PRIVACY NOTICE

Thank you for using NoterAI ("Company", "we", "us", "our"). NoterAI has been developed by the Noter AI Team. We are the data controller for the personal information described in this notice. If you have any questions or concerns about this privacy notice or how we handle your personal information, please contact us at support@noterai.net.

This notice explains what information we collect when you use the Noter AI mobile apps for iPhone, iPad and Android (the "App"), our website at noterai.net (the "Website"), and any related services (together, the "Services"). It explains how we use that information, who we share it with, how long we keep it, and what rights you have. If you do not agree with this notice, please do not use the Services.

This privacy notice applies to all information collected through our Services, as well as any related support, sales, marketing or events.

Please read this privacy notice carefully as it will help you understand what we do with the information that we collect.

1. WHAT INFORMATION DO WE COLLECT?

We collect the information we need to run the Services. This includes:

• Account Information: If you create an account, your email address, your name (if you or your sign-in provider share it), your Apple or Google account identifier when you use Sign in with Apple or Google Sign-In, and your password in hashed form if you sign up with email. If you use the App as a guest, we create an anonymous account identifier.
• Audio Data: Recordings you make in the App, audio files you import or share into the App, and audio recorded by our meeting bot when you send it to an online meeting.
• Content We Create for You: Transcripts, speaker labels and names, summaries, key points, translations, restyled notes, titles, folders, and your AI chat conversations about your notes.
• Meeting and Calendar Information: If you use the meeting bot, the meeting link, meeting title and platform. If you connect a Google or Outlook calendar, read-only access to your calendar events, including event titles, times, meeting links, descriptions, and organizer and attendee email addresses.
• Purchase Information: Your subscription status, product, trial and renewal dates, and purchase history. Payments are handled by Apple or Google. We never receive your card details.
• Device and Technical Information: Device model, operating system, app version, language and region settings, push notification tokens, and app integrity checks (Apple App Attest or Google Play Integrity) that help us block abuse.
• Usage and Diagnostic Data: How you use App features (for example, which screens you open and which features you use), crash reports and performance data. On Android, our analytics tool may also collect your device's advertising ID, unless you have turned it off in your device settings.
• Marketing Attribution Data: Which ad campaign, if any, led you to install the App (Apple Search Ads attribution on iOS, and the Google Play install referrer on Android). We use this only to measure our own advertising.
• Support and Feedback: Messages you send us through the App, the Website or email, together with your email address and basic device details, and any ratings you give to a summary.

2. AUDIO DATA, TRANSCRIPTION AND THE MEETING BOT

In Short: We process your audio to give you transcripts, summaries, translations and chat. We do not sell your audio or notes, we do not use them for advertising, and we do not use them to train AI models.

Noter AI turns your recordings into transcripts and AI summaries. To do this:

• Your recording is first saved on your device, then uploaded over an encrypted connection to our cloud storage, run by our cloud hosting and database provider.
• Our servers send the audio to our speech-to-text provider to create the transcript. If that provider is unavailable, we may use a backup speech-to-text provider. The provider gets temporary access to the audio through a private link that expires within a few hours.
• The transcript is then sent to our AI model provider to create summaries, key points, speaker names, titles and translations, and to answer your questions when you use AI chat.
• Your audio files can only be opened by your own account through the App. We do not look at your recordings, transcripts or notes, except when you ask us for help with a specific note, when it is needed to fix a technical problem, to protect the Services from abuse, or when the law requires it.
• We do NOT sell your audio, transcripts or notes to anyone.
• We do NOT use your audio, transcripts or notes for advertising or marketing.
• We do NOT use your audio, transcripts or notes to train AI models. Our main speech-to-text provider and our AI model provider do not use them to train their models either. See Section 3 for how each provider handles your data, including our backup speech-to-text provider.

Meeting bot. If you are a subscriber, you can send a bot to a Zoom, Microsoft Teams, Google Meet or Webex meeting, or let it join meetings from your connected calendar automatically. The bot is provided by our meeting-bot provider. It joins the meeting as a visible participant named "Noter AI" and records the meeting audio (not video). Everyone in the meeting may be recorded. After the meeting, we copy the audio into your account and ask the meeting-bot provider to delete its copy. The meeting-bot provider is also set to delete the recording automatically within 72 hours.

Calendar connection. If you connect a Google or Outlook calendar, you give our meeting-bot provider read-only access so it can see upcoming meetings and send the bot when you ask. We store your upcoming events in your account so the App can show them. You can disconnect your calendar at any time in the App.

Important: You are solely responsible for making sure you have the legal right and all required consents to record, transcribe and process any conversation, including every meeting you send the bot to. Many places require the consent of every person being recorded. This includes compliance with applicable wiretapping, eavesdropping, and recording consent laws in every place where a participant is located. When we process audio of other people on your behalf, we do so under your instructions.

3. THIRD-PARTY SERVICE PROVIDERS

In Short: We use a small number of service providers to run Noter AI. Each one receives only what it needs to do its job for us.

We use the following types of service providers:

• Speech-to-text provider: Receives your audio and returns the transcript. This provider states that it does not use customer content to train or improve its models. After we save your transcript, we delete the job and audio from this provider.
• Backup speech-to-text provider: Used only if our main provider is unavailable. It receives your audio and returns the transcript. Under its standard terms, this provider may keep audio sent to it and use it to improve its speech models.
• AI model provider: Receives transcript text and your chat questions to create summaries, translations, speaker names and chat answers. Under its terms, this provider does not use this data to train its AI models. It may keep it briefly to provide the service and prevent abuse.
• Cloud hosting and database provider: Runs sign-in, stores your account, notes, transcripts and audio, runs our servers, checks app integrity, and sends push notifications.
• App analytics and crash-reporting tools: Collect app usage events, crash reports and performance data, linked to a random app or account identifier. They never receive your recordings or notes.
• Meeting-bot provider (meeting bot and calendar): Joins online meetings to record audio when you ask, and reads your connected calendar to find meetings.
• Subscription-management provider: Manages subscriptions and free trials. Receives your account identifier, email address, name, purchase history, and ad campaign attribution.
• Apple and Google: Process your payments through the App Store and Google Play, and handle Sign in with Apple and Google Sign-In, under their own privacy policies.
• Email delivery provider: Sends our emails (for example, welcome emails, replies to your feedback, and subscription emails) and delivers feedback you send from the App to our support inbox.
• Website hosting and form providers: Host our Website and store the details you give us through Website forms, such as your email address.

These providers may only use your information to provide their services to us, under their contracts and data processing terms with us. They are not allowed to sell it. A current list of our service providers is available on request by emailing us at support@noterai.net. We are not responsible for how Apple, Google, Zoom, Microsoft, Webex or other platforms you choose to use handle your data under their own policies.

4. HOW DO WE USE YOUR INFORMATION?

In Short: We use your information to provide the Services, keep them working and safe, handle your subscription, and talk to you. The legal basis for each use is shown below.

If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, data protection law requires us to have a legal basis for each use of your personal information. We rely on: performance of our contract with you (to provide what you asked for), our legitimate interests (which we balance against your rights), your consent (where the law requires it, and you can withdraw it at any time), and legal obligations.

We use the information we collect or receive:

• To provide the core features. Recording, transcription, summaries, translation, speaker names, AI chat, the meeting bot, calendar features, export and sync across your devices. (Contract)
• To manage your account and subscription. Sign-in, checking your subscription, free trials, and restoring purchases. (Contract)
• To keep the Services secure and working. Preventing fraud and abuse, checking app integrity, fixing bugs and crashes, and monitoring performance. (Legitimate interests)
• To improve the Services. Understanding which features are used through app analytics and summary ratings. We do not read your recordings or notes for this. (Legitimate interests, or consent where required)
• To measure our advertising. Learning which of our ad campaigns led to installs and subscriptions. (Legitimate interests, or consent where required)
• To communicate with you. Service emails and notifications (for example, when your note is ready, a welcome email, replies to your feedback, or messages about your subscription). We may occasionally send product news. You can unsubscribe from marketing emails at any time. (Contract and legitimate interests)
• To comply with the law and protect our rights. Keeping records we are legally required to keep, responding to lawful requests, and enforcing our Terms of Use. (Legal obligation and legitimate interests)

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

5. WILL YOUR INFORMATION BE SHARED WITH ANYONE?

In Short: We share information only with the service providers listed in Section 3, when you ask us to, when the law requires it, or to protect rights and safety.

We may share your information in these situations:

• Service Providers: With the providers in Section 3, only as needed to run the Services.
• At Your Direction: When you export, share or copy a note, you decide who receives it.
• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
• Protection of Rights and Safety: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our Terms, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of assets, financing, or acquisition of all or part of our business. If this happens, this notice will continue to protect your information, or you will be told about any new notice.

We do not sell your personal information, and we do not share your recordings, transcripts or notes with advertisers.

6. DATA STORAGE AND SECURITY

In Short: Your data is stored with our cloud hosting provider, encrypted in transit and at rest, and protected by access rules so that only your account can open it in the App.

We store your data with our cloud hosting and database provider. Your data is protected by:

• Encryption in transit (HTTPS/TLS) between the App, our servers and our providers
• Encryption at rest, managed by our cloud provider
• Security rules that only let your signed-in account read or change your own notes and audio files
• Private links with a short expiry time when a transcription provider needs to fetch your audio
• App integrity checks that help block requests that do not come from our genuine App
• Our cloud provider's physical and infrastructure security and its independent security certifications
• Regular backups to protect against data loss

Your notes are not end-to-end encrypted, because our servers must process them to create transcripts and summaries. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your device and your sign-in details secure.

7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: Yes. Your information is processed in several countries, including the United States and Saudi Arabia.

Our providers operate around the world. Currently, our main database is hosted on servers in Saudi Arabia, and your audio files and our servers are hosted in the United States. AI processing by our AI model provider runs on its global infrastructure and may take place in any country where it operates. Our speech-to-text, meeting-bot, subscription-management, email delivery, and website hosting and form providers mainly process data in the United States. These locations may change over time.

These countries may not have data protection laws as strong as those where you live. If you are in the EEA, the United Kingdom or Switzerland, we rely on adequacy decisions where they exist, and otherwise on the Standard Contractual Clauses approved by the European Commission (and the UK and Swiss equivalents) or other lawful safeguards in our providers' data processing terms. You can contact us for more information about these safeguards.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your notes and audio until you delete them or your account. We do not delete them on a timer.

• Notes, transcripts, summaries and audio: Kept for as long as your account exists, for free and paid users alike, until you delete them. When you delete a note, we delete the note, its transcript and its audio file. AI chat conversations about that note stay in your chat history until you clear that chat or delete your account.
• Copies at our transcription providers: Deleted from our main speech-to-text provider after your transcript is saved. Meeting recordings are deleted from our meeting-bot provider after we copy them, and in any case within 72 hours.
• Account information: Kept until you delete your account.
• Backups: Deleted data may remain in our encrypted backups for up to about 100 days before it is overwritten. Backups are used only to recover from data loss.
• Analytics and crash data: Kept for the periods set by our app analytics and crash-reporting tools.
• Purchase records and support messages: Kept as long as needed for tax, accounting and legal purposes, to handle disputes, and to answer your questions.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because it is stored in backup archives), we will securely store it and isolate it from any further processing until deletion is possible.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on where you live, you can ask to access, correct, delete or export your data, and to object to or limit how we use it.

Depending on the laws where you live (for example, the GDPR in the EEA, the UK GDPR, and similar laws elsewhere), you may have the right to:

• Access the personal information we hold about you and get a copy of it
• Correct information that is wrong or incomplete
• Delete your information
• Receive your information in a portable format (you can also export notes from the App as PDF, Word or text files)
• Object to, or ask us to limit, how we process your information, including processing based on legitimate interests and direct marketing
• Withdraw your consent at any time, where we rely on consent. This does not affect processing that already happened

To use these rights, see Section 15. We may need to confirm your identity before acting on a request. We will not treat you differently for using your rights.

If you are a resident in the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. If you are in the United Kingdom, you can complain to the Information Commissioner's Office (ico.org.uk).

If you are a resident in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

10. CHILDREN'S PRIVACY

In Short: Noter AI is not for children under 13. In the EEA and the UK, users under 16 need a parent's or guardian's consent.

Noter AI is not intended for children. We do not knowingly collect personal information from children under 13 years of age. If you are in the European Economic Area or the United Kingdom and you are under 16 (or a lower age of digital consent set by your country's law), you may only use the Services with the consent of a parent or guardian. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@noterai.net.

If we learn that we have collected personal information from a child without the required parental consent, we will delete that information.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. The App does not use Apple's advertising identifier (IDFA) and does not track you across other companies' apps and websites. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

12. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes. If you live in California (or another US state with a similar privacy law), you have specific rights over your personal information.

In the last 12 months we collected these categories of personal information, as described in Section 1: identifiers (such as email address, name and account IDs), audio and electronic information (recordings), commercial information (purchase history), internet or other electronic network activity (app usage and diagnostics), and inferences contained in AI summaries of your own content. We collect this information from you, from your device, and from the services you connect (such as your calendar). We use it for the purposes in Section 4 and disclose it only to the service providers in Section 3.

We do not sell your personal information for money. We do not share your recordings, transcripts or notes for cross-context behavioral advertising. We use our app analytics tool and install attribution to measure our own ad campaigns. If this counts as "sharing" under California law, you can opt out by emailing us, and on Android you can also delete or reset your advertising ID in your device settings. We do not knowingly sell or share the personal information of anyone under 16.

Subject to certain exceptions, California residents have the right to: know what personal information we collect, use and disclose; access it; correct it; delete it; opt out of any sale or sharing; and limit the use of sensitive personal information (we only use it to provide the Services). You will not be discriminated against for using these rights. You can make a request by emailing support@noterai.net. You may also use an authorized agent. We will verify your request by confirming it with the email address on your account.

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. We do not disclose personal information to third parties for their own direct marketing. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

The Services do not let you post content publicly. If you are under 18, live in California, and want content you provided removed, please contact us using the contact information provided below.

13. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice when our practices change or the law requires it.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date, and it will be effective as soon as it is published. If we make material changes, we will notify you by posting a notice in the App or on the Website, or by contacting you directly. We encourage you to review this privacy notice regularly.

14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at support@noterai.net.

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

• In the App: You can view, edit, export and delete your notes at any time. You can delete your account from the Profile or account screen in the App. You can disconnect your calendar at any time.
• By email: You can ask to access, correct, export or delete your personal information by emailing support@noterai.net from the email address linked to your account. If you signed in with Sign in with Apple and hid your email, please include the email address shown in the App.

Deleting your account in the App deletes your sign-in account. Depending on your app version, some data, such as chat history, may not be erased automatically. To make sure all of your data is erased, including recordings, transcripts, summaries, chat history and your subscription profile, email us and we will erase everything we hold about you from our active systems. Deleted data then leaves our backups within about 100 days (see Section 8).

Deleting the App or your account does not cancel a paid subscription. Please cancel it in your Apple ID or Google Play settings.

We will respond to your request within 30 days. We may keep some information where the law requires it or allows it, for example purchase records for tax purposes.

16. WEBSITE, COOKIES AND ANALYTICS

In Short: Our Website uses a third-party analytics service and a cookieless analytics tool to count visits. Only the third-party analytics service uses cookies.

• Website analytics service (uses cookies): A third-party analytics service that uses cookies and similar technology to measure pages visited, how visitors arrive, device and browser type, and approximate location based on IP address. The provider processes this data under its own terms. You can block these cookies in your browser settings.
• Cookieless website analytics tool: A privacy-focused analytics tool that does not use cookies and does not identify individual visitors.
• Hosting: Our Website is hosted by our website hosting provider, which processes technical data such as IP addresses to deliver pages and keep the site secure.
• Forms and emails: If you contact us or give us your email address on the Website, we use it to reply to you and, if you asked for it, to send you updates. We send emails through our email delivery provider. You can unsubscribe at any time using the link in any email or by contacting us.

Links on the Website to the App Store or Google Play take you to Apple's or Google's own sites, which are governed by their own privacy policies.