Privacy Policy

Last updated: 2025-09-01

acemynotes (“we”, “us”, “our”) provides tools that turn lectures, PDFs, and YouTube videos into study notes, quizzes, and flashcards. This policy explains what we collect, how we use it, and the choices you have. It also discloses how we access, use, store, and share Google user data.

What We Collect

• Account data: email address, display name, profile photo, and a unique ID when you sign in (e.g., via Google). We also store authentication/session metadata.
• Content: text you upload or enter (e.g., notes, files, links) and outputs we generate for you (notes, quizzes, flashcards, covers).
• Usage & device: pages and features you use, approximate region, device/browser info, and basic diagnostics and security logs.

How We Use Information

• Authenticate you, create and manage your account, and keep you signed in.
• Provide core features (content processing/generation, storage, sync).
• Personalize the product and improve performance, reliability, and security.
• Communicate about updates, security, and support.
• Prevent fraud, abuse, and violations of our Terms.

Google User Data

When you choose Sign in with Google, we request only the standard openid, email, and profile scopes. From these scopes we receive your Google account’s unique identifier, email address (and verification status), name, and profile picture.

How we use Google user data

• Create your acemynotes account and authenticate you securely.
• Display your name/photo in the app and personalize your experience.
• Maintain sessions and protect your account from abuse.

Storage & retention of Google user data

• Basic identifiers (ID, email, name, photo URL) are stored in our database (Supabase).
• OAuth tokens are used only to complete sign-in and session management; we do not request access to Gmail, Drive, Calendar, or other Google data.
• We retain account data until you delete your account or after prolonged inactivity (up to 24 months), then delete or anonymize it. Backups may persist for up to 30 additional days.

Sharing of Google user data

• We do not sell Google user data. We share it only with service providers needed to run the service (see “Service Providers & Transfers”) under contracts that restrict use to our instructions.
• We do not use Google user data for advertising.

Content Processing & AI Providers

To generate study materials, your content may be sent to AI inference providers strictly for processing on your behalf (for example: OpenAI, Google AI, Groq, OpenRouter models). Where the provider offers a “no training on API data” policy, we use it or the provider’s default no-training API. We do not allow providers to use your content for their advertising.

Service Providers & Transfers

• Supabase: authentication, database, and file storage.
• Vercel: hosting/build delivery.
• Cloudflare: CDN, security (e.g., Turnstile), and performance.
• AI inference providers: content processing (see above).

Data may be processed in the United States, Canada, or other regions where these providers operate. We rely on appropriate safeguards for cross-border transfers.

Your Choices & Rights

• Access/Update: manage your profile in the app where supported, or contact us.
• Export: you may request an export of your data.
• Delete: use the in-app account deletion (if available) or email [email protected]. Account deletion removes your profile and user-generated content from active systems; backups expire on their normal cycle (up to 30 days).
• Email preferences: you can opt out of non-essential emails.

Security

We use transport encryption (HTTPS/TLS), at-rest encryption via our providers, role-based access, and least-privilege practices. No method is 100% secure; we continually improve our safeguards.

Children

acemynotes is intended for students aged 13+ (or the minimum age in your jurisdiction). If you are under the applicable age, use the service only with a parent/guardian or school approval. If we learn we collected data from someone under the minimum age without proper consent, we will delete it.

Changes

We may update this policy to reflect changes to the service or legal requirements. We will post the new version here and update the “Last updated” date. Material changes will be announced in-product or via email.

Contact

Questions or requests: [email protected]