Privacy Policy

1. Introduction

NoteMagic AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web application (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and authentication credentials
• Profile Information: Optional profile details, preferences, and settings
• User Content: Notes, recordings, audio files, text, web links, and any content you create or upload
• Payment Information: Processed securely through Apple App Store or our payment processor

2.2 Automatically Collected Information

• Device Information: Device type, operating system, app version
• Usage Data: Features used, session duration, interaction patterns
• Log Data: IP address, timestamps, error logs, performance data
• Analytics: Aggregated usage statistics and app performance metrics

2.3 Audio and Recording Data

When you use voice recording features:

• Audio recordings are processed to generate transcriptions and summaries
• Recordings are stored securely in your account
• You can delete recordings at any time

3. How We Use Your Information

We use your information to:

3.1 Provide and Improve the Service

• Create and manage your account
• Process and store your notes and recordings
• Generate AI-powered summaries, flashcards, and study materials
• Sync data across your devices
• Provide translation and rewriting services
• Improve AI accuracy and service quality

3.2 Communication

• Send important service updates and notifications
• Respond to your inquiries and support requests
• Send promotional communications (with your consent)

3.3 Security and Compliance

• Detect and prevent fraud or abuse
• Enforce our Terms of Service
• Comply with legal obligations

4. AI Processing and Third-Party Services

4.1 AI Services

We use third-party AI services to process your content:

• Content is sent to AI providers for transcription, summarization, and analysis
• AI providers process data according to their privacy policies
• We do not use your content to train third-party AI models without your consent

4.2 Service Providers

We work with trusted service providers:

• Cloud Hosting: For secure data storage and backup
• Analytics: To understand usage patterns and improve the Service
• Payment Processing: Apple App Store and secure payment processors
• Email Services: For transactional and support communications

5. Data Storage and Security

5.1 Security Measures

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication and access controls
• Regular security audits and updates
• Data backup and disaster recovery procedures

5.2 Data Retention

We retain your data while your account is active and for a reasonable period after account deletion to comply with legal obligations and resolve disputes.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information:

6.1 With Your Consent

When you explicitly authorize us to share information.

6.2 Service Providers

With trusted third-party service providers who assist in operating our Service, subject to confidentiality agreements.

6.3 Legal Requirements

When required by law or to:

• Comply with legal processes
• Protect our rights and property
• Prevent fraud or security issues
• Protect user safety

6.4 Business Transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

7. Your Privacy Rights

7.1 Access and Control

You have the right to:

• Access your personal information
• Update or correct your information
• Delete your account and data
• Export your data
• Opt out of promotional communications

7.2 Data Portability

You can export your notes and data through the app settings at any time.

7.3 Account Deletion

You can delete your account through app settings or by contacting us. Upon deletion:

• Your personal information and content will be permanently deleted
• Some information may be retained for legal or operational purposes
• Backups may take up to 90 days to be fully removed

8. AI Services, Usage Monitoring, and Service Optimization

8.1 Information We Collect About AI Feature Usage

To ensure service quality, prevent abuse, optimize performance, and maintain cost sustainability, we collect and analyze usage data related to AI-powered features including Magic Chat, Magic Notes, flashcards, quizzes, podcasts, and other intelligent processing capabilities.

Usage metrics we collect include:

• Feature Usage Frequency: Number of times you use each AI feature (e.g., chats initiated, notes generated, flashcards created)
• Resource Consumption: Approximate AI processing resources consumed (e.g., token counts, processing time, conversation length)
• Performance Metrics: Response times, error rates, success/failure rates, processing duration
• Interaction Patterns: Timestamps of feature usage, frequency of use over time, feature adoption patterns
• Technical Metrics: Device type, app version, operating system, network conditions during AI requests
• Content Metadata: Content type processed (audio, text, PDF, image), content size, language detected (but not the actual content itself unless explicitly stated otherwise)

We do NOT collect or store:

• The full content of your private notes, documents, or conversations for usage analysis
• Personal conversations or chat transcripts for training third-party AI models (unless you explicitly opt-in)
• Identifiable information about specific topics you discuss or learn about

8.2 How We Use AI Usage Data

We use AI usage monitoring data for legitimate business purposes, including:

Service Quality and Abuse Prevention:

• Detecting and preventing service abuse, fraud, or violations of our Fair Use Policy
• Identifying automated or scripted usage patterns inconsistent with personal use
• Ensuring fair access to AI features for all users
• Protecting our systems and infrastructure from malicious activity

Service Optimization and Improvement:

• Optimizing AI feature performance, speed, and reliability
• Identifying and fixing technical issues, bugs, or errors
• Improving AI model selection and configuration
• Enhancing user experience based on usage patterns

Business Planning and Operations:

• Planning infrastructure and capacity requirements
• Forecasting operational costs from third-party AI providers
• Making informed decisions about pricing, subscription tiers, and feature availability
• Understanding feature adoption and engagement

8.3 Usage Monitoring Methods

Automated Monitoring: Usage monitoring is primarily automated through our systems and does not involve routine human review of your content. Automated systems track metrics like request counts, token consumption, and error rates without accessing the substance of your notes or conversations.

Manual Review: In limited circumstances, our team may manually review usage patterns when investigating suspected abuse or violations, responding to customer support inquiries, debugging technical issues, or conducting security investigations. Even during manual review, we access only the minimum information necessary and follow strict internal privacy protocols.

8.4 Third-Party AI Providers

Our AI features rely on third-party AI service providers (such as OpenAI, Anthropic, Google, ElevenLabs, and others). When you use AI features:

• We send your content (text, audio, images, etc.) to third-party AI providers to process your requests and return results
• We may share technical metadata necessary for processing (e.g., language preference, format settings)
• We do not share personally identifiable information beyond what's necessary for service delivery
• Third-party AI providers process your content according to their own privacy policies and terms
• We do not authorize third parties to use your content to train their general AI models

8.5 Privacy Protections for Usage Data

We implement privacy protections when collecting and using usage data:

• Aggregation and Anonymization: Usage metrics are often aggregated across multiple users for analysis
• Data Minimization: We collect only usage metrics necessary for the purposes described
• Access Controls: Usage data is accessible only to authorized personnel who need it for legitimate purposes
• No Marketing Use: We do not sell or share individual usage patterns with third parties for marketing purposes

8.6 Data Retention for Usage Metrics

• Usage Metrics: Retained for operational purposes including billing verification, fraud detection, and service optimization (typically 12-24 months)
• AI Conversation Content: Retained according to your account settings and preferences; you can delete content at any time
• Account Deletion: When you delete your account, we delete your notes, conversations, and personal data; usage metrics may be retained in aggregated, anonymized form

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will promptly delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in compliance with this Privacy Policy and applicable laws.

11. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze usage patterns
• Improve service performance

You can control cookies through your browser settings, but disabling cookies may affect Service functionality.

12. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

Note: We do not sell your personal information.

13. GDPR Compliance (European Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our legal basis for processing your data includes consent, contract performance, and legitimate interests.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Email: [email protected]

Support: [email protected]