Privacy Policy
Last updated: January 15, 2025
At Nerdy AI Inc. ("Nerdy," "we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered note-taking application and related services (collectively, the "Service").
1. Information We Collect
Information You Provide
- Account Information: Name, email address, password, and profile details when you create an account.
- Audio & Voice Data: Voice recordings you choose to capture through our Service for transcription and note generation.
- User Content: Notes, documents, flashcards, and other content you create or upload.
- Payment Information: Billing details processed securely through our payment providers (Stripe, Apple Pay, Google Pay).
- Communications: Feedback, support requests, and other communications you send to us.
Information Collected Automatically
- Device Information: Device type, operating system, unique device identifiers, and mobile network information.
- Usage Data: Features used, recording duration, interaction patterns, and performance metrics.
- Log Data: IP address, browser type, access times, and pages viewed.
- Analytics Data: Anonymized usage statistics to improve our Service.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process your audio recordings and generate AI-powered transcriptions and notes
- Create flashcards, summaries, and study materials
- Process payments and manage your subscription
- Send service-related communications and updates
- Provide customer support and respond to inquiries
- Analyze usage patterns to enhance user experience
- Detect, prevent, and address technical issues or fraud
- Comply with legal obligations
3. AI Processing & Machine Learning
Our Service uses artificial intelligence and machine learning to process your audio recordings and generate notes. Here's how we handle your data:
- Transcription: Your audio is processed using advanced speech recognition models to generate accurate transcriptions.
- AI Analysis: We use large language models to summarize, organize, and enhance your notes.
- No Training on Your Data: We do NOT use your personal audio recordings or notes to train our AI models without your explicit consent.
- Third-Party AI Services: We may use trusted third-party AI providers (such as OpenAI, Google Cloud, or similar) to process your data. These providers are bound by strict data protection agreements.
- Ephemeral Processing: Audio files are processed in real-time and can be deleted from our processing servers immediately after transcription upon your request.
5. Data Security
We implement industry-standard security measures to protect your data:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
- Access Controls: Strict access controls and authentication requirements for our systems.
- Regular Audits: Periodic security assessments and vulnerability testing.
- Secure Infrastructure: Our services are hosted on secure, SOC 2 compliant cloud infrastructure.
While we strive to protect your personal information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide you services:
- Account Data: Retained while your account is active and for 30 days after deletion request.
- Audio Recordings: Stored according to your preferences. You can delete recordings at any time.
- Notes & Content: Retained until you delete them or close your account.
- Usage Analytics: Anonymized data may be retained indefinitely for service improvement.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by relevant authorities
- Data Processing Agreements with all service providers
- Compliance with applicable data transfer regulations
8. Your Rights & Choices
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your personal data.
- Portability: Request your data in a portable format.
- Restriction: Request restriction of processing.
- Objection: Object to certain processing activities.
- Withdraw Consent: Withdraw consent where processing is based on consent.
To exercise these rights, contact us at privacy@nerdy.ai.
9. Children's Privacy
Our Service is not intended for children under 13 years of age (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to equal service and price
- Right to delete personal information
We do not sell personal information. To make a verifiable consumer request, contact us at privacy@nerdy.ai.
11. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@nerdy.ai
- Support: support@nerdy.ai
- Address: Nerdy AI Inc., San Francisco, CA