Privacy Policy
This Privacy Policy explains how The Anemone Lab ("we", "us", "our") collects, uses, shares and protects personal data when you use the Brainote AI mobile app and the website brainote.ai (together, the "Service"). The Anemone Lab is the controller of your personal data. You can reach us at any time at theanemonelab@gmail.com.
- We collect only what the Service needs: your account details, the content you import, and basic usage and purchase data.
- Your content is processed by AI providers only to create the notes and study tools you ask for. It is never used to train AI models and never sold.
- We do not show ads and do not use your data, including your Google account data, for advertising.
- You can delete your account and all your data at any time from the app (Settings → Delete account).
Contents
- Data we collect
- Google user data
- How we use your data
- AI processing
- Service providers
- Storage, transfers and security
- Retention
- Deleting your account
- Your rights
- Legal bases (EEA, UK, Switzerland)
- Children
- Changes
- Contact
1. Data we collect
Account data
You sign in with Sign in with Apple or Sign in with Google. We receive a unique account identifier, your email address and, if you share it, your name. If you use Apple's "Hide My Email", we receive a private relay address instead of your real email. We never receive your Apple or Google password.
Content you provide
The files, texts, YouTube links and audio recordings you import, and everything created from them: notes, summaries, quizzes, flashcards, mind maps, podcasts, transcripts, folders and your study progress. The microphone is used only while you record a lecture, after you grant permission.
Purchase data
If you subscribe, Apple processes the payment. We receive the subscription status, product, purchase and renewal dates, and the country of the App Store account through Apple and RevenueCat. We never receive your card or bank details.
Usage and device data
Events about how the app is used (for example "onboarding completed", "note created", "paywall shown"), linked to a random account identifier, together with the app version, device model, iOS version, language and approximate country. We use this to understand which features work and to fix problems.
Diagnostic data
When a request to our servers fails, we record technical information about the error (time, request type, error message, app version) to investigate it.
We do not collect your precise location, contacts, photos, health data or advertising identifier, and we do not track you across other companies' apps or websites.
2. Google user data
When you choose Sign in with Google, Brainote AI requests only the basic sign-in permissions (openid, email and profile). Through them, we access your name, email address, Google account identifier and profile picture URL. We do not request access to your Gmail, Google Drive, Calendar, Contacts, YouTube account or any other Google service.
- Use: this data is used only to create and secure your Brainote account, sign you in on your devices, show your name in the app and answer your support requests.
- Sharing: it is stored with Firebase Authentication (Google) and is not shared with anyone else, except where required by law. It is never sold, never used for advertising and never used to train AI models.
- Storage and protection: it is stored on Google Cloud servers in the United States, encrypted in transit and at rest, and accessible only to the account owner and to us for operating the Service.
- Retention and deletion: it is kept while your account exists and is deleted when you delete your account. You can also revoke Brainote AI's access at any time from your Google Account (myaccount.google.com/connections).
Brainote AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
3. How we use your data
- To provide the Service: create your account, import and process your content, generate your notes and study tools, and sync them across your devices.
- To manage your subscription and the free plan limits.
- To keep the Service secure and reliable: prevent abuse and fraud, investigate errors and outages.
- To improve the app, using aggregated usage statistics.
- To answer your messages and send important information about the Service (for example a change to these terms). We do not send marketing emails.
- To comply with our legal obligations.
4. AI processing
Brainote AI uses artificial intelligence to create your study materials. Before your first import, the app asks for your consent to send your content to AI providers. When you import a source, the content needed for the feature you asked for (the text of a document, a transcript, an audio recording or a note) is sent to the providers below, and the result is stored in your account:
- Text generation (notes, quizzes, flashcards, mind maps, podcast scripts): language models from OpenAI, Anthropic and Google, accessed through OpenRouter and DeepInfra.
- Speech-to-text (recordings, audio files, videos without captions): OpenAI Whisper, through OpenAI and DeepInfra.
- Text-to-speech (podcasts): Google Cloud Text-to-Speech.
- YouTube: the public captions or audio of the video you link, retrieved through YouTube and Supadata.
These providers process your content only to return the result to us, under API terms that do not allow them to use it to train their models. We do not use your content to train AI models. AI-generated content may contain mistakes; please check important information.
5. Service providers
We share personal data only with the providers that run the Service on our behalf, under contracts that limit their use of it to that purpose:
| Provider | Purpose | Data |
|---|---|---|
| Google Cloud and Firebase (Authentication, Firestore, Storage, Cloud Run) | Sign-in, storage, servers | Account data, content, purchase status |
| Apple | Sign in with Apple, payments, app distribution | Account and purchase data |
| RevenueCat | Subscription management | Account identifier, purchase data |
| Mixpanel | Product analytics | Usage and device data, account identifier |
| Sentry | Server error monitoring | Diagnostic data, account identifier |
| OpenRouter, DeepInfra, OpenAI, Anthropic, Google | AI processing (see section 4) | The content being processed |
| Supadata | YouTube transcripts | The YouTube link |
We may also disclose data when required by law, to protect the rights and safety of our users or of the Service, or as part of a merger or acquisition (in which case this policy would continue to apply). We do not sell or rent personal data, and we do not share it for cross-context behavioral advertising.
6. Storage, transfers and security
Your account and content are stored on Google Cloud servers in the United States. Some providers listed above may process data in other countries. When data from the European Economic Area, the United Kingdom or Switzerland is transferred abroad, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework.
Data is encrypted in transit (HTTPS) and at rest. Access to your notes is restricted to your own account by our security rules, and access by our team is limited to what is needed to operate and support the Service. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a data breach where the law requires it.
7. Retention
- Account data and content: as long as your account exists. A note you delete is removed with its files and podcasts.
- Backups: kept for up to 30 days, then automatically erased.
- Server logs and error reports: up to 90 days.
- Analytics events: kept in pseudonymous form to measure how the app is used over time, and deleted on request.
- Purchase records: kept as long as required by tax and accounting law. Apple keeps its own records of your purchases.
8. Deleting your account
You can delete your account at any time in the app: Settings → Delete account. This permanently deletes your account, your notes, files, recordings, podcasts and other content from our servers right away; remaining copies in backups are erased within 30 days. Deleting your account does not cancel an App Store subscription: cancel it in your Apple ID settings. If you no longer have the app, see how to delete your account or email us from the address linked to your account.
9. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, receive a copy of it (portability), object to or restrict its processing, and withdraw your consent at any time (for example the AI consent, by deleting your account). California residents have the right to know, delete and correct their personal information and not to be discriminated against for exercising these rights; we do not sell or share personal information as defined by the CCPA.
To exercise a right, email theanemonelab@gmail.com. We may ask you to confirm that you own the account, and we answer within one month. You can also lodge a complaint with your local data protection authority.
10. Legal bases (EEA, UK, Switzerland)
- Contract: providing the Service you signed up for, including your account, content and subscription.
- Consent: sending your content to AI providers and the microphone access. You can withdraw it at any time.
- Legitimate interests: security, fraud prevention, error monitoring and improving the app through analytics.
- Legal obligation: accounting records and answers to lawful requests.
11. Children
The Service is intended for people aged 13 or older, or the minimum age required by the law of your country to consent to the processing of personal data. We do not knowingly collect data from younger children. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes
We may update this policy as the Service evolves. The date at the top shows the latest version. If a change is significant, we will inform you in the app before it takes effect.
13. Contact
The Anemone Lab, publisher of Brainote AI
Email: theanemonelab@gmail.com