Privacy Policy

Swanotes ("we", "us") is an AI-powered study tool operated from Bengaluru, India. We are the data controller for the personal data described in this policy. You can reach us at [email protected].

• Account data — your email address, name, and, if supplied by your sign-in provider, your profile picture. Authentication is handled by Supabase.
• Study content you upload or create — PDFs, documents, images (including photos of handwritten answers), the exams, notes, and learning sessions generated from them, and your exam answers and results.
• Billing data — subscriptions are processed by Dodo Payments. We store your subscription status and plan; we never see or store your card details.
• Usage data — counters of AI feature usage (for fair-use limits and billing) and aggregate, cookie-free page analytics via Vercel Analytics.
• Feedback — anything you send us through the in-app feedback form, delivered to us by email via Resend.

• To provide the service: generating exams, notes, and learning content from your uploads.
• To authenticate you and keep your account secure.
• To manage subscriptions, enforce usage limits, and prevent abuse.
• To improve the product using aggregate usage statistics.

We do not sell your personal data, and we do not use your study content to train AI models.

When you use AI features, the relevant content (for example the text of an uploaded PDF, or an image of a handwritten answer) is sent to the AI provider needed for that feature. Our processors are:

• Supabase — database, authentication, and file storage (hosted in the United States).
• Vercel — hosting and cookie-free analytics.
• PostHog — product analytics, only if you accept analytics cookies (hosted in the European Union).
• Dodo Payments — payment processing.
• Google (Gemini) and OpenAI — AI content generation and grading.
• Inworld — text-to-speech audio.
• Parallel.ai and Tavily — web search for research features.
• Resend — transactional email delivery.

Because several providers operate in the United States, your data may be transferred outside your country. We rely on our providers' standard contractual clauses and equivalent safeguards for these transfers.

Strictly necessary — the Supabase authentication cookies that keep you signed in, and local preferences for your theme, your language, and your cookie choice itself. These are always set, because the site cannot work without them.

Analytics (optional) — if you accept, we use PostHog to understand how the app is used: which features people reach, and where they get stuck. This sets a cookie holding a random identifier so we can tell one visit from another. Nothing is loaded and no cookie is set unless you accept. We do not use advertising or cross-site tracking cookies at all. Vercel Analytics, which measures traffic volume, does not use cookies and runs regardless.

You can change your mind at any time, and declining takes effect immediately:

Your content stays in your account until you delete it or your account is deleted. Signed URLs for uploaded images expire within one hour. Usage counters and logs are kept only as long as needed for limits, billing, and abuse prevention.

Depending on where you live (including under the GDPR and UK GDPR), you have the right to access, correct, export, restrict, object to the processing of, and delete your personal data, and the right to complain to your local supervisory authority.

To delete your account and all associated data, or to exercise any other right, email [email protected] from your account email address. We will complete deletion requests within 30 days and confirm when done.

Swanotes is not directed at children. You must be at least 13 years old (or the minimum age of digital consent in your country, e.g. up to 16 in parts of the EEA) to use the service.

If we make material changes to this policy we will update the effective date above and, where appropriate, notify you in the app or by email.