Privacy Policy
Last updated: 9 September 2026 · Effective: 9 September 2026
The short version. We collect the account details you give us and the material you choose to upload. We use them to run the app for you — nothing more. We do not sell your data, and we do not use the content of your notebooks to train AI models. You can delete your account and everything in it from inside the app at any time.
1. Who we are
Notes Maker LM (the “App”) is developed and operated by Gaming Geek Studio, an independent software developer based in Pakistan (“we”, “us”, “our”). We are the data controller for the information described in this policy.
For any privacy question or request, email gaminggeekstudio@gmail.com. We aim to reply within 5 business days and to resolve requests within 30 days.
2. Information we collect
2.1 Information you give us
| Data | Why we need it |
|---|---|
| Name | To address you in the app and label your account. |
| Email address | To create and secure your account, sign you in, and send password resets. |
| Password | Handled and stored by Firebase Authentication in hashed form — we never see or store your plain-text password. |
| Profile photo | Optional. Shown only to you, in your own account. |
An account can be created with an email address and a password, or through a third-party sign-in provider: Sign in with Apple and Sign in with Google on iPhone, and Sign in with Google on Android. If you use one, that provider tells us your name and the email address you chose to share, and nothing else — we never receive your password or any other account detail from them. Sign in with Apple lets you hide your real address, in which case we only ever see the relay address Apple generates for us.
2.2 Content you create
- Sources you add to a notebook — PDFs, pasted or typed text, web links, and photos you capture or choose.
- Text extracted from those sources so they can be searched and cited, including text recognised from images and scanned pages.
- Chat messages you send and the answers returned to you.
- Studio outputs generated from your sources — quizzes, flashcards, summaries, mind maps, slides, infographics and audio overviews — plus your progress through them, such as quiz scores.
This content is stored in your account so it is there the next time you open the app. It is private to your account. The App has no sharing or collaboration features, and no other user can see your notebooks.
2.3 Information collected automatically
- Device and app data — device model, operating system version, App version, language and region. Used to keep the App working and to fix problems.
- Usage analytics — we use Google Analytics for Firebase, which records in-app events such as signing up, signing in, creating a notebook and generating a Studio output, along with an app instance identifier generated by Firebase. It tells us that an action happened and which features are used — not the content of your sources, chats or outputs. We do not use a crash reporting SDK.
- Push notification token — if you allow notifications, a token identifying your device, stored so we can send you the alerts you asked for. Delete the App or turn notifications off and it stops being used.
- Purchase data — the anonymous transaction and subscription-status information your app store returns when you buy or renew a subscription: Apple on iPhone, Google Play on Android. We never receive your card number or billing address.
- Advertising identifiers — only where permitted; see section 5.
2.4 What we deliberately do not collect
We do not collect your precise location, your contacts, your calendar, your health data, or your browsing activity outside the App. Camera and photo library access is used solely to attach an image you pick to a source or to your profile — images are not scanned or used for anything else, and access is requested only at the moment you use the feature.
3. How we use your information
- To create your account, sign you in and keep it secure.
- To store your notebooks and sync them to your device.
- To generate the answers and Studio content you request from your sources.
- To operate subscriptions, credits and purchase restoration.
- To send notifications you have opted into, and to show ads to users without an active subscription.
- To diagnose problems, understand which features are used, prevent abuse and improve the App.
- To reply when you contact support.
Where the GDPR applies, our legal bases are performance of a contract (running the App you signed up for), consent (notifications and personalised advertising, each of which you can withdraw), legitimate interests (security, abuse prevention, fixing bugs) and legal obligation where the law requires it.
4. How AI processing works
Generating an answer, a quiz or an audio overview means sending the relevant parts of your sources — along with your question — to an AI provider that returns a result. This is unavoidable: without it, the feature cannot exist. What matters is what happens to that content, so here it is plainly:
| Provider | What is sent | What it returns |
|---|---|---|
| Google Gemini (via Firebase AI Logic) | Excerpts from your sources and your question or instruction | Chat answers, quizzes, flashcards, summaries, mind maps, slides, infographic content and audio scripts |
| Google Vertex AI | Text chunks from your sources | Numeric embeddings that let the App find the passages relevant to your question |
| Google Vertex AI (Gemini-TTS) | The generated audio script text only — never your source files | Spoken audio for audio overviews and video narration |
Your content is not used to train AI models. We process your material through Google’s paid enterprise services under terms that prohibit using customer content to train Google’s models, and we have not opted into any programme that would allow it. We never sell your content, and we never use it to train models of our own.
AI output can be wrong. The App is a study aid, not a source of truth — please check anything important against the original source before relying on it.
5. Advertising
If you do not have an active subscription, the App shows ads supplied by Google AdMob. Subscribers do not see ads.
Before any ad is requested, we show a consent form (Google’s User Messaging Platform) where privacy law such as the GDPR requires it. It asks whether ads may be requested for you at all, and whether they may be personalised. This applies on both iPhone and Android.
On iPhone there is a second prompt: Apple’s App Tracking Transparency, which asks whether we may access your device’s advertising identifier (IDFA) for tracking. Android has no equivalent framework — there, the advertising identifier is Google’s Android advertising ID, and your consent form answer is what governs whether it is used for personalised advertising.
If you decline, we honour it. Declining ATT, or declining personalisation in the consent form, means the advertising identifier is not used for tracking; declining consent altogether means ads are non-personalised or not requested at all. You can change your mind at any time:
- Consent form — reopen it from the privacy options in the App’s own Settings, on either platform.
- iPhone — Settings → Privacy & Security → Tracking.
- Android — Settings → Privacy → Ads, where you can reset or delete your advertising ID.
We do not share your notebooks, sources, chats or Studio outputs with any advertiser. Google’s handling of ad data is governed by the Google Privacy & Terms.
6. Who we share information with
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only with the service providers that make the App work, each of them acting on our instructions:
| Provider | Purpose | Policy |
|---|---|---|
| Google / Firebase | Authentication, database, file storage, server functions, push notifications, remote configuration | Firebase privacy |
| Google Cloud / Gemini | AI generation, embeddings and text-to-speech | Cloud privacy notice |
| Google Analytics for Firebase | In-app usage analytics | Firebase privacy |
| Adapty | Subscription management and purchase validation | Adapty privacy |
| Google AdMob | Advertising for non-subscribers | Google privacy |
| Apple | Payment processing for subscriptions bought on iPhone | Apple privacy |
| Google Play | Payment processing for subscriptions bought on Android | Google privacy |
We may also disclose information if the law genuinely requires it, or to protect our rights, safety, or the safety of others. If we are ever involved in a merger or acquisition, we will notify you before your information becomes subject to a different privacy policy.
7. Where your data is stored
Your account data and notebook content are stored on Google’s infrastructure in the
European Union (Firestore multi-region eur3, with AI
processing in europe-west1). Some providers listed above may process data in
the United States or elsewhere. Where data leaves the European Economic Area, those
transfers rely on the European Commission’s Standard Contractual Clauses or an
adequacy decision.
8. How long we keep it
- Account data and content — kept while your account is open.
- Deleted items — a notebook, source or output you delete is removed from our systems, with backup copies expiring within 30 days.
- Deleted accounts — see below.
- Support emails — kept up to 24 months so we can follow up.
- Purchase records — kept as long as tax and accounting law requires.
9. Your rights and choices
9.1 Deleting your account
You can delete your account from inside the App: Settings → your profile → Delete Account. This is a real deletion, not a deactivation. It permanently removes your profile, every notebook, every source file, your chat history and every Studio output, along with your sign-in credentials. It cannot be undone.
Deleting the App from your phone does not delete your account — use the in-app option, or email us and we will do it for you. Full instructions, including how to request deletion without the App installed, are on the account deletion page.
An active subscription is billed by your app store and is not cancelled by deleting your account. Cancel it separately first:
- iPhone — Settings → your name → Subscriptions.
- Android — Play Store → Payments & subscriptions → Subscriptions.
9.2 Other rights
Depending on where you live — in particular under the GDPR in the EEA and the UK, and the CCPA/CPRA in California — you may have the right to access a copy of your data, to correct it, to delete it, to restrict or object to processing, to data portability, and to withdraw consent at any time. Californian users additionally have the right not to be discriminated against for exercising these rights; we do not offer financial incentives for personal information, and we do not sell or share it as those terms are defined under the CCPA.
Exercise any of these by emailing gaminggeekstudio@gmail.com from the address on your account. We will not charge you and will not ask you to create an account to make a request. If you are in the EEA or the UK, you also have the right to complain to your local data protection authority.
9.3 In-app controls
- Notifications — per-category toggles in the App’s Settings, plus the system switch in iOS Settings → Notifications or Android Settings → Apps → Notes Maker LM → Notifications.
- Advertising — the privacy options form in the App, plus Tracking in iOS Settings or Privacy → Ads in Android Settings.
- Profile — edit your name and photo, or remove your photo, in Settings.
10. Children
The App is not directed at children under 13, and we do not knowingly collect personal information from them. If you are between 13 and 18, you may use the App only with the involvement and consent of a parent or guardian. If you believe a child under 13 has given us personal information, email us and we will delete the account and its contents promptly.
11. Security
Data is encrypted in transit with TLS and at rest on Google’s infrastructure. Access to your notebooks is enforced by server-side security rules tied to your account, so one user cannot read another’s content. Passwords are hashed by Firebase Authentication and are never visible to us. No system is perfectly secure, but if a breach ever affects your personal data we will notify you and the relevant authority as the law requires.
12. Changes to this policy
We may update this policy as the App changes. The “last updated” date at the top always reflects the current version. If a change materially affects how we handle your information, we will tell you in the App or by email before it takes effect. Continuing to use the App after that means you accept the updated policy.