Noteo Privacy Policy

Effective date: September 23, 2026

Last updated: September 24, 2026

Canonical URL: https://sagiware.com/apps/noteo/privacy-policy

This Privacy Policy explains how Sagiware ("Sagiware," "we," "us," or "our") collects, uses, discloses, and protects information when you use the Noteo mobile application and related services (collectively, "Noteo" or the "Service").

If you do not agree with this Policy, do not use Noteo.

1. Who is responsible for your information

Sagiware is the controller of personal data processed through Noteo, except where a service provider acts as an independent controller under its own terms.

Contact: contact@sagiware.com

2. Information we collect

Account and profile information

Noteo creates an anonymous account identifier so the Service can keep your data private and synchronized without requiring a traditional sign-in. If profile features are used, we may also process a display name, email address, avatar URL, account creation date, and subscription status.

Content you provide

Depending on the features you use, we process:

• notes, folder names, pasted text, questions, and chat messages;
• documents and files you upload, including PDF, DOCX, and text files;
• photos you select or capture;
• lecture or other audio recordings and generated transcripts;
• YouTube URLs and available video captions or audio-derived transcripts;
• generated summaries, chapters, quizzes, flashcards, mind maps, fill-in-the-blank materials, podcasts, and related study content; and
• study-session results, scores, duration, progress, and focus-session settings.

Your content may contain personal or sensitive information depending on what you choose to upload. Do not upload information you are not authorized to use or disclose.

Onboarding and preference information

We process answers you choose to provide during onboarding, such as acquisition source, education level, work status, field of study, learning difficulties and preferences, study feelings, current and target GPA, preferred feature, daily study goal, newsletter preference, and notification preference.

Purchase information

We process product identifiers, subscription or entitlement status, purchase and restore outcomes, and an account identifier used to associate a subscription with your Noteo account. Apple processes the actual payment. We do not receive or store your full payment-card details.

Usage, analytics, attribution, and diagnostics

We may process a Noteo account identifier, app lifecycle events, screens viewed, onboarding progress, feature interactions, source type, upload and generation status, study mode, study-session score, focus duration, notification-permission result, purchase events, error codes, advertising attribution source and campaign, and whether an install was organic. Our application analytics do not intentionally include the text of your notes, uploaded files, recordings, transcripts, or chat questions.

Our providers may also automatically process technical information needed to deliver and secure their services, such as IP address, device and operating-system information, app version, timestamps, request metadata, SDK identifiers, network information, crash or performance information, and security logs.

Device permissions and local data

With your permission, Noteo may access the camera, photo library, microphone, and notifications only when needed for the feature you select. You can change these permissions in iOS Settings.

Noteo also stores preferences and limited app state on your device, such as onboarding state, notification and haptic settings, recent-note references, focus-session state and history, unfinished-study state, and retry information. A session credential is stored securely on the device to keep you signed in.

3. How we use information

We use information to:

• create and maintain your account and session;
• upload, store, organize, synchronize, search, process, and delete your notes and sources;
• transcribe audio and generate notes, summaries, study materials, answers, and podcast audio using artificial intelligence;
• retrieve captions or audio for a YouTube URL you submit;
• provide study progress, focus sessions, reminders, and personalization;
• provide, verify, and restore subscriptions and Premium access;
• measure feature performance, understand acquisition, diagnose failures, prevent fraud and abuse, enforce usage limits, and improve Noteo;
• communicate service, support, privacy, or security information; and
• comply with law, enforce our terms, and protect users, Sagiware, and others.

We do not use the contents of your notes, files, recordings, transcripts, or chats for targeted advertising. We do not sell personal information. We do not share personal information for cross-context behavioral advertising as those terms are defined by applicable U.S. state privacy laws.

4. Artificial intelligence processing

Noteo sends the source content needed for a requested AI feature to the Google Gemini API. This can include documents, photos, pasted text, audio, transcripts, note text, and questions. Google returns generated or transcribed content to Noteo. Noteo also sends limited usage metadata, such as model, token counts, operation type, estimated cost, and timestamps, to our backend for quota, reliability, and cost controls.

For large files, Noteo may temporarily upload a file to the Gemini Files API and requests deletion after processing. Google may retain API inputs and outputs for a limited period for abuse monitoring, security, and legal compliance under the applicable Gemini API terms. Google's treatment of content can differ between paid and unpaid API services; unpaid services may permit product improvement and human review. Avoid submitting sensitive, confidential, or regulated information unless you are comfortable with this processing.

AI output may be inaccurate. Do not rely on it as professional, medical, legal, financial, or other expert advice.

5. How we disclose information

We disclose information only as needed to operate Noteo, comply with law, or protect rights and safety. Current categories of recipients include:

• Appwrite: Cloud hosting, anonymous authentication, databases, private file storage, and server functions. This involves account identifiers, profile and onboarding data, user and generated content, study activity, and technical logs.
• Google Gemini API: AI generation, transcription, document and image understanding, and text-to-speech. This involves content needed for the requested feature and technical usage metadata.
• Google/YouTube: Resolving submitted YouTube URLs and retrieving available captions or audio. This involves the URL or video identifier and request metadata.
• RevenueCat: Subscription management, entitlement verification, purchase restoration, and paywall delivery. This involves Noteo account identifiers, purchase and subscription information, and device and app metadata.
• Apple: App distribution, in-app purchases, payment processing, and device permissions. Apple handles Apple account and payment information; transaction, device, and app metadata may also be involved.
• PostHog: Product analytics when configured. This involves Noteo account identifiers, usage events, event properties, and device, app, and network metadata. Session replay is disabled.
• AppsFlyer: Install and campaign attribution and lifecycle measurement when configured. This involves Noteo account identifiers, attribution source and campaign, events, and device, app, and network metadata.

These providers may process data in countries other than your own. They are required to protect information under their agreements with us and applicable law. Each provider may also process certain information under its own privacy policy.

We may also disclose information:

• to professional advisers and vendors supporting security, legal compliance, or business operations;
• when reasonably necessary to comply with law, legal process, or enforceable government requests;
• to investigate abuse, fraud, security incidents, or threats to rights and safety; or
• in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards and notice where required.

6. Legal bases for processing

Where the GDPR, UK GDPR, or similar law applies, we rely on:

• performance of a contract to provide the Service and requested features;
• legitimate interests to secure, maintain, measure, troubleshoot, and improve Noteo, provided those interests are not overridden by your rights;
• consent where requested, including access to camera, photos, microphone, notifications, and optional marketing communications; and
• legal obligations and protection of legal rights where processing is required by law or necessary to establish, exercise, or defend claims.

You may withdraw consent at any time. Withdrawal does not affect processing already performed lawfully and may prevent a feature from working.

7. Retention and deletion

We keep account data and user content while your account is active and as needed to provide the Service. A deleted note is designed to remove its uploaded sources, generated study materials, chat history, study sessions, related processing records, and generated podcast files from Noteo's active backend. In-progress technical records may remain briefly until processing or cleanup completes.

You can permanently delete your Noteo account in Settings → Delete account and data. This is designed to delete your Noteo profile, onboarding answers, folders, notes, uploaded files, generated materials, chat messages, study history, AI-usage records, processing records, and anonymous Appwrite account from the active Noteo backend.

Limited information may remain:

• in encrypted backups until overwritten under the provider's backup cycle;
• in security, fraud-prevention, transaction, tax, accounting, or legal records where retention is required or reasonably necessary;
• with Apple, RevenueCat, Google, PostHog, AppsFlyer, or another provider under that provider's independent retention duties; and
• in local device preferences until you clear app data or uninstall Noteo.

You may also request deletion or another privacy action by emailing contact@sagiware.com. We may need information sufficient to verify the request. Deleting Noteo does not automatically cancel an Apple subscription; manage subscriptions in your Apple account settings.

8. Your choices and rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal data; restrict or object to processing; withdraw consent; and appeal a denied request. You may also have the right to complain to your local data-protection authority.

You can:

• delete individual notes or your account in the app;
• disable camera, photo, microphone, or notification access in iOS Settings;
• opt out of optional marketing using the unsubscribe method in the message or by contacting us;
• manage or cancel subscriptions through Apple; and
• submit a privacy request to contact@sagiware.com.

We will not discriminate against you for exercising a privacy right. We may deny or limit a request where permitted by law, including when we cannot verify it or must retain information to meet a legal obligation.

9. International transfers

Your information may be processed in the European Economic Area, the United States, and other countries where we or our providers operate. Where required, we use recognized safeguards for international transfers, such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism.

10. Security

We use reasonable technical and organizational safeguards appropriate to the nature of the information. These include authenticated access, owner-based permissions for user documents and files, private cloud storage, server-side AI and subscription credentials, and secure device storage for the session credential. No system is completely secure, and we cannot guarantee absolute security.

11. Children

Noteo is not directed to children. You must be at least 18 years old to use Noteo. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided information through Noteo, contact us at contact@sagiware.com so we can investigate and delete it as appropriate.

12. Third-party content and links

Noteo may process links or content from third-party services, including YouTube. We are not responsible for the privacy practices or content of third-party services. Review their policies before using them.

13. Changes to this Policy

We may update this Policy when Noteo, our providers, or legal requirements change. We will update the date above and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

14. Contact

For privacy questions, requests, or complaints, contact:

Sagiware — Noteo Privacy

contact@sagiware.com

If you are in the EEA or UK, you may also complain to the supervisory authority in the country where you live or work or where you believe an infringement occurred.