Privacy Policy

1. Introduction

Scholar Note ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Privacy-First Approach: Scholar Note is designed with privacy at its core. The vast majority of your data never leaves your device.

2. Information We Collect

2.1 Information Stored Locally (Not Collected by Us)

The following data is stored exclusively in your browser's local storage and is never transmitted to our servers:

• Notes content and titles
• Audio recordings and transcriptions
• Generated flashcards, quizzes, mind maps, and podcasts
• Uploaded files (PDFs, audio, video)
• User preferences and settings
• Folder organization

2.2 Information We Collect

We collect minimal information necessary to provide authentication:

• Account Information: Email address and password (encrypted)
• Authentication Tokens: Session tokens for maintaining login state
• Usage Analytics: Basic usage statistics (if Google AdSense is enabled)

2.3 Automatically Collected Information

• Browser Information: Browser type, version, and capabilities
• Device Information: Device type, operating system
• IP Address: For security and fraud prevention
• Cookies: For authentication and preferences

3. How We Use Your Information

We use the collected information for:

• Authentication: To verify your identity and maintain your session
• Service Delivery: To provide and maintain the Service
• Security: To detect and prevent fraud and abuse
• Improvement: To improve and optimize the Service
• Communication: To send important service updates (opt-in)

4. Third-Party Services and AI Processing

4.1 Browser-Based AI (No Data Transmission)

Audio transcription uses Transformers.js, which runs entirely in your browser. No audio data is sent to external servers.

4.2 Local LLM (User-Controlled)

If you configure a local LLM (e.g., Ollama), text is sent only to your locally-running model. We have no access to this data.

4.3 Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for their privacy practices.

4.4 Google AdSense

We may use Google AdSense to display advertisements. Google AdSense uses cookies to serve ads based on your prior visits to our website or other websites. You can opt out of personalized advertising by visiting Google's Ads Settings.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only in these limited circumstances:

• Legal Requirements: When required by law or to respond to legal process
• Protection: To protect our rights, property, or safety
• Service Providers: With trusted third parties who assist in operating the Service (under strict confidentiality)
• Business Transfers: In connection with a merger, acquisition, or asset sale

6. Data Security

We implement appropriate security measures to protect your information:

• Encryption: Passwords are hashed and encrypted
• HTTPS: All data transmission uses secure HTTPS
• Access Controls: Limited access to personal information
• Browser Storage: Your notes remain in your local browser storage

Important: While we implement security measures, no method of transmission over the internet is 100% secure. Browser-based storage can be cleared or lost if you clear your browser data.

7. Your Data Rights

You have the following rights regarding your data:

• Access: Request a copy of your personal information
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Export: Export your notes at any time using the export feature
• Opt-Out: Opt out of marketing communications

To exercise these rights, please contact us.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: For authentication and core functionality
• Preference Cookies: To remember your settings
• Analytics Cookies: To understand how you use the Service (via Google AdSense)

You can control cookies through your browser settings. Note that disabling cookies may limit functionality.

9. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We will ensure appropriate safeguards are in place to protect your information.

11. Data Retention

We retain your personal information only for as long as necessary to provide the Service and comply with legal obligations. Account information is deleted upon account termination.

Local Data: Notes and content stored in your browser remain until you clear browser data or delete them manually.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Your California Rights

• Right to Know: You can request information about the personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt out of the "sale" or "sharing" of your personal information
• Right to Correct: You can request correction of inaccurate personal information
• Right to Limit: You can limit the use of sensitive personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Information We Collect

We collect the following categories of personal information:

• Identifiers: Email address, IP address
• Internet Activity: Browsing behavior, interactions with ads (via Google AdSense)
• Geolocation Data: Approximate location based on IP address

Sale or Sharing of Personal Information

We use Google AdSense, which may "share" your information for targeted advertising purposes. Under CCPA, this may be considered a "sale" of personal information.

Categories shared: Internet activity, browsing behavior, device information

Third parties: Google AdSense and advertising partners

Do Not Sell or Share My Personal Information

To opt out of the sale or sharing of your personal information:

• Visit Google's Ads Settings to opt out of personalized ads
• Use the Global Privacy Control (GPC) in your browser
• Contact us at our contact page

Exercising Your Rights

To exercise any of your California privacy rights, please contact us. We will verify your identity and respond within 45 days. style="max-width: 1200px; margin: 0 auto; display: grid; grid-template-columns: repeat(auto-fit, minmax(250px, 1fr)); gap: 2rem;">