Privacy Policy

The short version

• Your study data stays on your device. Subjects, chats, files, notes, flashcards and settings are saved in your browser's storage (IndexedDB). We have no database of them and cannot see them.
• To answer you, parts of it are sent to AI companies. What you type, text from your files, page images and your voice are processed by Anthropic and ElevenLabs.
• Apple and RevenueCat handle payments. We never see your card.
• Our server keeps only anonymous counters (voice seconds and AI cost per month, per anonymous ID) to apply your plan's limits. No names, emails, messages, files or audio.
• We do not sell your data, show ads or build advertising profiles.

Who we are

Notcookd is run by [OPERATOR NAME AND ADDRESS IN QATAR: the founder's lawyer to fill in], based in Qatar. We decide how the data in this policy is used, and we handle it under Qatar's Law No. 13 of 2016 on Personal Data Privacy Protection.

Questions, requests or complaints: support@REPLACE-ME.

Who it is for

Notcookd is for people aged 18 or older. You confirm this when you start, and the confirmation is saved on your device. We do not knowingly collect data from anyone under 18. If you are under 18, please stop using the app and contact us so we can delete anything linked to you.

What stays on your device

Your name, the courses you add, chats with your tutor, the files you upload and the text we read out of them, notes, notebooks, flashcards, practice attempts, exam dates, and your settings (including your age and AI consent confirmations) are stored on your device in IndexedDB and local storage. They are never copied to our server.

That also means we cannot recover them if you clear site data, delete the app or lose the phone. Make a backup in Settings. You can see, export and delete all of it yourself (see “Your choices”).

What leaves your device, and who gets it

Your tutor is an AI. To answer, we send the request through our server to the companies below. Our server passes it on and does not store it.

• Anthropic (Claude, the AI that writes answers, lessons, notes, quiz questions and marking). It receives what you type, text from the files you are studying, and page images when a question needs them. Anthropic has said it keeps data sent through its API for up to 30 days, longer if flagged for safety or legal reasons. See Anthropic's privacy policy.
• ElevenLabs (the tutor's voice and speech recognition). It receives your voice audio when you talk, the text of the tutor's replies so they can be spoken, and, for live voice sessions, your first name and the conversation. Voice sessions may be recorded and transcribed by ElevenLabs, and live sessions may be passed to the AI model provider ElevenLabs uses. How long ElevenLabs keeps this is set by its service and our account settings; see ElevenLabs' privacy policy. The tutor's voice is synthetic.
• Apple processes your purchases through the App Store. We never receive your card or Apple ID details. See Apple's privacy policy.
• RevenueCat manages subscriptions for us. It receives a random anonymous ID made for your install, your purchase receipts and subscription status, and technical details such as your IP address. See RevenueCat's privacy policy.
• Vercel hosts our server. Like any host, it keeps ordinary technical logs of requests (such as IP address and time). See Vercel's privacy policy.

The app asks you to agree to this when you first open it, before anything is sent. You can withdraw your agreement later (see “Your choices and rights”).

What our server keeps

Only numbers, tied to an anonymous ID (a scrambled version of the anonymous ID RevenueCat gave your install):

• talk seconds used this month, and any unused balance of extra voice time you bought
• AI cost used this month

We use them to apply your plan's limits and to spot abuse. They contain no name, email, message, file or audio and we cannot tell who you are from them. We also keep one overall daily cost total, which is not about any person. On the web version, if you use an access code, your browser keeps a cookie so you stay signed in; the app does not use cookies for tracking.

What we use data for

• to answer you, teach you and mark your work (Anthropic, ElevenLabs)
• to sell and manage your subscription (Apple, RevenueCat)
• to apply plan limits, keep costs under control and prevent abuse (anonymous counters)
• to answer your support emails

We do not sell personal data, use it for advertising or share it for anyone else's marketing.

Your choices and rights

You can ask to see, correct or delete your personal data, and you can withdraw your consent at any time, under Qatar's law (and similar laws where you live). We answer within 30 days.

• Delete your study data: in the app, open Settings and choose Erase everything. This wipes everything on that device. We cannot do it for you because we do not have it.
• Delete anything we hold: email support@REPLACE-ME and ask. We will delete the counters for your anonymous ID and ask RevenueCat to remove its record. Because the counters are anonymous, we may ask for details such as the date of your purchase so we can find the right one.
• Delete what the AI companies hold: contact us and we will pass your request on, or ask them directly using the policy links above.
• Withdraw consent: stop using voice, or erase everything. Without consent to AI processing the tutor cannot answer.
• Stop a subscription: in iOS Settings, tap your name, then Subscriptions. Deleting the app does not cancel it.

Other countries

Anthropic, ElevenLabs, RevenueCat, Apple and Vercel run services in the United States and other countries outside Qatar. By agreeing to AI processing and using the app you understand your data is processed there under their policies.

Security

Connections to our server are encrypted. The keys for the AI services stay on our server, never in the app. No system is perfectly secure; if something goes wrong that affects you, we will tell you and the regulator as the law requires.

Complaints

Please tell us first at support@REPLACE-ME and we will try to put it right. You can also complain to the authority that supervises Qatar's data protection law, the National Cyber Security Agency (NCSA), or to the data protection authority where you live.

Changes

If this policy changes in a way that matters (for example, a new company that receives your data), we will ask you again before it applies. The date at the top shows the latest version. See also the Terms of Use.