Privacy Policy

SuturedNotes (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices you have over your data when you use our mobile application, website, and any related services (collectively, the “Service”).

1. Information We Collect

1.1 Information You Provide

When you create an account or use the Service, we may collect:

• Account information: Name (first and last), email address, mobile phone number.
• Academic profile: University or institution name, academic year, healthcare field of study.
• Uploaded content: Documents (PDFs, images, and other lecture materials) that you upload for processing.
• Generated content: Questions, flashcards, summaries, cheat sheets, and other study materials generated from your uploads.
• Support communications: Messages and attachments you send through our in-app customer support chat.
• Payment information: Billing and transaction details processed through our payment providers (we do not directly store your credit card numbers or payment credentials).

1.2 Information We Collect Automatically

When you use the Service, we automatically collect:

• Device information: Device identifier (for single-device enforcement and session management), device type (iOS/Android), operating system version, and app version.
• Push notification tokens: Used to send you notifications about ready study decks, revision reminders, and study plan alerts.
• Usage and analytics data: We collect data about how you interact with the Service, including feature usage, study sessions, screen views, upload activity, and general engagement patterns. This data helps us understand how the Service is used and improve the experience.
• Diagnostic data: Error logs and crash reports to identify and fix technical issues. These reports may include your user identifier and email address to help us investigate issues affecting your account.

1.3 Information We Do NOT Collect

• IP addresses for tracking purposes
• Precise geographic location data
• Contact lists or address book data
• Microphone or camera data (except when you voluntarily upload images)

2. How We Use Your Information

• Create and manage your account
• Authenticate your identity and enforce single-device access
• Process your uploaded documents through AI services to generate study materials
• Provide personalised study experiences, including spaced repetition and study planning
• Sync your study plan with your calendar (if you opt in)
• Send push notifications about ready decks, study reminders, and revision alerts
• Process subscription payments and manage your billing
• Respond to your support requests
• Analyse usage patterns to improve the Service and fix bugs
• Enforce our Terms of Service, prevent abuse, and maintain the security of the platform
• Communicate with you about service updates, billing matters, and security notices

3. AI Processing and Model Providers

SuturedNotes uses artificial intelligence to power its core features, including OCR (optical character recognition), question generation, summary creation, and clinical scenario generation. Because AI processing is central to what we do, it is important you understand how your content is handled.

3.1 How Your Content Is Processed

1. OCR (Document Scanning): Your uploaded PDF or image is sent to a third-party OCR provider to extract the text content. The OCR provider may use uploaded documents to improve and train their AI models. No personal information (such as your name, email, or account details) is attached to or sent with the document.
2. Study Material Generation: The extracted text (transcript) is sent to third-party AI model providers to generate questions, summaries, flashcards, and other study materials. Only the lecture transcript is sent, with no personal information included. These providers do not receive your name, email, user ID, or any other account details.

3.2 What We Do NOT Do

• We do not train AI models on your data. SuturedNotes does not use your uploaded content, generated materials, or personal information to train, fine-tune, or improve any AI models.
• We do not send personal information to AI providers. Your identity is never linked to the content processed by AI services.

Your Responsibility: Because uploaded content is processed by third-party AI providers, you should avoid uploading materials you are not authorised to share, or materials that contain sensitive personal information about identifiable individuals (such as real patient data).

4. How We Share Information

We share information only when reasonably necessary to operate the Service, comply with law, protect rights and safety, or support core operations. Specifically, we may share data with:

• Infrastructure and hosting providers that store and deliver the Service.
• Authentication providers that help us manage secure sign-in (including Google Sign-In and Apple Sign-In).
• Payment providers that process subscription transactions on our behalf (via app store billing and third-party payment platforms).
• AI and model providers as described in Section 3, to generate study materials from your uploaded content.
• Analytics and diagnostics providers that help us understand product usage and identify technical issues.
• Push notification providers that deliver notifications to your device.

What We Do NOT Do

• We do not sell your personal information. We have never sold personal information and have no plans to do so.
• We do not share your data for advertising purposes. We do not display third-party advertisements in the Service.
• We do not share your personal information with AI providers. Only lecture content (not personal data) is sent for AI processing.

5. Google Calendar Integration

If you choose to connect your Google Calendar, the Service will:

• Create a dedicated “SuturedNotes Study” calendar in your Google Calendar account.
• Add, update, and remove study block events on that calendar to keep your study plan in sync.
• Store your Google Calendar refresh token securely on our servers to maintain the connection.

The Service does not read, modify, or access any of your existing calendar events or other calendars. Calendar access is limited exclusively to managing study plan events on the SuturedNotes-created calendar. You can disconnect Google Calendar at any time from the app settings, which will revoke access and delete the stored token.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

• Essential cookies: Maintain your authenticated session and remember your preferences.
• Analytics cookies: Understand how visitors interact with our website, including page views and navigation patterns.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the website. The mobile app does not use cookies. It uses local device storage (such as AsyncStorage) to maintain your session and preferences.

7. Data Retention

8. Data Storage and Security

• Your data is stored securely on our self-hosted infrastructure.
• We use encryption for data in transit (TLS/HTTPS).
• We implement row-level security policies so users can only access their own data.
• Uploaded PDFs are deleted from our servers after processing.
• We use administrative, technical, and organisational safeguards to protect personal information.

9. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access your personal information and receive a copy of the data we hold about you.
• Correct inaccurate or incomplete personal information through the app settings.
• Delete your account and all associated data.
• Withdraw consent for push notifications through your device settings.
• Disconnect third-party integrations (such as Google Calendar) at any time.
• Request data portability: Receive certain data in a structured, machine-readable format.
• Object to or restrict certain processing of your personal information.

To exercise these rights, you can use the account settings within the app, contact us at support@suturednotes.com, or use our in-app customer support features.

10. Children's Privacy

SuturedNotes is designed for users 16 years of age and older. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us immediately and we will investigate and delete the information.

11. International Data Transfers

SuturedNotes and our service providers may process information in multiple jurisdictions. By using the Service, you understand that your information may be transferred to and processed in countries that may have different data protection rules than your own.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, the “Effective Date” at the top of this page will be updated. Material changes will be communicated through an in-app notification or email when appropriate.

13. Contact Us

For privacy questions, data access requests, deletion requests, or concerns about how your information is handled, contact us:

• Email: support@suturednotes.com
• In-app: Use the customer support chat in the Profile section