Privacy Policy

Personal Information We Collect and Sources

Personal Information You Provide to Us

When you use the Services or otherwise interact with us (such as through customer support), we may collect the following personal information:

• Username
• Email address
• Password (stored securely using industry-standard hashing; we do not store plaintext passwords)
• Full name (if provided)
• Study-related preferences you choose to provide (for example, study level, focus area, course tags, study goals)

If you log into the Services using a third-party authentication service, such as Google or Apple, those services authenticate your identity and may provide us with certain information such as your name and email address, depending on your settings and permissions.

Purchases and Billing

If you complete a purchase transaction with us (subscriptions or minute packs), we collect limited purchase and transaction metadata needed to provide entitlements and prevent fraud (such as product identifiers, purchase timestamps, and subscription status). Payment card details are handled by Apple App Store or Google Play (and our subscription management provider), and we do not store full payment instrument details.

Content You Create or Upload

If you create, upload, transmit, or otherwise post information to the Services or communicate with us, we will collect that information. This may include:

• Audio recordings you create in-app
• Audio files you upload (if enabled for your plan)
• Transcripts generated from your audio
• AI-generated study outputs (notes, flashcards, quizzes, summaries)
• Quiz attempts and answers (including past exam review data)
• Study settings (difficulty, note mode, output detail level)
• Search queries and in-app prompts
• Support communications and feedback

Important: If you upload or record audio that includes other individuals, you agree that you will not upload or record such content without the knowledge and/or consent of the individuals you have recorded, and that you are responsible for complying with all applicable laws.

Information Collected Automatically

When you interact with our Services, we collect certain information automatically, including:

• Device type, model, and operating system version
• App version and basic diagnostic information
• IP address and approximate location inference (e.g., country/region)
• Device identifiers (such as advertising identifiers where permitted by your device settings)
• Usage data (features used, frequency, session duration, crash logs, performance telemetry)
• Referring sources (for example, how you found our website)

How We Use Your Personal Information

We use your personal information to provide, maintain, improve, and promote the Services, and to communicate with you. Specific purposes include:

• Providing, maintaining, and personalizing the Services (account access, hosting content, generating transcripts and study materials, saving history and preferences)
• Processing purchases and managing subscriptions, entitlements, and minute pack usage
• Measuring, analyzing, and improving features, reliability, and performance
• Providing support, troubleshooting, and responding to requests
• Sending service communications (important updates, security alerts, policy notices)
• Marketing communications (where permitted and subject to your opt-out choices)
• Preventing fraud, crime and abuse and protecting the security and integrity of the Services
• Protecting rights and enforcing policies, including enforcing Terms of Service
• Complying with legal obligations and responding to lawful requests

We do not sell your personal information.

Disclosure of Your Personal Information

Third Parties to Whom NoteForge Discloses Personal Information

We may disclose personal information to third parties in the following circumstances:

For External Processing (Service Providers)

We share information with vendors and service providers who process data on our behalf to deliver the Services. This includes providers for:

• Cloud hosting and database infrastructure
• Authentication services
• Speech-to-text transcription
• AI processing for note/quiz/flashcard generation
• Subscription and purchase management (e.g., RevenueCat)
• Analytics and crash reporting
• Customer support tools

These providers are required to process data according to our instructions and applicable confidentiality and security terms.

Legal Requests and Preventing Harm

We may disclose personal information if we have a good-faith belief disclosure is necessary to:

• Comply with law, regulation, legal process, or governmental request
• Enforce our Terms, investigate violations, or address security issues
• Protect the rights, property, or safety of NoteForge, our users, or the public

Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice as required by law.

Your Choices About How We Use Your Personal Information

Email, Push Notifications, and Other Communications

You may opt out of marketing communications by following the unsubscribe instructions or changing notification preferences in-app. We may still send non-marketing service communications (e.g., account or security notices).

Managing Your Account and Content

You can:

• Delete content you created (where the deletion feature is available)
• Request deletion of your account (see "Contact Us")

How Long We Retain Your Personal Information

We retain personal information for as long as your account is active, as needed to provide the Services, to fulfill legitimate business purposes, or to comply with legal obligations.

Examples:

• Account and settings data: retained while your account is active
• Study content (audio, transcripts, generated notes/quizzes): retained until you delete it or delete your account
• Transaction records: may be retained for compliance and accounting (for example, up to 7 years where legally required)
• Support communications: may be retained to improve support operations and maintain accurate records

How We Secure Your Personal Information

We take measures reasonably designed to protect against unauthorized access, use, alteration, or destruction of personal information, including:

• Encryption in transit (TLS/HTTPS)
• Access controls and least-privilege permissions
• Secure authentication and session management
• Monitoring and logging for security and abuse prevention

No system is 100% secure. You use the Services at your own risk.

Children's Privacy

NoteForge is intended for users in high school and beyond. We do not knowingly collect personal information from children under 13 or below the age where parental consent is required in their jurisdiction. If we learn we have collected such information, we will delete it as soon as reasonably practicable.

Jurisdictional Rights

Depending on where you reside, you may have certain rights regarding your personal information. These rights apply only to the extent NoteForge is subject to the relevant law.

EEA, Switzerland, and UK

For purposes of the GDPR and comparable laws, we are the controller of your personal information.

Rights Available Under the GDPR:

• Access - request a copy of your personal information
• Rectification - correct inaccurate or incomplete information
• Erasure - request deletion of your personal information
• Restriction - limit how we process your information
• Objection - object to certain types of processing
• Portability - receive your data in a portable format
• Withdraw consent (where processing is based on consent)

To submit a request, contact: info@montrelia.ai

California

This Privacy Notice is provided pursuant to the California Consumer Privacy Act (CCPA) and applies solely to California residents.

Your Rights Under the CCPA:

• Know/Access - know what personal information we collect
• Delete - request deletion of your personal information
• Correct - correct inaccurate personal information
• Opt out of sale/sharing (not applicable as we do not sell/share)

Exercising Your Rights: Email us at info@montrelia.ai with the subject line: "CCPA Request". We may need to verify your identity.

We do not "sell" personal information and do not "share" personal information for cross-context behavioral advertising as defined by the CCPA.

Privacy Rights in Your State or Country of Residence

Depending on your location, you may have rights similar to those described above, including access, deletion, correction, portability, and the right to opt out of certain processing. To submit a request, email info@montrelia.ai with the subject line "Privacy Request."

Changes to this Policy

We may modify this Privacy Policy at any time. If we make material changes, we will update the "Last updated" date and provide notice where required.

If you disagree with changes, you may delete your account and/or stop using the Services. Continued use constitutes acceptance of the updated Policy.

Contact Us

If you have questions about this Privacy Policy, please contact us:

Ladaworks LLC

16192 Coastal Hwy, Lewes, DE 19958, United States

Email: info@montrelia.ai

Website: https://www.montrelia.ai