How to delete your NotiBox app account and the data related to it, what we delete and when, and what we still have to keep — and for how long.
ai.notibox.app) and the Kokpit panel of the NotiBox device.If you have an account on a box (your own or someone else’s, e.g. as a family member), you can delete it yourself:
Deletion cannot be undone. The box cuts off access to the account as soon as you confirm — all your devices are signed out. The data itself is deleted by the box in the background, usually within a few minutes; if something gets in the way (e.g. the box restarts), it keeps retrying for about an hour and a half. The following are removed from the box: your assistant and its memory, conversations, notes and notebook (Folio), PIN, passkeys, paired phones, notifications and files you uploaded.
Backups the box makes on its own are not rewritten — they expire on their own schedule (see the table below). If you are not sure the deletion has finished, write to rodo@notilabs.ai.
External accounts you connected yourself (e.g. Google, Telegram) are separate services — you can also revoke NotiBox’s access to your Google account at myaccount.google.com/permissions, and data in Telegram is deleted under Telegram’s rules (see sections 15 and 16 of the Privacy Policy).
Fill in the form below or write to rodo@notilabs.ai. Use a request when:
We handle requests without undue delay and within 30 days at the latest of receipt (never longer than one month — Art. 12(3) GDPR). Before deleting anything we verify your identity — we reply to the address given in the request, and for box data we may ask for the serial number from the device sticker.
We cannot see the contents of a box and do not access it without the owner’s consent. If you are a household member without access to the app, we will ask the box owner to delete your account or to consent to us doing it via remote support.
All data stored on the device is deleted by a factory reset: box panel → Administracja (Administration) → 08 · Strefa niebezpieczna (Danger zone) → “Reset do ustawień fabrycznych” (Factory reset). You confirm it by typing RESET and the administrator PIN (from the box sticker).
The reset removes all users, their assistants, notebooks, keys and settings — the device returns to its out-of-the-box state. It cannot be undone. A reset does not end a Managed Plan contract and does not delete data held by Notilabs — ask for that in a request.
| Where | What data | What happens to it |
|---|---|---|
| Your box (device) | Household member account: assistant and its memory, conversations, notes and notebook (Folio), PIN, passkeys, paired phones, notifications, uploaded files | “Delete my account”: access cut off immediately, data deleted in the background — usually within a few minutes, up to about 1.5 hours with retries. The whole box — by a factory reset. |
| Your box — backups | Daily backup of the notes and notebooks (Folio) of all accounts; a copy of the assistants’ state and data made before a box software update | Stay on the box (Notilabs does not download them) and are not rewritten when an account is deleted — they expire on their own: Folio backups after 7 days, pre-update copies with later updates (the box keeps the last three). |
| Notilabs AI gateway (Managed Plan) | The content of your messages to the assistant | Not stored — it only passes through the gateway in transit to the AI model provider. |
| Notilabs AI gateway (Managed Plan) | Billing metadata: model name, token counts, cost, box and key identifier, request time — no content | Kept for billing for the duration of the contract and, after it ends, until claims become time-barred (usually 3 years) and for as long as the law requires, e.g. accounting and tax rules (usually 5 years). |
| Notilabs servers | Technical data about the box: telemetry and diagnostics, security alerts, remote support logs (Tailscale) | Kept for 12 months, then deleted. |
| AI model providers (Anthropic, OpenAI, Google, xAI) | Request content passed on under the Managed Plan | Processed on our behalf, not used to train models, and kept at most for a limited period set out in their terms (e.g. for abuse monitoring). In BYOK mode you connect to the provider directly — your settings and that provider’s terms apply. |
| Notilabs — sales and contracts | Order and contract data (e.g. Managed Plan), invoices, correspondence | Invoices and accounting records are kept for as long as the law requires (usually 5 years); data needed to defend claims — until they become time-barred (usually 3 years). The rest (e.g. a newsletter or waitlist sign-up) is deleted on request. |
| Notilabs — this request | E-mail, request content, number, how it was handled | Kept as proof that the request was handled — until claims become time-barred (usually 3 years). |
Retention periods follow section 7 of the Privacy Policy, and the list of providers — sections 9 and 14.