Privacy Policy

Introduction

Welcome to Notesmakr. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application and related services.

Notesmakr is a study app that helps learners understand and retain knowledge using the Feynman Technique. Our app allows you to collect material from various resources and transform them into simplified explanations.

Information We Collect

1. Audio Recordings

Purpose: Notesmakr uses your device's microphone to record audio for transcription and note-taking purposes.

• What we collect: Audio recordings you create within the app
• How we use it:
  • To transcribe audio into text using Google's Gemini AI API
  • To generate study materials (flashcards, quizzes, mind maps) from your recordings
  • To enable you to create notes using the Feynman Technique
• Storage: Audio files are uploaded to secure cloud storage (Supabase) and processed server-side
• Retention: Audio recordings are retained until you delete them from your account
• Your control: You can delete your recordings at any time through the app

2. Account Information

• Email address (for authentication and account management)
• Display name
• Profile picture

3. Photos and Media

Purpose: Notesmakr accesses your device's camera and photo library to enhance your note-taking experience.

• Camera Access: Scan documents, take photos of textbooks, whiteboards, or other study materials to include in your notes
• Photo Library Access: Select existing images from your device to add to your notes
• Media Library Access: Select audio files from your device to transcribe and process
• Storage: Photos and media you add are uploaded to secure cloud storage (Supabase)
• Your control: You can revoke camera/photo library permissions at any time through device settings. You can delete images and media from your notes within the app

4. Content You Create

• Notes and study materials you create
• Text content you input or generate
• Flashcards, quizzes, and mind maps
• PDFs and documents you upload
• Images and photos you capture or select

5. Usage Data and Analytics

• App usage patterns and features accessed (collected via PostHog analytics)
• Aggregate app events (app opens, screen views, sign-ups, in-app purchases) collected via Google Firebase Analytics
• Device information (device type, operating system, app version)
• Subscription and payment information (processed by RevenueCat)
• Usage limits tracking (notes created, generations used, audio transcription time)
• Anonymous analytics data to improve app performance and user experience

6. Authentication Data

• Google Sign-InWe receive basic profile information (email, name, profile picture) from Google OAuth

Note: An account is required to use Notesmakr. We do not support anonymous usage.

7. Install Attribution for Our Own User-Acquisition Campaigns

Notesmakr does not show advertisements inside the app. The app contains no ad banners, interstitials, rewarded videos, or any third-party ad inventory. You will never see ads for other products while using Notesmakr.

We do, however, sometimes run our own acquisition campaigns on platforms like Google Ads or the App Store / Play Store to help new learners discover Notesmakr. When someone installs the app after seeing one of our ads, we need to know that so we can decide whether our marketing spend is working. We use privacy-preserving attribution frameworks that do not identify you personally.

• iOS — SKAdNetwork only: On iOS we rely entirely on Apple's privacy-preserving SKAdNetwork framework to attribute installs. SKAdNetwork reports only aggregated, non-identifying conversion data to Google Ads. We do not ask for App Tracking Transparency permission and never access your Advertising Identifier (IDFA).
• Android — Google Advertising ID (AAID): The Google Firebase and Google Ads SDKs read your device's Advertising ID to attribute installs and sign-ups to our ad campaigns. You can reset this ID, or opt out of personalized ads, at any time via Settings → Google → Ads.
• What we measure: whether one of our ads led to an install, whether a new user completed sign-up, created their first AI-backed note, or subscribed to a paid plan.
• What we do not do: we do not display ads inside Notesmakr, we do not build behavioral advertising profiles, we do not sell your data, and we do not share it with any third party other than Google (our advertising and analytics platform) for the narrow purpose of install attribution.

How We Use Your Information

We use your information to:

• Provide core functionality: Transcribe audio, generate study materials, and enable note-taking
• AI Processing: Send your content to Google's Gemini AI for transcription and content generation
• Account management: Authenticate users and manage subscriptions
• Service improvement: Analyze usage patterns to improve app features
• Subscription management: Track usage limits based on your subscription tier
• Customer support: Respond to your inquiries and provide technical assistance

Third-Party Services

We use the following third-party services to provide and improve Notesmakr:

1. Google Gemini AI API

• Purpose: Audio transcription and AI-powered content generation
• Data shared: Audio recordings, text content you want to process
• Privacy Policy: Google Privacy Policy
• Data retention: Google processes data according to their API terms; we do not control Google's retention policies

2. Supabase (Cloud Storage & Database)

• Purpose: Secure storage of your data, authentication, and database services
• Data stored: Account information, audio files, notes, and generated content
• Privacy Policy: Supabase Privacy Policy

3. RevenueCat (Subscription Management)

• Purpose: Manage in-app subscriptions and purchases
• Data shared: User ID, subscription status, purchase information
• Privacy Policy: RevenueCat Privacy Policy

4. PostHog (Product Analytics)

• Purpose: Anonymous product analytics to understand app usage and improve features
• Data collected: App usage patterns, feature interactions, session duration, device type, operating system version, app version
• Data hosting: PostHog EU Cloud (data stored in European Union servers)
• Privacy Policy: PostHog Privacy Policy
• Personal data: PostHog does not collect personally identifiable information. All analytics are anonymized
• No cross-app tracking: PostHog does not track you across different apps or websites

5. Google Firebase Analytics

• Purpose: Measure aggregate app usage and attribute installs and key events (such as sign-ups and subscription purchases) back to our own acquisition campaigns. Notesmakr does not show ads inside the app.
• Data collected: App instance ID, device model, operating system, app version, coarse location (country), aggregated event counts, and — on Android — your device's Advertising ID (AAID). On iOS we do not collect the Advertising Identifier (IDFA).
• Privacy Policy: Firebase Privacy Policy
• Retention: Event data is retained for 14 months by default under Google's retention controls

6. Google Ads (Install Attribution)

• Purpose: Measure whether our own user-acquisition ads (which we run on platforms such as Google Search, YouTube, and the Play Store) resulted in new installs and sign-ups. Notesmakr never shows ads to you within the app.
• Data shared: Aggregated conversion events (install, sign-up, first AI note creation, subscription purchase). On iOS, attribution is delivered via Apple's privacy-preserving SKAdNetwork (aggregated and non-identifying). On Android, the Advertising ID is used to match an ad click to an install.
• Privacy Policy: Google Ads Privacy Policy
• Your control (iOS): Nothing you need to do — we do not track individual iOS devices. Attribution is aggregated by Apple.
• Your control (Android): Reset or delete your Advertising ID, or opt out of personalized ads, via Settings → Google → Ads

7. Google OAuth

• Purpose: Enable sign-in with Google account
• Data received: Email address, name, profile picture (basic profile information only)
• Privacy Policy: Google Privacy Policy
• Your control: You can revoke Google account access at any time through your Google Account settings

8. Apple App Store / Google Play Store

• Purpose: App distribution and payment processing
• Data shared: Purchase information handled by respective platforms
• Privacy Policies:
  • Apple Privacy Policy
  • Google Play Privacy Policy

Data Security

We implement appropriate security measures to protect your data:

• Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
• Authentication: Secure authentication via Supabase Auth
• Access Control: Strict database security policies ensure users can only access their own data
• Secure Storage: Audio files and content stored in protected cloud storage with access controls

Your Rights and Choices

You have the following rights regarding your data:

• Access: View all personal data we have about you
• Deletion: Request deletion of your account and all associated data
• Correction: Update or correct your personal information
• Data Portability: Export your data in a machine-readable format
• Microphone Permission: Revoke microphone access at any time through device settings (iOS Settings → Notesmakr → Microphone)
• Camera Permission: Revoke camera access at any time through device settings (iOS Settings → Notesmakr → Camera)
• Photo Library Permission: Revoke photo library access at any time through device settings (iOS Settings → Notesmakr → Photos)
• Marketing Opt-out: Unsubscribe from marketing communications (if any)
• Advertising ID (Android): Reset your Advertising ID or opt out of personalized ads at any time through Settings → Google → Ads

To exercise these rights, contact us at [email protected]

Data Retention

• Audio Recordings: Retained until you delete them or close your account
• Notes & Content: Retained while your account is active
• Account Information: Retained until you request account deletion
• Usage Analytics: Aggregated data may be retained indefinitely for service improvement
• Email Hash (After Deletion): When you delete your account, we retain a one-way cryptographic hash (SHA-256) of your email address to prevent re-registration with the same email. This hash cannot be reversed to recover your original email address. This is based on our legitimate interest in fraud prevention and maintaining platform integrity.

Upon account deletion, we will delete all your personal data within 30 days, except:

• A hashed version of your email address (to prevent re-registration)
• Data we are legally required to retain for compliance purposes
• Anonymized analytics data that cannot identify you

Important: Account deletion is permanent and irreversible. You will not be able to recover your data or re-register with the same email address.

Children's Privacy

Notesmakr is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information immediately.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using Notesmakr, you consent to the transfer of your data to our servers and third-party service providers.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

• Posting the new privacy policy on this page
• Updating the "Last Updated" date

We encourage you to review this privacy policy periodically for any changes.

Contact Us

If you have questions about this privacy policy or our data practices, contact us at:

• Email: [email protected]
• Support: [email protected]

Data Sharing and Sale

We do not sell your personal data to third parties. Your data is only shared with the service providers listed above who are necessary for app functionality (Supabase, Google Gemini AI, RevenueCat, PostHog, Google Firebase Analytics, Google Ads). These providers are contractually bound to protect your data and use it only for the purposes we specify.

Notesmakr does not show ads inside the app. Data shared with Google (Firebase Analytics and Google Ads) is used strictly to measure how well our own user-acquisition campaigns perform — i.e., whether an ad click led to an install or sign-up. We do not participate in cross-app or cross-site behavioral advertising networks, and we do not share your personal content (notes, audio, images, AI-generated material) for advertising purposes.

AI-Generated Content Disclaimer

Notesmakr uses artificial intelligence (Google Gemini AI) to transcribe audio and generate study materials including flashcards, quizzes, and summaries. While we strive for accuracy, AI-generated content may contain errors or inaccuracies.

Important: You should review and verify all AI-generated content, especially for academic or professional purposes. We recommend cross-referencing generated materials with your original sources.

Subscription and Cancellation Policy

• Subscription Management: Subscriptions are managed through Apple App Store or Google Play Store
• Cancellation: You can cancel your subscription at any time through your device's subscription settings:
  • iOS: Settings → [Your Name] → Subscriptions → Notesmakr
  • Android: Google Play Store → Menu → Subscriptions → Notesmakr
• Access after cancellation: Your premium access continues until the end of your current billing period
• Refunds: Refund policies are determined by Apple App Store and Google Play Store