Privacy Policy

1. Introduction

NOTA ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share information about you when you use our educational mobile application ("the Service").

2. Information We Collect

We collect the following types of information to provide and improve our Service:

2.1. Account Information

When you sign in using "Sign in with Apple," we may collect your name and email address, provided you authorize Apple to share this information with us. This is used solely for account management and authentication.

2.2. User Content

To provide our core educational features, we process the content you upload or create, including:

• Audio Recordings: Voice notes, lecture recordings, and any spoken content you record.
• PDF Documents: Files in PDF format that you import for analysis.
• Text Inputs: Text you type, paste, or input directly into the app.
• Messages and Chat Content: Content of conversations, questions, and exchanges with the AI assistant.
• External Links: URLs to websites you wish to analyze (the extracted text from those pages).

2.3. Device and Usage Data

We may access certain device information required for the app's functionality, such as local storage identifiers for synchronization.

3. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To create notes, flashcards, and quizzes from your inputs.
• Synchronization: To sync your data across your devices via Apple iCloud.
• AI Processing: We use OpenAI's API to transcribe audio, analyze documents, process your messages, and generate AI-powered responses (notes, summaries, flashcards, quizzes, and answers to your questions).

4. Third-Party Data Processing

We utilize trusted third-party services to operate key features of the Service. Before any of your personal content is transmitted to a third-party AI service, the app will clearly inform you and request your explicit consent.

4.1. OpenAI (Artificial Intelligence)

We use the API provided by OpenAI, L.L.C. (headquartered in San Francisco, CA, USA) to power all AI features in the app. OpenAI's API generates the responses you receive when using transcription, analysis, and conversational features.

4.1.1. What Data Is Sent to OpenAI

When you use AI-powered features, the following data is transmitted to OpenAI's servers via their API:

• Voice Recordings / Audio Files: Recorded voice notes, lectures, and other audio content are sent to OpenAI's Whisper model for speech-to-text transcription.
• PDF Documents: The extracted text content of PDF files you import is sent to OpenAI's GPT models for analysis and generation of notes, summaries, flashcards, and quizzes.
• Text Inputs: Any text you type or paste for analysis is sent to OpenAI's GPT models to generate responses.
• Messages and Conversations: The content of your messages, questions, and chat exchanges with the AI assistant is sent to OpenAI so it can generate appropriate responses.
• Website Content: When you provide a URL for analysis, the extracted text from that webpage is sent to OpenAI's GPT models.

We do not send your account information (name, email), device identifiers, or any other personal metadata to OpenAI. Only the content you explicitly choose to process—recordings, documents, messages, or text—is transmitted.

4.1.2. Who Receives the Data

Your content is sent exclusively to OpenAI, L.L.C. via their secured API. OpenAI acts as a data processor on our behalf. You can review OpenAI's privacy practices at openai.com/enterprise-privacy.

4.1.3. How OpenAI Uses the Data

• OpenAI processes your content solely to generate and return the AI response (transcriptions, notes, flashcards, quizzes, summaries, and answers to your messages).
• OpenAI does not use data submitted via their API to train or improve their models, in accordance with their API data usage policies.
• Data sent to OpenAI's API is retained by OpenAI for up to 30 days for abuse and misuse monitoring purposes, after which it is deleted. OpenAI does not use this data for any other purpose.

4.1.4. Your Consent

Before the app sends any of your content to OpenAI for the first time, you will be presented with a clear consent prompt explaining what data will be shared and with whom. You must accept this prompt to use AI-powered features. You may withdraw your consent at any time from the app's settings, which will disable AI processing features.

4.1.5. Data Protection

• All data transmitted to OpenAI is encrypted in transit using TLS (Transport Layer Security).
• We use OpenAI's API tier that ensures zero data retention for model training purposes.
• OpenAI provides the same or equivalent level of data protection as described in this Privacy Policy.

4.2. RevenueCat (Subscription Management)

We use RevenueCat to manage in-app purchases and subscriptions. RevenueCat helps us track your subscription status and provide access to premium features. RevenueCat may receive anonymized purchase and subscription data necessary for this purpose.

4.3. Apple iCloud (CloudKit)

All your application data, including sessions, notes, and collections, is stored in your private iCloud database. We do not have direct access to your private iCloud data; it is synchronized directly between your devices and Apple's servers.

5. App Permissions and Consent

To function correctly, the Service requires the following permissions:

• Microphone: Required to record audio for analysis.
• Notifications: Used to notify you when background analysis is complete.
• AI Data Processing Consent: Before any of your content is sent to OpenAI for processing, the app will display a consent prompt. You must explicitly agree before any data is transmitted. This consent can be revoked at any time in the app's settings.

5a. Your Rights

You have the following rights regarding your data and its processing by third-party AI services:

• Right to be Informed: The app will clearly inform you before any data is sent to a third-party service.
• Right to Consent: No data will be sent to OpenAI without your explicit, informed consent.
• Right to Withdraw Consent: You may disable AI processing at any time from the app settings, which will prevent any further data transmission to OpenAI.
• Right to Deletion: You can delete your account and all associated data from the app settings.

6. Data Retention and Deletion

6.1. Storage

Your data is stored locally on your device and in your private iCloud container.

6.2. Account Deletion

You have the right to delete your account at any time. This can be done within the application settings by selecting "Delete Account." This action will remove your account credentials from our system and clear local data. Note that data stored in your personal iCloud can be managed directly through your Apple ID settings.

7. Children's Privacy

Our Service is not directed to children under the age of 13 (or other age as required by local law). We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us via the support option in the application settings.