Privacy Policy for NoteWise

Introduction

NoteWise (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application NoteWise (the “App”) and visit our website at https://notewise.help (the “Website”). This policy applies to all users of our App and visitors to our Website.

Information We Collect

NoteWise iOS App

Personal Information

When you create an account, we collect:

• Email address (required for account creation)
• Name (first and last name)
• Username (chosen by you or generated from your email)
• Password (securely hashed and stored)
• Apple ID (if you sign in with Apple)

Device Information

• Device identifier (used for security and session management)
• Audio session data (temporary, for recording functionality)

Audio Recordings and Transcriptions

• Voice recordings stored locally on your device
• Transcribed text from your recordings (stored locally)
• AI-generated summaries of your transcriptions (stored locally)

Usage Data

• Authentication tokens (JWT tokens for secure API access)
• API usage logs (for service optimization and security)

NoteWise Website (https://notewise.help)

Our website is a promotional landing page and blog for the NoteWise iOS App. We do not collect personal information through our website. However, we may collect:

Anonymous Analytics Data

• Page views and website traffic (through standard web analytics)
• General location data (country/region level only)
• Device type and browser information (for website optimization)
• Referring websites (how you found our site)

This data is collected anonymously and cannot be used to identify individual users.

How We Use Your Information

NoteWise iOS App

Primary Functions

• Account Management: Create and maintain your user account
• Authentication: Secure access to App features and cloud services
• Voice Processing: Transcribe your audio recordings using device-based speech recognition
• Text Summarization: Generate summaries using AI services
• Data Synchronization: Maintain your preferences and settings

Service Improvement

• Monitor API usage for performance optimization
• Analyze aggregated, anonymized usage patterns
• Ensure service reliability and security

NoteWise Website

Website Analytics

• Traffic Analysis: Understand how visitors use our website
• Content Optimization: Improve website content and user experience
• Technical Performance: Monitor website performance and fix issues

We do not use website data for targeted advertising or share it with third parties for marketing purposes.

Data Storage and Processing

NoteWise iOS App

Local Storage

• Audio recordings are stored exclusively on your device
• Transcriptions are stored on your device
• Summaries are stored on your device
• User preferences are stored locally using iOS secure storage

Cloud Processing

• Authentication data is stored securely on our servers
• Transcription text is temporarily sent to AI services for summarization only
• No audio files are uploaded to our servers or third-party services

Data Retention

• Local data: Retained until you delete recordings or uninstall the App
• Account data: Retained until you delete your account
• Authentication logs: Retained for 90 days for security purposes

NoteWise Website

Website Data

• No personal data is stored from website visits
• Anonymous analytics may be retained for up to 24 months for trend analysis
• Server logs are retained for 30 days for security and technical purposes

Third-Party Services

NoteWise iOS App

Apple Services

• Sign in with Apple: We receive minimal information (Apple ID, optionally email/name)
• Speech Recognition: Apple’s on-device speech recognition processes your audio

Cloud Services

• Authentication: Secure server infrastructure handles user authentication
• API Gateway: Secure communication between App and services

AI Services

• Text Summarization: Transcribed text is sent to third-party AI services for summary generation
• Data Usage: AI services process text according to their respective privacy policies
• No Audio: Only text transcriptions are shared, never audio recordings

NoteWise Website

Analytics Services

• Web Analytics: We may use standard web analytics tools to understand website usage
• No Personal Data: Analytics are collected anonymously and do not identify individual visitors
• Cookies: We may use essential cookies for website functionality (see Cookies section below)

Cookies and Website Technologies

NoteWise Website

Our website may use cookies and similar technologies:

Essential Cookies

• Functionality: Required for basic website operation
• Security: Protect against malicious activity
• No Personal Data: These cookies do not store personal information

Analytics Cookies

• Usage Tracking: Understand how visitors interact with our website
• Anonymous Data: Cannot identify individual users
• Opt-Out: You can disable cookies through your browser settings

We do not use cookies for advertising or tracking across other websites.

Data Security

Encryption

• All data transmission uses HTTPS/TLS encryption
• Authentication tokens use JWT with secure signing
• Local data storage uses iOS secure keychain for sensitive information

Access Controls

• Device-specific authentication tokens
• Secure password hashing (bcrypt)
• API rate limiting and monitoring

Security Measures

• Regular security audits of our server infrastructure
• Encrypted data storage on secure servers
• Secure API endpoints with proper authentication

Your Rights and Choices

NoteWise iOS App

Data Access and Control

• View: Access all your account information through the App
• Edit: Modify your profile information and preferences
• Delete: Remove individual recordings or your entire account
• Export: Share recordings and transcriptions using iOS sharing features

Account Management

• Delete Account: Permanently removes all server-stored data
• Sign Out: Clears local authentication tokens
• Data Portability: Export your recordings and transcriptions

NoteWise Website

Website Preferences

• Cookie Control: Manage cookie preferences through your browser
• Analytics Opt-Out: Disable analytics tracking if supported by your browser
• No Account Required: Our website does not require account creation or personal data

Marketing Communications

• We do not send marketing emails
• We do not use your data for advertising purposes
• We do not track users across websites

Children’s Privacy

NoteWise is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately.

International Data Transfers

Your data may be processed in the United States where our servers are located. By using the App, you consent to the transfer of your data to the United States, which may have different data protection laws than your country.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: What personal information we collect and how it’s used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: We will not discriminate based on privacy rights exercise

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Posting the updated policy in the App
• Sending notification through the App (if applicable)
• Updating the “Last Updated” date

Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours of discovery
• Report to relevant authorities as required by law
• Take immediate steps to secure and protect data

Contact Us

Legal Basis for Processing (GDPR)

If you are in the European Union, our legal basis for processing your personal information includes:

• Contract Performance: Account creation and App functionality
• Legitimate Interest: Service improvement and security
• Consent: Where explicitly requested (e.g., optional features)

Your European Rights (GDPR)

If you are in the EU, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

To exercise these rights, contact us using the information provided above.