Notaria Privacy Policy

This Privacy Policy explains how Notaria ("we," "us," or "our") collects, uses, discloses, and protects information when you use the Notaria mobile application, related AI features, and any related websites, support channels, or backend services (collectively, the "Service"). Notaria is a reading, note-taking, OCR, transcription, recall, quiz, and AI-assisted knowledge app. A core design principle of the current product is that your library content is stored locally on your device, while some optional or user-triggered cloud features process limited data through backend and third-party providers. If you do not agree with this Privacy Policy, do not use the Service. Effective Date: March 15, 2026

Controller / Business: Notaria Privacy Contact: trackit.tr@gmail.com

This Privacy Policy applies to information processed through:

• The Notaria iOS and Android app
• Our AI backend and quota/subscription infrastructure
• In-app OCR, transcription, book lookup, and assistant features
• Support, legal, and compliance communications relating to the Service

A. Information you create or store in the app Depending on how you use Notaria, the app may store book metadata, notes, quotes, audio notes, transcripts, OCR scan results, assistant conversations, quiz history, and backup files locally on your device. B. Information collected from device permissions If you grant permission, the app may access your camera, photo library, files, microphone, and notifications. You can deny these in your device settings. C. Subscription and entitlement information If you use premium features, we process Adapty profile IDs and subscription/quota states. D. Product analytics and diagnostics We collect limited product usage and operational data (e.g., app opens, paywall events, AI task completion telemetry). We do not intentionally send your full notes, OCR text, or assistant conversations to analytics tools. E. Book lookup and Cloud AI request data When you use book lookup or cloud AI features (if chosen), we course your queries, selected context, or prompt data to Open Library, Google Books, OpenAI, or AWS to fulfill your request. F. Backend service identifiers We process user identifiers (e.g., Adapty ID or local fallback) to administer quotas and subscriptions.

We use information to:

• Provide the core app experience (local storage, OCR, AI, quizzes, etc.)
• Deliver premium features, subscriptions, credits, and quota enforcement
• Maintain security, prevent abuse, and fix issues
• Measure product usage and improve reliability and performance
• Comply with legal obligations and enforce our Terms of Use

Where required by applicable law, we process personal data under one or more of these legal bases: Contract (to provide the Service), Legitimate interests (to secure the Service and improve reliability), Consent (for device permissions), and Legal obligation.

A. Local-first storage: Your core library content is stored locally. There is no automatic multi-device sync. B. Cloud AI processing: When cloud AI is used, your request is sent to our backend and then to providers like OpenAI (assistant, transcription) or AWS Textract (cloud OCR). C. What our backend stores: We process AI requests in-memory and do not write them to our backend database as persistent content records. We log operational metadata needed for quotas. D. Selected context only: For assistant requests, only selected context snippets (not your entire library) are transmitted. AI outputs: AI-generated results may be inaccurate. You are responsible for reviewing outputs before relying on them.

We may disclose information to service providers (OpenAI, AWS, Adapty, Mixpanel, Open Library, Google Books), law enforcement or regulators (where required), or in connection with a business transfer. We do not sell your personal information. We do not knowingly share your content with advertisers for ad targeting.

Local app content remains on your device until you delete it. Subscription/quota records are retained as long as reasonably necessary to operate paid features. Your data may be processed in countries other than your own, including the USA. Because the current product stores core content locally, you are responsible for securing access to your device. We use reasonable technical measures, but no method is completely secure.

You can choose 'on-device' AI mode where supported, revoke device permissions, delete local notes/backups, or disable notifications. Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing of your data by contacting us.

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

We may update this Privacy Policy from time to time. If we make material changes, we will adjust the Effective Date and post the updated version. For privacy questions or requests, contact: trackit.tr@gmail.com