Privacy Policy
This policy explains what data the True Smart Notes AI app (the “app”) processes, why, for how long and what your rights are. We wrote it so that a student can understand it too.
1. Who processes your data
The data controller is Ing. Ondřej Ungr, company ID 03490505, registered at Peruská 2482/7, 120 00 Praha 2, Czech Republic (“we”). Contact for anything about personal data: info@tsnai.cz.
2. What data we process
- Account: the name or nickname you choose and your password. We store the password only as an irreversible hash; nobody can see it.
- Age and consent: whether you are 15 or older; for younger users a parent’s e-mail and a record of their consent (date, policy version).
- Content you add: typed and handwritten notes, photos (whiteboard, textbook, notebook), lesson recordings, attached files and subjects.
- AI results: explanations, practice quizzes, transcriptions, translations and other outputs the app creates from your content.
- Usage data: when and how long you actively use the app (writing, reading explanations, practising) and finished quiz results. This is for your own overview and for a linked parent’s overview.
- Technical data: IP address and server request logs created with every internet connection (security and operation).
We use no advertising or tracking cookies and we do not sell your data. Your device stores only what the app needs to work offline (sign-in, your notes, unsent changes).
3. Why we process data and on what legal basis
- Running the app and your account – storing notes, syncing between devices, AI processing of your content. Legal basis: performance of a contract, i.e. providing the service you chose (Art. 6(1)(b) GDPR).
- Parent overview – only if a parent account is linked to the student account. Legal basis: the student’s consent, or a parent’s consent for students under 15 (Art. 6(1)(a) GDPR).
- Security and abuse prevention – technical logs, usage limits. Legal basis: our legitimate interest in safe operation (Art. 6(1)(f) GDPR).
- Billing – if you pay for a subscription, we process data required by accounting law (Art. 6(1)(c) GDPR).
4. Students under 15
In the Czech Republic a person aged 15 or over can consent to processing of personal data for online services on their own (Section 7 of Act No. 110/2019 Coll.). If you are under 15, you need the consent of a parent or legal guardian. At registration you enter a parent’s e-mail and confirm that the parent agrees. A parent can withdraw consent at any time at info@tsnai.cz – we will then close the account.
5. Who helps us (processors)
We share data only with these providers, who process it for us under their data processing terms and only for the given service:
- Cloudflare, Inc. – servers, database and storage for the app, the website, e-mail forwarding.
- Anthropic, PBC – the artificial intelligence (Claude) that creates explanations, quizzes, transcriptions and translations. We send only the content needed for the specific task (the text, photos or pages of that note), not your name or password. Under Anthropic’s terms, API data is not used to train models and is deleted within 30 days unless needed to investigate abuse.
- Surge (Chloi Inc.) – delivering the app files to your browser.
- Google – fonts (Google Fonts) are loaded from Google servers, which see your IP address.
Some of these providers are based in the USA. Transfers rely on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses.
6. How long we keep data
- Account and content: for as long as the account exists. After the account is closed we delete everything within 30 days.
- Earlier versions of notes (backup when editing on several devices at once): at most the last 20 versions of each note, deleted together with the account.
- Usage data: for as long as the account exists.
- Technical logs: at most 30 days.
- Accounting records: for the period required by law (usually 10 years).
7. Your rights
You have the right to access your data, have it corrected or erased, restrict processing, receive it in a portable format (export) and object. You can withdraw consent at any time. Just write to info@tsnai.cz – we reply within 30 days. If you disagree with how we handle your data, you can complain to the Czech Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz) or the supervisory authority in your country.
8. Security
The connection to the app is always encrypted (HTTPS), passwords are stored only as hashes, each account sees only its own data, and the parent overview is read-only and only for linked accounts.
9. Changes
If we change this policy, the new version will be on this page and we will tell you about significant changes in the app.