Privacy Policy for TrueNotes

Last Updated: March 2026

TrueNotes (“we,” “our,” or “us”) is an AI-powered study assistant built for students in India (Grades 1–12). We prioritize a "Local-First" approach, meaning your core learning and AI interactions happen on your device, not our servers.

1. Introduction & Consent

By using TrueNotes, you agree to the collection and use of information in accordance with this policy. As our app serves students, users under the age of 18 require the consent and supervision of a parent or guardian to create an account.

2. Information We Collect

We only collect data necessary to provide our educational services:

Account Information: Name, email address, and encrypted password for secure authentication.
Profile Details: Grade, educational board (e.g., CBSE, ICSE, State Board), and subjects to personalize your curriculum.
Study Progress: Lessons completed, quiz scores, and study streaks. This data is stored on your device and synced to our secure cloud to allow multi-device access.
Backup Data: If you choose to enable the Google Drive Backup feature, the app creates an encrypted copy of your data on your personal Google Drive.

3. Offline AI Chat & Safety

TrueNotes utilizes an Offline Large Language Model (LLM).

Private Processing: All AI chat conversations are processed locally on your hardware. Your private chats are never sent to our servers or third-party AI providers.
Safety Reporting: To keep our K-12 environment safe, users can "Flag" an AI response. Only when a user manually clicks Report is the specific AI message and a reason sent to us for review.
Legal & Content Accuracy: AI can occasionally produce inaccurate info. We encourage students to verify facts with teachers or textbooks.

4. When We Connect to the Internet

While the core app works offline, the internet is used strictly for:

Authentication: Registering or logging into your account.
Data Sync: Keeping your study progress updated across devices.
Backups: Uploading your encrypted data to Google Drive (User-initiated).
Incident Reports: Sending "Flagged" content reports or technical crash logs to improve app stability.

5. Children’s Privacy & India DPDP Compliance

In accordance with the India Digital Personal Data Protection (DPDP) Act:

Age of Consent: We consider all users under 18 to be children.
No Tracking: We do not track user behavior for advertising or marketing purposes.
Parental Rights: Parents can review, update, or request the deletion of their child's data at any time by contacting our Grievance Officer.
Parental Gate: Access to legal reporting and external links is protected by a "Parental Gate" (e.g., a math challenge) to ensure adult supervision.

6. Data Storage, Security & Residency

Encryption: All data in transit (Sync/Backup) is protected using industry-standard SSL/TLS encryption.
Data Control: Your study data is yours. You can trigger a full data wipe through the app settings.
Third-Party Services: We use Google Firebase for secure authentication and Google Drive API for backups. These providers are bound by strict confidentiality.

7. Your Rights (Access & Deletion)

You have the right to:

Ask a summary of the data we hold about your account.
Correct or update your profile.
Delete your account: You can do by emailing us. All cloud data will be erased within 90 days or earlier.

8. Grievance Redressal (India)

In compliance with Indian law, if you have any questions or complaints regarding your privacy, please contact our designated Grievance Officer:

Contact Email: truenotes@nobilitybpm.com

Subject: Privacy Grievance - TrueNotes.app

9. Changes to this Policy

We may update this policy periodically. Significant changes will be notified via an in-app announcement.