Staff aka Mods and admins can see/create notes but user cannot see them. You can restrict moderators from deleting notes too.