Privacy Policy

Last updated: September 28, 2026

This is a general-purpose privacy policy describing, in plain terms, what NoteHeads.in actually collects and how it's used. It's not a substitute for advice from a lawyer or a formal data-protection audit — if you operate under GDPR, CCPA, or a similar regime and need a policy that meets its specific requirements, please have one drafted or reviewed by counsel.

1. What we collect

Data	Why
Name, email, profile photo (via Google Sign-In)	To identify your account and let you sign in
Compositions, study history, chat messages with Prof. NoteHead	To save and restore your work across sessions and devices
Tool usage events (e.g. "opened NoteSwar," "completed a quiz")	To power your dashboard's activity feed, streaks, and stats
Institution/role data (for teachers and admins)	To manage rosters, classes, and seat billing
Payment metadata (plan, amount, order/subscription ID — never full card numbers)	To process subscriptions, institutional, and streak-saver purchases, and to bill Plus/Pro subscriptions automatically each cycle until cancelled
Phone number, and your written explanation (submitted only if you request a refund)	To verify and review that specific refund request. Not collected otherwise, and not used for marketing
Device/browser info, page views (via Google Analytics)	To understand product usage in aggregate

2. Where it's stored

Account and product data is stored in Google Firebase (Authentication and Firestore), hosted on Google Cloud infrastructure. Audio you record with ShowerHead Mic is processed in your browser; we don't retain raw audio on our servers longer than needed to serve the feature.

3. Who we share it with

Google Firebase — authentication and data storage.
Razorpay / Dodo Payments — payment processing for institutional plans and streak savers. We receive confirmation of payment, not your card details.
Brevo / Resend — transactional email (invites, receipts, notifications).
Google Analytics (GA4) — aggregate, anonymized-where-possible usage analytics.
A third-party language model provider — processes messages you send to Prof. NoteHead in order to generate a response.

We don't sell your personal data to anyone, and we don't share it with advertisers.

4. Collaboration features

NoteSwar's collaboration rooms use Firebase Realtime Database to sync a composition live between people who join the same room code. Anyone with the room code can read and write to that room while it's active — don't share a room code with anyone you don't want editing that composition.

5. Your choices

You can review or delete saved compositions and study history from within each tool.
You can delete your account by contacting us at the email below; we'll remove your account data within a reasonable time, except where we're required to keep records (e.g. for tax/billing purposes).
You can ask what personal data we hold about you, or ask us to correct it, at any time.

6. Children's privacy

NoteHeads is used in some school settings by students under 18, typically added by a teacher or institution admin rather than signing up directly. If you're a parent or guardian with questions about a student's account, contact us using the details below.

7. Security

We use industry-standard practices (encrypted connections, access-controlled databases, token-based authentication) to protect your data, but no system is 100% secure. If we become aware of a breach affecting your data, we'll notify affected users as required by applicable law.

8. Changes to this policy

We may update this policy as the product changes. We'll update the "Last updated" date above when we do. Material changes will be communicated via the product or by email where practical.

9. Contact

Questions, data requests, or deletion requests can be sent to socials.noteheads.in@gmail.com.