Privacy Policy
This policy explains what Nodebook (“we”, “us”) collects, why, and the choices you have. Questions or data requests: support@node-book.app.
Data we collect
| Data | Why |
|---|---|
| Email address | Account creation, sign-in, and service emails. |
| Display name | A one-time cosmetic label used for your greeting and shown to other Nodebook users on the global learning leaderboard. It does not affect your account, lessons, or progress and cannot be changed in Settings. |
| Topics & links you submit | To compile your learning modules (sent to our AI provider - see below). |
| Your modules, AI Courses & study progress | To store your library and power spaced-repetition practice and stats. |
| Learning preferences | The interests, “explain-through” world, level, and goal you set during onboarding, to tailor how lessons are written for you. |
| Device installation ID & push token | To deliver memory reminders you choose to enable, keep them tied to the correct signed-in account, and stop them after sign-out. |
| Payment metadata | Subscription status and billing identifiers. Card details are handled by Stripe on the web and Apple in the iOS app. We never see or store them. |
| Usage, diagnostics & performance data | Learning interactions needed to operate your account; anonymous analytics such as coarse location and device/browser category; web performance measurements; and privacy-minimal error summaries used to detect broken screens. Error summaries contain an error category, one-way fingerprint, and component names, but not the error message, page path, account identity, or learning content. |
AI processing (important)
When you compile a module, the topic or link you submit is sent to Google Gemini (Google’s generative-AI API) to generate the lesson content. We ask for your consent before your first compile. AI-generated content can be inaccurate or incomplete - verify anything you rely on. We do not use your content to train our own models.
If you turn a lesson into an audiobook (“Listen”), the lesson’s text is additionally sent to Google’s text-to-speech service to synthesise the narration. The audio is speech generated from that lesson text. It is not a recording of you, and we never send your voice, name, or email to synthesise it.
In the iOS app, you can choose to answer an Audio Recall prompt by voice. Nodebook requests microphone access only when you tap the microphone. Recognition is configured to run on your device, the recording is not saved, and Nodebook receives only the resulting text so it can place it in your answer field.
Service providers (sub-processors)
We share data only with the providers needed to run Nodebook:
- Supabase - authentication, database, and private storage (your account, modules, progress, generated audio).
- Google Gemini - generates module content from your submitted topics/links, and synthesises audiobook narration from lesson text.
- Stripe - subscription billing and payment processing on the web.
- Apple - Sign in with Apple, iOS subscription billing, on-device speech recognition, and App Store distribution.
- Expo and Apple Push Notification service (APNs) - delivery of iOS memory reminders when you enable notifications.
- Vercel - application hosting, delivery, privacy-conscious web analytics, and real-user performance measurement. We do not use this data for advertising profiles.
- Wikimedia Commons - open-licensed images and diagrams shown in some modules.
- Pexels - optional stock imagery used as a fallback in some modules.
- OpenAlex - when you turn on Scholarly sources, your topic is sent to look up real academic papers.
Memory reminders
Nodebook asks for notification permission only after you complete and rate a Recall Lock. If you allow it, we store an app installation identifier, an Expo push token, your time zone, locale, app version, and permission status so we can deliver a due-memory reminder at an appropriate local time. Reminder text is generic by default. You can turn notifications off at any time in iOS Settings. Signing out disables reminders for that installation, and deleting your account deletes its device registrations and delivery history.
Retention & deletion
We keep your data while your account is active. You can delete your account at any time from Settings → Delete account; this permanently erases your profile, modules, AI Courses, credits, and progress, and cancels any active Stripe web subscription. If we cannot confirm or stop Stripe billing, nothing is deleted and we ask you to try again. Apple controls App Store subscriptions, so deleting Nodebook does not cancel an Apple subscription. If an active Apple subscription is detected, the app warns you, offers Apple’s subscription management screen, and asks you to acknowledge that billing may continue before deletion. You may also email support@node-book.app to request access to, a copy of, or deletion of your data, and we will respond within 30 days.
If you used Sign in with Apple, native account deletion requests a fresh Apple confirmation and sends its short-lived authorization code to Nodebook’s server. The server verifies that it belongs to your account, revokes the Apple authorization, and does not retain the resulting Apple token. Browser deletion provides the manual Apple Account revocation step when native confirmation is unavailable.
One honest exception: generated audio. Audiobook narration is stored as an anonymous, shared cache entry keyed only by the words that were spoken - not by you and not by your lesson. Because two people whose lessons contain the same sentence share the very same audio file, deleting one person’s copy would break the other’s audiobook. So when you delete a lesson or your account, your audiobook disappears from your library immediately and every link between you and that audio is severed, but the underlying audio file itself is retained in that shared cache. It contains no personal data: it is synthesised speech of lesson text, with no identifier of you attached once the link is removed.
Your rights
Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact support@node-book.app to exercise them, or visit our privacy choices help. We do not sell your personal data.
Children
Nodebook is not directed to children under 13, and we do not knowingly collect their data.
Changes
We’ll update this page when our practices change and revise the date above. Continued use after a change means you accept the updated policy.
See also our Terms of Service.