Privacy Policy
Effective 23 July 2026 · updated 18 October 2026
Baton is a voice-note app made by mSales Norway AS. This policy describes what we collect and why. The short version: your notes are yours, we sell nothing, and we collect only what the product needs to work.
What we collect
- Voice recordings are captured on your device when you record a note. Audio is sent to our server for processing and is not stored there after transcription. The audio file remains on your device.
- Transcripts and structured notes (summary, customer, action, deadline, category) are stored on your device and backed up to our servers (hosted by Supabase in the EU, Stockholm region) so your notes are not lost.
- Account data: if you create an account, your email address (or Apple private relay address) and sign-in metadata are stored by our auth provider (Supabase, EU).
- Integrations you connect: if you connect Slack, the webhook and access token Slack issues are stored server-side and used only to deliver your notes and resolve name mentions. If you set an email destination, that address is used only to send your notes.
- Waitlist emails submitted on this site are stored to contact you about Baton.
- Feature usage: the app records which features are used and when (event names, timings and error reports only — never the content of your notes) so we can improve the product. This is first-party data on our own servers; no third-party analytics or advertising SDKs are used.
Processing
To turn speech into structured notes, audio is transcribed by OpenAI (gpt-4o-transcribe) and transcripts are structured by Anthropic (Claude). These providers process the data to provide the service; they do not use it for advertising. Confirmation and note emails are delivered via Resend.
What we do not do
- No advertising, no trackers, no analytics SDKs in the app.
- No sale or sharing of your data with third parties beyond the processors listed above.
This website (notebaton.com)
The website, not the app, uses Google Analytics 4 to see how it is used, such as which pages are read and where visitors come from. Google cookies are only set if you click "Accept" in the cookie banner.
If you click "Decline", or make no choice, no cookies are set. Google still receives basic, anonymous signals without cookies or identifiers (Google Consent Mode), used to estimate overall traffic. Google Analytics does not store IP addresses. Google Ireland Ltd. is our processor; data may be transferred to the US under the EU-US Data Privacy Framework, and analytics data is kept for 14 months.
_gaand_ga_*(Google Analytics, 2 years). Only with consent.msale_consent_v1(stored in your browser). Remembers your choice so we don't ask on every page.
You can change your choice at any time with "Cookie settings" at the bottom of the page. The legal basis for the waitlist is that you asked to hear from us; for analytics it is your consent (GDPR art. 6(1)(a), (b) and (f)). You can ask for access, correction or deletion, and complain to the Norwegian Data Protection Authority, Datatilsynet.
Retention and deletion
Notes are kept until you delete them; deleting a note in the app also removes its server backup. You can permanently delete your account and all associated server data at any time in the app: Options → Account → Delete account. Deleting your account does not cancel an active subscription — manage subscriptions in your device's Settings → Apple ID → Subscriptions. You can also request deletion by contacting us at the address below.
Contact
mSales Norway AS (org. no. 919 627 433) is the controller · hello@notebaton.com · kjetil@msale.com