Privacy Policy

Last updated: 9 September 2026 · Effective: 9 September 2026

The short version. We collect the account details you give us and the material you choose to upload. We use them to run the app for you — nothing more. We do not sell your data, and we do not use the content of your notebooks to train AI models. You can delete your account and everything in it from inside the app at any time.

1. Who we are

Notes Maker LM (the “App”) is developed and operated by Gaming Geek Studio, an independent software developer based in Pakistan (“we”, “us”, “our”). We are the data controller for the information described in this policy.

For any privacy question or request, email gaminggeekstudio@gmail.com. We aim to reply within 5 business days and to resolve requests within 30 days.

2. Information we collect

2.1 Information you give us

DataWhy we need it
NameTo address you in the app and label your account.
Email addressTo create and secure your account, sign you in, and send password resets.
PasswordHandled and stored by Firebase Authentication in hashed form — we never see or store your plain-text password.
Profile photoOptional. Shown only to you, in your own account.

An account can be created with an email address and a password, or through a third-party sign-in provider: Sign in with Apple and Sign in with Google on iPhone, and Sign in with Google on Android. If you use one, that provider tells us your name and the email address you chose to share, and nothing else — we never receive your password or any other account detail from them. Sign in with Apple lets you hide your real address, in which case we only ever see the relay address Apple generates for us.

2.2 Content you create

This content is stored in your account so it is there the next time you open the app. It is private to your account. The App has no sharing or collaboration features, and no other user can see your notebooks.

2.3 Information collected automatically

2.4 What we deliberately do not collect

We do not collect your precise location, your contacts, your calendar, your health data, or your browsing activity outside the App. Camera and photo library access is used solely to attach an image you pick to a source or to your profile — images are not scanned or used for anything else, and access is requested only at the moment you use the feature.

3. How we use your information

Where the GDPR applies, our legal bases are performance of a contract (running the App you signed up for), consent (notifications and personalised advertising, each of which you can withdraw), legitimate interests (security, abuse prevention, fixing bugs) and legal obligation where the law requires it.

4. How AI processing works

Generating an answer, a quiz or an audio overview means sending the relevant parts of your sources — along with your question — to an AI provider that returns a result. This is unavoidable: without it, the feature cannot exist. What matters is what happens to that content, so here it is plainly:

ProviderWhat is sentWhat it returns
Google Gemini
(via Firebase AI Logic)
Excerpts from your sources and your question or instructionChat answers, quizzes, flashcards, summaries, mind maps, slides, infographic content and audio scripts
Google Vertex AIText chunks from your sourcesNumeric embeddings that let the App find the passages relevant to your question
Google Vertex AI
(Gemini-TTS)
The generated audio script text only — never your source filesSpoken audio for audio overviews and video narration

Your content is not used to train AI models. We process your material through Google’s paid enterprise services under terms that prohibit using customer content to train Google’s models, and we have not opted into any programme that would allow it. We never sell your content, and we never use it to train models of our own.

AI output can be wrong. The App is a study aid, not a source of truth — please check anything important against the original source before relying on it.

5. Advertising

If you do not have an active subscription, the App shows ads supplied by Google AdMob. Subscribers do not see ads.

Before any ad is requested, we show a consent form (Google’s User Messaging Platform) where privacy law such as the GDPR requires it. It asks whether ads may be requested for you at all, and whether they may be personalised. This applies on both iPhone and Android.

On iPhone there is a second prompt: Apple’s App Tracking Transparency, which asks whether we may access your device’s advertising identifier (IDFA) for tracking. Android has no equivalent framework — there, the advertising identifier is Google’s Android advertising ID, and your consent form answer is what governs whether it is used for personalised advertising.

If you decline, we honour it. Declining ATT, or declining personalisation in the consent form, means the advertising identifier is not used for tracking; declining consent altogether means ads are non-personalised or not requested at all. You can change your mind at any time:

We do not share your notebooks, sources, chats or Studio outputs with any advertiser. Google’s handling of ad data is governed by the Google Privacy & Terms.

6. Who we share information with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only with the service providers that make the App work, each of them acting on our instructions:

ProviderPurposePolicy
Google / FirebaseAuthentication, database, file storage, server functions, push notifications, remote configurationFirebase privacy
Google Cloud / GeminiAI generation, embeddings and text-to-speechCloud privacy notice
Google Analytics for FirebaseIn-app usage analyticsFirebase privacy
AdaptySubscription management and purchase validationAdapty privacy
Google AdMobAdvertising for non-subscribersGoogle privacy
ApplePayment processing for subscriptions bought on iPhoneApple privacy
Google PlayPayment processing for subscriptions bought on AndroidGoogle privacy

We may also disclose information if the law genuinely requires it, or to protect our rights, safety, or the safety of others. If we are ever involved in a merger or acquisition, we will notify you before your information becomes subject to a different privacy policy.

7. Where your data is stored

Your account data and notebook content are stored on Google’s infrastructure in the European Union (Firestore multi-region eur3, with AI processing in europe-west1). Some providers listed above may process data in the United States or elsewhere. Where data leaves the European Economic Area, those transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.

8. How long we keep it

9. Your rights and choices

9.1 Deleting your account

You can delete your account from inside the App: Settings → your profile → Delete Account. This is a real deletion, not a deactivation. It permanently removes your profile, every notebook, every source file, your chat history and every Studio output, along with your sign-in credentials. It cannot be undone.

Deleting the App from your phone does not delete your account — use the in-app option, or email us and we will do it for you. Full instructions, including how to request deletion without the App installed, are on the account deletion page.

An active subscription is billed by your app store and is not cancelled by deleting your account. Cancel it separately first:

9.2 Other rights

Depending on where you live — in particular under the GDPR in the EEA and the UK, and the CCPA/CPRA in California — you may have the right to access a copy of your data, to correct it, to delete it, to restrict or object to processing, to data portability, and to withdraw consent at any time. Californian users additionally have the right not to be discriminated against for exercising these rights; we do not offer financial incentives for personal information, and we do not sell or share it as those terms are defined under the CCPA.

Exercise any of these by emailing gaminggeekstudio@gmail.com from the address on your account. We will not charge you and will not ask you to create an account to make a request. If you are in the EEA or the UK, you also have the right to complain to your local data protection authority.

9.3 In-app controls

10. Children

The App is not directed at children under 13, and we do not knowingly collect personal information from them. If you are between 13 and 18, you may use the App only with the involvement and consent of a parent or guardian. If you believe a child under 13 has given us personal information, email us and we will delete the account and its contents promptly.

11. Security

Data is encrypted in transit with TLS and at rest on Google’s infrastructure. Access to your notebooks is enforced by server-side security rules tied to your account, so one user cannot read another’s content. Passwords are hashed by Firebase Authentication and are never visible to us. No system is perfectly secure, but if a breach ever affects your personal data we will notify you and the relevant authority as the law requires.

12. Changes to this policy

We may update this policy as the App changes. The “last updated” date at the top always reflects the current version. If a change materially affects how we handle your information, we will tell you in the App or by email before it takes effect. Continuing to use the App after that means you accept the updated policy.

13. Contact us

Privacy questions, requests or complaints

Gaming Geek Studio · Pakistan