Privacy Policy

1. Information We Collect

We collect information to deliver AI-assisted study synthesis, flashcard generation, and collaborative revision tools:

• Account Information: Full name, email address, optional contact number, and authentication tokens through Google Sign-In or Apple ID.
• Study Materials & Content: Uploaded lecture slide images, PDF documents, handwritten notes photos, generated AI summaries, flashcards, customized quiz question sets, and AI tutor conversation logs.
• Academic Usage Data: Daily active streaks, feature utilization counts, quiz accuracy percentages, and study folder organization hierarchies.
• Device & Telemetry: Device hardware model, operating system version, unique app installation identifiers, and crash diagnostic logs captured via Sentry.
• Payment & Subscription Records: Subscription active status, billing cycle start/end dates, and transaction references returned by Apple App Store, Google Play Store, or Razorpay. (We never store raw credit card numbers).

2. How We Use Your Information

• Core Functionality: To perform OCR extraction, semantic analysis, active recall quiz generation, and contextual study summaries.
• Account Integrity: To authenticate access, preserve note revision history, and enforce subscription entitlement limits.
• Continuous Reliability: To monitor system uptime, fix parsing anomalies, and improve OCR accuracy across varying handwriting qualities.
• Customer Assistance: To respond to support inquiries, bug reports, and data deletion requests submitted through our help center.

3. AI Processing & Third-Party LLM Providers

When you generate summaries, practice tests, flashcards, or engage with the RAG Note Chat, the extracted text of your notes (and, for image notes, the image itself) is transmitted to language model inference providers — currently OpenAI, Google (Gemini), OpenRouter, and NVIDIA NIM — solely for instantaneous inference fulfilment. Vector embeddings used for note search are generated by OpenAI.

We do not run a separate content-moderation or personal-data redaction pass before this transmission, so anything you include in a note is sent as-is. Avoid uploading notes containing sensitive personal information that is not required for your studies.

Strict AI Isolation Policy: Under our API agreements, your private study documents and personal notes are never used to train, retrain, or fine-tune AI foundation models.

4. Data Storage, Security & Retention

All user data is stored within Supabase PostgreSQL instances with Row Level Security (RLS) policies enforced. Media uploads are stored in encrypted object storage in AWS Mumbai, India. All transport occurs over HTTPS with TLS 1.3 encryption.

User-generated notes and flashcards remain preserved for as long as your account remains active. If you initiate account deletion, all personal data is permanently purged across database tables and media stores within 30 days.

5. Your Privacy Rights & Erasure Requests (GDPR & DPDP Act 2023)

Depending on your jurisdiction, you possess the right to:

• Access, export, or download all notes and quiz assets associated with your profile.
• Correct inaccurate account profile data.
• Request permanent and irreversible erasure of your profile and study records.
• Withdraw previously granted consent for non-essential telemetry.

To execute an erasure request, submit a ticket via our Support Help Center selecting "Account & Data Deletion Request" or email notesflowai@gmail.com.