Privacy Policy

Effective date: October 25, 2026 · Last updated: October 25, 2026

This Privacy Policy explains how The Anemone Lab ("we", "us", "our") collects, uses, shares and protects personal data when you use the Brainote AI mobile app and the website brainote.ai (together, the "Service"). The Anemone Lab is the controller of your personal data. You can reach us at any time at theanemonelab@gmail.com.

In short
  • We collect only what the Service needs: your account details, the content you import, and basic usage and purchase data.
  • Your content is processed by AI providers only to create the notes and study tools you ask for. It is never used to train AI models and never sold.
  • We do not show ads and do not use your data, including your Google account data, for advertising.
  • You can delete your account and all your data at any time from the app (Settings → Delete account).

Contents

  1. Data we collect
  2. Google user data
  3. How we use your data
  4. AI processing
  5. Service providers
  6. Storage, transfers and security
  7. Retention
  8. Deleting your account
  9. Your rights
  10. Legal bases (EEA, UK, Switzerland)
  11. Children
  12. Changes
  13. Contact

1. Data we collect

Account data

You sign in with Sign in with Apple or Sign in with Google. We receive a unique account identifier, your email address and, if you share it, your name. If you use Apple's "Hide My Email", we receive a private relay address instead of your real email. We never receive your Apple or Google password.

Content you provide

The files, texts, YouTube links and audio recordings you import, and everything created from them: notes, summaries, quizzes, flashcards, mind maps, podcasts, transcripts, folders and your study progress. The microphone is used only while you record a lecture, after you grant permission.

Purchase data

If you subscribe, Apple processes the payment. We receive the subscription status, product, purchase and renewal dates, and the country of the App Store account through Apple and RevenueCat. We never receive your card or bank details.

Usage and device data

Events about how the app is used (for example "onboarding completed", "note created", "paywall shown"), linked to a random account identifier, together with the app version, device model, iOS version, language and approximate country. We use this to understand which features work and to fix problems.

Diagnostic data

When a request to our servers fails, we record technical information about the error (time, request type, error message, app version) to investigate it.

We do not collect your precise location, contacts, photos, health data or advertising identifier, and we do not track you across other companies' apps or websites.

2. Google user data

When you choose Sign in with Google, Brainote AI requests only the basic sign-in permissions (openid, email and profile). Through them, we access your name, email address, Google account identifier and profile picture URL. We do not request access to your Gmail, Google Drive, Calendar, Contacts, YouTube account or any other Google service.

Brainote AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How we use your data

4. AI processing

Brainote AI uses artificial intelligence to create your study materials. Before your first import, the app asks for your consent to send your content to AI providers. When you import a source, the content needed for the feature you asked for (the text of a document, a transcript, an audio recording or a note) is sent to the providers below, and the result is stored in your account:

These providers process your content only to return the result to us, under API terms that do not allow them to use it to train their models. We do not use your content to train AI models. AI-generated content may contain mistakes; please check important information.

5. Service providers

We share personal data only with the providers that run the Service on our behalf, under contracts that limit their use of it to that purpose:

ProviderPurposeData
Google Cloud and Firebase (Authentication, Firestore, Storage, Cloud Run)Sign-in, storage, serversAccount data, content, purchase status
AppleSign in with Apple, payments, app distributionAccount and purchase data
RevenueCatSubscription managementAccount identifier, purchase data
MixpanelProduct analyticsUsage and device data, account identifier
SentryServer error monitoringDiagnostic data, account identifier
OpenRouter, DeepInfra, OpenAI, Anthropic, GoogleAI processing (see section 4)The content being processed
SupadataYouTube transcriptsThe YouTube link

We may also disclose data when required by law, to protect the rights and safety of our users or of the Service, or as part of a merger or acquisition (in which case this policy would continue to apply). We do not sell or rent personal data, and we do not share it for cross-context behavioral advertising.

6. Storage, transfers and security

Your account and content are stored on Google Cloud servers in the United States. Some providers listed above may process data in other countries. When data from the European Economic Area, the United Kingdom or Switzerland is transferred abroad, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework.

Data is encrypted in transit (HTTPS) and at rest. Access to your notes is restricted to your own account by our security rules, and access by our team is limited to what is needed to operate and support the Service. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a data breach where the law requires it.

7. Retention

8. Deleting your account

You can delete your account at any time in the app: Settings → Delete account. This permanently deletes your account, your notes, files, recordings, podcasts and other content from our servers right away; remaining copies in backups are erased within 30 days. Deleting your account does not cancel an App Store subscription: cancel it in your Apple ID settings. If you no longer have the app, see how to delete your account or email us from the address linked to your account.

9. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, receive a copy of it (portability), object to or restrict its processing, and withdraw your consent at any time (for example the AI consent, by deleting your account). California residents have the right to know, delete and correct their personal information and not to be discriminated against for exercising these rights; we do not sell or share personal information as defined by the CCPA.

To exercise a right, email theanemonelab@gmail.com. We may ask you to confirm that you own the account, and we answer within one month. You can also lodge a complaint with your local data protection authority.

11. Children

The Service is intended for people aged 13 or older, or the minimum age required by the law of your country to consent to the processing of personal data. We do not knowingly collect data from younger children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes

We may update this policy as the Service evolves. The date at the top shows the latest version. If a change is significant, we will inform you in the app before it takes effect.

13. Contact

The Anemone Lab, publisher of Brainote AI
Email: theanemonelab@gmail.com