Introduction Loominote ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, how it is processed, and the safeguards we implement.

By using Loominote, you agree to the practices described in this policy.

Information We Collect We collect the following types of information:

2.1 Account Information Email address (for account creation and authentication) 2.2 User Content Audio recordings created or uploaded by you Text transcripts generated from recordings Notes, summaries, and action items Uploaded documents (e.g., scanned text or PDFs) 2.3 Usage Data Device type and operating system App version Diagnostic and crash data General feature usage analytics We do not collect biometric identifiers.

How We Use Your Information We use your data to:

Provide transcription, summaries, and action items Improve note clarity and productivity features Maintain account functionality Provide customer support Improve app performance and security We do not sell your personal data.

AI Processing and Data Handling To generate summaries, action items, and insights, Loominote processes:

Audio recordings Text transcripts Uploaded text or documents 4.1 How AI Processing Works Loominote uses a combination of on-device and cloud AI to turn your recordings into transcripts, summaries, and action items:

On-device processing: On Apple devices, parts of transcription and related tasks run locally on the device using Apple's built-in models. This content is processed on your device and is not sent to any third-party provider.

Cloud processing (OpenAI): We use OpenAI's API — Whisper for speech-to-text transcription, and GPT models to generate summaries, action items, and related outputs from your transcripts.

Our cloud infrastructure is hosted on Amazon Web Services (AWS) in the India region.

4.1.1 No Training on Your Data We do not use, transfer, or sell your content — or any Google user data — to create, train, or improve any generalized or foundational AI or machine-learning models. We use the paid OpenAI API (not the consumer ChatGPT product); under OpenAI's API data-usage policy, content submitted through the API is not used to train OpenAI's models, and we have not enabled any option that would allow such use. 4.2 Encryption and Security Data is encrypted in transit using secure protocols (HTTPS/TLS). Access to user data is restricted and protected by security controls. AI processing occurs only after user consent within the app. 4.3 User Consent Before any AI processing occurs, Loominote presents a clear in-app notice explaining how recordings and transcripts are processed. Processing begins only after the user explicitly consents. If a user declines, no AI processing occurs.

Data Retention We retain user content (recordings, transcripts, notes) until:

The user deletes the content within the app, or The user requests account deletion. Deleted data is removed from our active systems within a reasonable timeframe, except where retention is legally required.

Data Sharing We do not sell, rent, or trade your personal data. To provide transcription and summaries, we share the audio and transcripts you choose to process with OpenAI's API (Whisper for transcription and GPT models for summaries), as described in Section 4. OpenAI processes your content only to return the requested result and, under its API data-usage policy, does not use it to train its models. We do not share Google Calendar data with any AI provider, or with any other third party. It is used only to identify meetings you have chosen to record (see Section 7). We may also share limited information with infrastructure providers (such as our cloud host, AWS) solely to operate our systems securely.
Limited Use of Google User Data The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Loominote's use of information received from Google APIs also complies with the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements.

Specifically, we do not use, transfer, or sell Google user data — including raw, aggregated, or derived data — to create, train, or improve any generalized or foundational machine learning or artificial intelligence models.

We access Google Calendar data solely to identify the start time and video-conference link of meetings the user has chosen to record, so our notetaker can join at the right moment. This data is not used for advertising, is not sold, and is not shared with third parties except as required to provide the feature the user requested.

We request only the calendar.events.readonly scope, and Google Calendar data is never sent to any artificial intelligence or machine-learning model.

We do not store your Google Calendar data on our servers. It is fetched only to show your meetings and to let the Loominote notetaker join a meeting you have chosen, and it is not retained on our backend.

International Data Transfers Your data may be processed in regions where our infrastructure operates. We implement appropriate safeguards to protect your data in accordance with applicable laws.
Your Rights You may:

Access your data Correct inaccurate information Delete your recordings and notes Request account deletion To exercise these rights, contact: team@loominote.app

Children's Privacy Loominote is not intended for individuals under the age of 13. We do not knowingly collect personal data from children.
Changes to This Policy We may update this Privacy Policy from time to time. Any changes will be reflected with an updated "Last updated" date.

Continued use of the app constitutes acceptance of the revised policy.

Contact If you have any questions about this Privacy Policy:

BinaryVlue 202, 27th Main Road HSR Layout, Bangalore, India Email: team@loominote.app