This Privacy Notice explains how Andrei Ioan Rada ("Notevio", "we", "us") collects, uses, shares, and protects personal data when you use the Notevio service and website (the "Service"). Andrei Ioan Rada is the data controller for personal data processed through the Service.
1. Data we collect
- Account data: name, email address, login credentials, authentication provider (e.g. Google) identifiers.
- Content you upload: lecture notes, PDFs, text, and other study materials you submit to be processed by the Service.
- Usage data: study sessions, answers, mastery/progress data, feature usage, error logs.
- Device and technical data: IP address, browser type, device identifiers, timestamps.
- Support communications: messages you send to us.
2. How we use your data
- Create and secure your account (contract, legitimate interests).
- Provide the Service, including AI-generated flashcards, MCQs, summaries, and adaptive practice (contract).
- Prevent fraud, abuse, and security incidents (legitimate interests, legal obligation).
- Improve the Service and fix bugs (legitimate interests).
- Respond to support requests (contract, legitimate interests).
- Comply with legal obligations (legal obligation).
3. AI processing
Content you upload is sent to third-party AI model providers to generate study materials. We do not sell your content, and we instruct providers to process it only to return the requested outputs. AI outputs may be inaccurate; verify anything important before relying on it.
4. Sharing your data
We share personal data only with:
- Service providers / subprocessors: hosting, database, authentication, AI model providers, analytics, and error tracking, acting on our instructions.
- Merchant of Record — Paddle.com Market Limited: for sale of subscriptions, checkout, payments, tax compliance, invoicing, refunds, and subscription management. Paddle acts as an independent controller for the payment transaction. See paddle.com/legal/privacy.
- Professional advisers (legal, accounting) where necessary.
- Authorities where required by law.
5. International transfers
Some of our providers are located outside your country, including outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Retention
We keep personal data for as long as your account is active and for a limited period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Uploaded content and generated study materials are deleted when you delete them or when you close your account. Backups are rotated on a rolling basis.
7. Your rights
Subject to applicable law, you may have the right to:
- Access, correct, or delete your personal data.
- Restrict or object to processing.
- Receive a portable copy of your data.
- Withdraw consent where processing is based on consent.
- Complain to your local data protection supervisory authority.
To exercise these rights, contact us at the email below. We aim to respond within one month.
8. Security
We use appropriate technical and organisational measures, including encryption in transit, access controls, and row-level authorization, to protect personal data. No system is 100% secure.
9. Cookies
We use strictly necessary cookies and local storage for authentication and preferences (e.g. language, theme). Payment provider pages may set additional cookies governed by Paddle.
10. Children
The Service is not directed at children under 13, and we do not knowingly collect their data.
11. Changes
We may update this Notice. Material changes will be communicated through the Service or by email.
12. Contact
Andrei Ioan Rada — andersgeko+notevio@gmail.com