Legal

Privacy Policy

Last Updated: November 26, 2025

StudyNotes AI, operated by Aleksander Hamre Evensen ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"). We comply with applicable data protection laws, including the GDPR for users in the EU/EEA.

1. Information We Collect

1.1 Information You Provide

  • Study Projects: Notes, documents, and text you create or import
  • OCR Text: Text extracted from scanned documents using on-device Vision technology
  • Account Information: If you sign in with Apple, we receive your Apple ID token (name and email are optional)

1.2 Automatically Collected Information

  • Device Information: iOS version, device model, and app version for technical support
  • Usage Data: Features accessed and interaction patterns to improve the app
  • Crash Reports: Anonymous diagnostic data when the app experiences errors

1.3 Information We Do NOT Collect

  • We do not use cookies, tracking pixels, or third-party analytics
  • We do not collect location data
  • We do not access your contacts, photos (beyond what you explicitly import), or other personal files
  • We do not sell or share your data with advertisers

2. How We Use Your Information

  • Core Functionality: Process your text with AI to generate summaries, quizzes, flashcards, and mindmaps
  • OCR Processing: Extract text from your scanned documents using on-device Apple Vision
  • Cloud Sync: Optionally sync your projects to iCloud (requires your explicit permission)
  • Service Improvement: Analyze usage patterns to improve features and user experience
  • Customer Support: Respond to your inquiries
  • Legal Compliance: Comply with applicable laws

3. AI Processing and Third-Party Services

When you use AI features (summaries, quizzes, flashcards, mindmaps), your text is sent to Supabase Edge Functions, which then forwards it to OpenRouter API, a third-party AI service provider. OpenRouter processes your text to generate the requested content.

What is shared with Supabase and OpenRouter:

  • The text content you choose to analyze
  • Your request type (summary, quiz, flashcard, or mindmap)

What is NOT shared:

  • Your name, email, or Apple ID
  • Your device information
  • Other projects or content in your app

Third-party privacy policies:

• Supabase: https://supabase.com/privacy

• OpenRouter: https://openrouter.ai/privacy

4. Data Storage and Security

4.1 Local Storage

All your projects are stored locally on your device using SwiftData, protected by your device’s encryption and passcode.

4.2 iCloud Sync (Optional)

If you enable iCloud sync, your projects are stored in your private iCloud container. Only you can access this data. We cannot access your iCloud data.

  • iCloud data is encrypted in transit and at rest
  • You can disable iCloud sync at any time

4.3 Security Measures

  • All network communications use HTTPS encryption
  • We follow Apple’s security best practices
  • No passwords are stored (we use Sign in with Apple)

5. Your Privacy Rights

Under applicable data protection laws, including the GDPR for users in the EU/EEA, you have rights such as access, correction, deletion, and restriction of processing. To exercise these rights, delete the app to remove local data, disable iCloud sync, or contact us at dev_monkey@outlook.com.

6. Children's Privacy

Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

7. Subscriptions and Payments

We use Apple's StoreKit for in-app subscriptions. Payment information is processed by Apple, not by us. We never see or store your credit card information.

  • Subscription data is managed by Apple
  • Your subscription status is synced securely with your Apple ID
  • Refunds and billing inquiries are handled by Apple

8. Data Retention

  • Local Data: Stored on your device until you delete the app or manually delete projects
  • iCloud Data: Stored in your iCloud until you delete it or disable iCloud sync
  • AI Requests: Supabase and OpenRouter may temporarily log requests for technical purposes (see their respective privacy policies)

9. International Data Transfers

Supabase and OpenRouter services may process data outside the EU/EEA. By using AI features, you consent to this transfer. Both services implement appropriate safeguards, including standard contractual clauses and other GDPR-compliant measures.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date and posting a notice in the app. Your continued use after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

StudyNotes AI, operated by Aleksander Hamre Evensen
dev_monkey@outlook.com
www.studynotesai.app