in the iPhone app, Apple's notification service. Disabling notifications removes the token.
Our public pages (the front page and these legal pages) collect anonymous, aggregate visit statistics using our own self-hosted system — no cookies, no third parties, and nothing that can identify you or follow you across days or sites. Inside the app, once you are signed in, we collect nothing about your visit: no page views, no sessions, no timings, no device details.
To know whether Node is working for the people who try it, we count how many accounts reach a handful of milestones — creating a first item, finishing an import, sharing something for the first time, turning on notifications, upgrading — as a total per day. It is a tally, not a record of what you did or when, and it is never tied back to you or shared.
Node does not sell your data, does not show ads, does not use third-party analytics or tracking, and does not collect your location. Your content is not used for advertising, profiling, or training anything, ours or anyone else's.
Your content is retained while your account is active. Deleting an item moves it to Recently Deleted for 30 days, then removes it from the server (collaborative items may remain visible to their owner). You can delete your Node data yourself at any time via Delete Account in Settings → Account — deletion is immediate and permanent. Encrypted backups are kept for a limited period so a fault on our side cannot lose everyone's work; deleted data leaves them as they age out. If you prefer, you can also contact us at the address below and we will remove it promptly.
All traffic is encrypted in transit (TLS). Sign-in uses signed tokens that Node verifies against your Attereon account, and access to your content requires them. Backups are encrypted before they leave the server. More on how Node is protected is on the security page.
Questions or data requests: [email protected]