Privacy Policy

This Privacy Policy explains how Notaday collects, uses, stores, and shares information when you use the Notaday website and app. Notaday is an AI-powered study workspace for uploading study materials, creating notes, generating study tools, chatting with documents, and managing paid plans or Notaday Credits.

Information we collect

We collect account information such as your email address, name, authentication identifiers, login method, and account settings. If you sign in with Google, Supabase Auth and Google provide the information needed to create and authenticate your account.

We store the study content you create or upload, including PDFs, file names, folders, notes, Notaday Docs, Free Spaces, highlights, comments, drawings, pasted images, generated quizzes, exercises, flashcards, summaries, smart notes, knowledge extractions, Ask AI conversations, and related metadata such as file size, storage paths, timestamps, and ownership identifiers.

We collect billing and credit information needed to operate paid features, including your plan, subscription status, Polar customer and subscription identifiers, payment event metadata, invoice or receipt references, credit balances, credit transactions, storage usage, and account limit status. Notaday does not store full card numbers or payment card security codes.

We may collect technical and usage information such as session data, device and browser information, IP address, request metadata, rate-limit events, error logs, feature usage, service worker status, and timestamps. This helps us keep the app secure, debug issues, prevent abuse, and operate the service.

Cookies and local storage

Notaday uses cookies, local storage, and session storage to keep you signed in, remember preferences, preserve workspace state, and improve the app experience. Examples include theme choice, selected folder details, toolbar preferences, music settings, Ask AI document-context preference, storage warning dismissal state, and temporary billing-success state after checkout.

How we use information

We use your information to provide and secure the app, authenticate your account, store and retrieve your study materials, generate AI outputs, sync your workspace, enforce plan limits, calculate storage usage, process billing events, grant credits, send account or billing messages, respond to support requests, prevent abuse, and comply with legal obligations.

We do not sell your personal information. We do not use your uploaded study materials or generated study content for third-party advertising profiles.

AI processing

When you use AI features, the content needed for that request may be sent to AI providers so they can generate the requested output. For example, text-only knowledge extraction may send extracted PDF text to an AI model, image-aware extraction may upload the PDF to OpenAI for OCR-style reading, and Ask AI may send your message, recent chat history, and relevant document knowledge to an AI provider such as DeepSeek.

AI outputs can be inaccurate or incomplete. You should avoid uploading highly sensitive personal, financial, health, or confidential information unless you are comfortable with it being processed by Notaday and its service providers for the feature you choose.

Service providers

We share information with service providers only as needed to run Notaday. Current providers include Supabase for authentication and database services, Cloudflare for hosting, Workers, R2 storage, queues, and rate limiting, Polar for checkout, subscriptions, invoices, and billing portal services, Resend for email delivery, Google for sign-in, OpenAI for AI processing, DeepSeek for AI generation, and Freepik for icon search and downloads.

These providers may process information according to their own terms and privacy practices. We may also disclose information if required by law, to protect Notaday and our users, to investigate abuse or security issues, or as part of a business transfer such as a merger, acquisition, or sale of assets.

Storage and retention

We keep account information, study content, billing records, credit transactions, and usage metadata for as long as needed to provide Notaday, maintain records, resolve disputes, enforce limits, prevent abuse, and comply with legal obligations.

You can delete content from your account, and you can request account deletion from the app. Account deletion removes your account and requests deletion of associated stored files and app storage. Some records may remain for a limited time where required for billing, security, legal compliance, backups, or fraud prevention.

If an account is inactive or over storage limits without an active subscription, stored files and uploaded assets may be removed according to the storage cleanup rules described in our Terms of Service.

Your choices and rights

You can update or delete many types of content directly in the app. You can manage billing through the Polar customer portal, cancel subscriptions, delete uploaded files, reduce storage usage, and choose whether Ask AI includes document context for future messages.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. To make a privacy request, contact support@notaday.app using the email address connected to your Notaday account.

Security

We use technical and organizational safeguards designed to protect personal information, including authenticated access, private storage paths, service-role separation, rate limiting, secure transport, and provider-level security controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

Notaday is not intended for children under 13 or for anyone below the age required to use online services without parental consent in their location. If you believe a child provided personal information to Notaday without appropriate consent, contact support@notaday.app.

International processing

Notaday and its service providers may process information in countries other than your own. Those countries may have different data protection laws than your location.

Changes to this policy

We may update this Privacy Policy as Notaday changes. If we make material changes, we will update the date above and may provide additional notice in the app or by email.

Contact

For privacy questions or requests, contact support@notaday.app.