Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

• Account Information: Name, email address, phone number, and password when you create an account
• Profile Information: Profile picture, bio, preferences, and learning goals
• Payment Information: Billing address, payment method details (processed by secure third-party providers)
• Content: Notes, text, documents, images, and other materials you upload or create
• Communications: Messages, feedback, support requests, and survey responses
• Educational Data: Learning progress, quiz results, study habits, and performance analytics

1.2 Information We Collect Automatically

• Device Information: Device type, operating system, app version, device identifiers, and hardware specifications
• Usage Data: Features used, time spent, frequency of use, interaction patterns, and user behavior
• Technical Data: IP address, browser type, internet service provider, and referring/exit pages
• Location Data: General geographic location (with your permission)
• Performance Data: App crashes, errors, loading times, and system performance metrics

1.3 Information from Third Parties

• Social Media: Information from social login providers (Google, Apple, Facebook)
• Analytics Providers: Aggregated usage statistics and performance metrics
• Payment Processors: Transaction confirmations and payment status

2. How We Use Your Information

2.1 Service Provision

• Create and manage your account and user profile
• Process and convert your content into video clips using AI technology
• Provide customer support and respond to inquiries
• Process payments and manage subscriptions
• Deliver personalized learning recommendations

2.2 Service Improvement

• Analyze usage patterns to improve app functionality
• Develop new features and services
• Conduct research and analytics for product development
• Test and optimize user experience
• Train and improve our AI models and algorithms

2.3 Communication

• Send service-related notifications and updates
• Provide educational content and learning tips
• Send promotional materials (with your consent)
• Conduct surveys and gather feedback

2.4 Security and Compliance

• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service and policies
• Comply with legal obligations and law enforcement requests
• Protect the rights and safety of users and the public

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: To provide the services you've requested
• Legitimate Interest: To improve our services, prevent fraud, and ensure security
• Consent: For marketing communications and optional features (withdrawable at any time)
• Legal Obligation: To comply with applicable laws and regulations
• Vital Interest: To protect the safety and security of users

4. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

4.1 Service Providers

• Payment Processors: Flutterwave, Pawapay, Stripe for transaction processing
• AI Services: OpenAI, Google AI for content generation and processing
• Cloud Storage: AWS, Google Cloud for secure data storage
• Analytics: Google Analytics, Firebase for usage analysis
• Customer Support: Zendesk, Intercom for support services

4.2 Legal Requirements

• Court orders, subpoenas, or other legal processes
• Government investigations or regulatory requests
• Protection of rights, property, or safety
• Prevention of fraud or illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Retention

We retain your information for different periods based on the type of data and purpose:

• Account Information: Until account deletion plus 30 days for security purposes
• Content Data: Until deletion by user or account termination
• Usage Analytics: 24 months in identifiable form, indefinitely in aggregated form
• Payment Records: 7 years for tax and legal compliance
• Support Communications: 3 years for quality assurance
• Legal Hold Data: Until resolution of legal matters

6. Data Security

We implement comprehensive security measures to protect your information:

6.1 Technical Safeguards

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Multi-factor authentication for admin access
• Regular security audits and penetration testing
• Automated backup and disaster recovery systems

6.2 Organizational Measures

• Employee background checks and security training
• Principle of least privilege access controls
• Regular security awareness training
• Incident response and breach notification procedures

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for countries with equivalent privacy protections
• Binding Corporate Rules for intra-group transfers
• Your explicit consent where required by law

8. Your Rights and Choices

8.1 Account Management

• Access: View and download your personal information
• Update: Modify your account and profile information
• Delete: Request deletion of your account and data
• Export: Download your content in a portable format

8.2 Communication Preferences

• Unsubscribe from marketing emails via the unsubscribe link
• Disable push notifications in app settings
• Manage email preferences in your account settings
• Opt out of SMS communications by replying STOP

8.3 Data Processing Rights

• Rectification: Correct inaccurate personal information
• Restriction: Limit processing in certain circumstances
• Objection: Object to processing based on legitimate interest
• Portability: Receive your data in a machine-readable format

9. Cookies and Similar Technologies

We use cookies and similar technologies to enhance your experience:

9.1 Types of Cookies

• Essential Cookies: Required for basic app functionality
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings and choices
• Marketing Cookies: Deliver relevant advertisements (with consent)

9.2 Cookie Management

You can control cookies through your browser settings or our cookie preference center. Disabling certain cookies may affect app functionality.

10. Third-Party Services

Our app integrates with third-party services that have their own privacy policies:

• OpenAI: AI content generation and processing
• Google Services: Authentication, analytics, and cloud storage
• Payment Providers: Secure payment processing
• Social Media: Login integration and content sharing

We recommend reviewing the privacy policies of these third-party services.

11. Children's Privacy

ClipNotes is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information immediately.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

12.1 Your Rights

• Right to Know: Information about the personal data we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: We won't discriminate for exercising your rights

12.2 Exercising Your Rights

To exercise these rights, contact us using the information in Section 15. We may need to verify your identity before processing your request.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right of Access: Obtain confirmation of data processing and access to your data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion in certain circumstances
• Right to Restrict Processing: Limit processing in specific situations
• Right to Data Portability: Receive data in a structured format
• Right to Object: Object to processing based on legitimate interest
• Right to Withdraw Consent: Withdraw consent at any time

You also have the right to lodge a complaint with a supervisory authority if you believe we have violated your privacy rights.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Notify you via email or in-app notification
• Post the updated policy on our website with a new effective date
• Provide a summary of key changes when material updates are made
• Obtain your consent where required by applicable law

Your continued use of the Service after the effective date constitutes acceptance of the updated Privacy Policy.