Privacy Policy

This Privacy Policy explains how AskNotes (“AskNotes”, “we”, “us”, or “our”) handles information when you use our website, web application, and related services (together, the “Service”).

AskNotes is a study workspace that helps you organise course notes and optionally use AI features (such as quizzes, flashcards, summaries, and explanations) based on those notes.

By using the Service, you acknowledge this Policy. If you do not agree, please do not use the Service. For our contractual terms, see the Terms of Service.

1. Who we are

The Service is operated by the AskNotes project / team (“Controller” for GDPR purposes where applicable). For privacy requests, contact us at the email address published on the Service or otherwise provided by us (the “Privacy Contact”).

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal data in accordance with the GDPR / UK GDPR where they apply.

2. Scope

This Policy applies to:

• Visitors of our marketing website;
• Users of the AskNotes web application;
• Anyone who invites others to a workspace or is invited to one;
• Information processed when you use AI-powered features inside the Service.

It does not apply to third-party websites or services that we link to (for example model providers), which have their own policies.

3. Important note about how AskNotes stores notes today

In the current version of the Service, your notes, subjects, boards, markers, preferences, and related study content are stored primarily in your browser (for example via local storage or similar client-side storage on the device you use).

That means:

• We typically do not receive a full copy of your notes on our servers merely because you type them in the editor;
• Clearing your browser data, using a different device, or losing device access can result in permanent loss of that content unless you have exported or backed it up yourself;
• If you later enable cloud sync or accounts, we will update this Policy before or when those features process your notes on our infrastructure.

4. Information we process

4.1 Information you provide

• Study content you create — notes, subjects, markers, definitions, boards, checklists, uploaded or linked pictures, videos, and sources. Today this usually stays on your device (see Section 3).
• AI prompts and selections — text you send to AI features (including chat messages, selected passages, scoped notes, and study actions such as quiz or flashcard requests).
• Workspace / invite details — information needed to invite or join a shared workspace (for example display names, invite identifiers, or contact details you choose to enter).
• Support communications — messages you send us about bugs, privacy, or billing.
• Account or payment details — if and when you create an account or purchase credit packs through a payment provider, we (or our processor) may process name, email, and payment metadata. Card numbers are typically handled by the payment provider, not stored by us in full.

4.2 Information collected automatically

• Technical data — IP address, browser type, device type, operating system, language, referring URL, and approximate timestamps when you access our website or APIs.
• Usage data — feature interactions relevant to operating the Service (for example that an AI request was made, or approximate credit spend), to the extent implemented.
• Preferences — theme, interface language, and dictation language settings stored in your browser.
• Credits balance — local credit counters used to meter AI usage in the current product version.

4.3 Information we do not intentionally collect

We do not require sensitive special-category data (for example health data) to use AskNotes. Please do not submit sensitive personal data into notes or AI prompts unless necessary for your studies and you accept the risks described in this Policy.

5. How we use information

We use information to:

• Provide, maintain, and improve the Service;
• Run AI features you request (quizzes, flashcards, summaries, explanations, chat, and similar);
• Meter credits and prevent abuse of AI endpoints;
• Enable shared workspaces and invites where available;
• Respond to support and legal requests;
• Secure the Service, debug errors, and monitor reliability;
• Comply with law and enforce our Terms of Service;
• Communicate product updates when you have asked us to, or where permitted by law.

6. AI processing and third-party model providers

When you use AI features, the content you submit for that request (for example selected notes, chat messages, or study-action context) is sent to our servers and then to one or more third-party AI / model providers (currently including routing via OpenRouter or similar infrastructure, and the underlying model providers they call).

Those providers process the submitted content to generate a response. Their processing is governed by their own terms and privacy policies. We configure providers for the Service where possible, but we cannot control how every upstream model provider retains or reviews data.

Do not submit secrets (passwords, API keys, financial credentials) or highly sensitive personal data into AI features.

AI outputs may be inaccurate or incomplete. They are tools for study support, not academic or professional advice. You remain responsible for verifying important information.

7. Legal bases (EEA / UK)

Where GDPR / UK GDPR applies, we rely on:

• Contract — to provide the Service you request;
• Legitimate interests — to secure, improve, and understand the Service, prevent abuse, and communicate important service messages, balanced against your rights;
• Consent — where required (for example certain cookies or optional communications);
• Legal obligation — when we must retain or disclose information to comply with law.

8. Cookies and similar technologies

We may use essential cookies or local storage required for the Service to function (theme, language, credits, session continuity). Analytics or marketing cookies, if introduced, will be described here and, where required, gated behind consent.

9. Sharing of information

We may share information with:

• AI and infrastructure providers that process data on our behalf or as independent controllers when you invoke AI features;
• Hosting, analytics, and security vendors that help us operate the Service;
• Payment processors if you buy credits or subscriptions;
• Other users you invite into a shared workspace, to the extent the feature shares content or membership metadata;
• Professional advisors (legal, accounting) under confidentiality;
• Authorities when required by law or to protect rights, safety, and security;
• A successor entity in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

We do not sell your personal data.

10. International transfers

Our vendors and AI providers may process data in countries outside your own, including the United States. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) or rely on other lawful transfer mechanisms.

11. Retention

• Browser-stored notes and preferences — retained on your device until you delete them or clear site data;
• AI request logs / server logs — retained only as long as needed for security, debugging, abuse prevention, and legal compliance (typically a limited period unless a longer retention is required);
• Support emails — retained as needed to resolve your request and keep a reasonable business record;
• Payment records — retained as required by tax and accounting laws.

12. Security

We take reasonable technical and organisational measures to protect information we process. No method of transmission or storage is 100% secure. Because much study content currently resides in your browser, you should also protect access to your devices and backups.

13. Children

The Service is directed to students and adults who can form a binding contract. If you are under 16 (or the higher age of digital consent in your country), you may only use the Service with consent and supervision of a parent or guardian where required by law. We do not knowingly collect personal data from children below the applicable age without such authority. Contact us to request deletion if you believe we have done so.

14. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, to withdraw consent, and to data portability. You may also lodge a complaint with your local supervisory authority (in the EU/EEA, your lead DPA; in the UK, the ICO).

To exercise rights regarding data we hold on our systems, contact the Privacy Contact. For notes stored only in your browser, you can usually delete them yourself by clearing AskNotes site data or using in-product delete controls.

15. Changes to this Policy

We may update this Policy from time to time. We will change the “Last updated” date and, for material changes, provide additional notice where appropriate (for example via the Service). Continued use after the effective date constitutes acceptance of the updated Policy where permitted by law.

16. Contact

For privacy questions or requests, contact the Privacy Contact listed on the Service. You may also write to us via any support channel we publish for AskNotes.