Privacy Policy

Lernote · Effective and last updated 4 November 2026

1. Who we are

Lernote (the “Service”) is the Lernote app, website at lernote.com and related services. It is operated by Etai Galili, an individual based in Israel (“Lernote”, “we”, “us”). We are the controller (the party responsible) for the personal information described in this policy, except where we say another company is responsible, such as Apple for payments.

Contact for anything about privacy: support@lernote.com.

2. What this policy covers

This policy explains what personal information we collect when you use the Service, how we use and share it, how long we keep it, and the rights you have. It should be read together with our Terms of Use. “Personal information” means any information that identifies you or can reasonably be linked to you.

This policy does not cover services run by other companies that you reach through Lernote, such as the App Store, Sign in with Apple, Google sign-in or websites you open from a link. Their own privacy policies apply to them (see section 16).

3. Information we collect

3.1 If you use Lernote without an account

The books and documents you import, the books you write in the Studio, your notebooks, highlights, notes, drawings, bookmarks, dictionary words, reading statistics and settings are stored only in your browser's storage on that device. None of it is sent to us, and we can't see it. Our hosting provider still receives the basic technical information any website receives when the app loads (see 3.7). Without an account you can't use sync, shared books or AI features.

3.2 Account information

An account is optional. If you create one, we collect:

• Email address, used to sign you in, send sign-in and password-reset codes, and reach you about your account.
• Password, if you choose one. It is stored only as a secure one-way hash. We never see or store the password itself.
• Sign in with Apple or Google: if you use either, that company tells us your email address and a unique account ID, and may also share the name or profile picture on that account. With Sign in with Apple you can choose to hide your email, in which case we receive only a private relay address from Apple. We don't receive your Apple or Google password.
• Account dates, such as when you signed up and last signed in.

3.3 Your content, when you sync

When you're signed in, we store the following so your devices stay the same:

• your books and documents and their files, covers and images, and the books you write in the Studio;
• your notebooks, notes, drawings and handwriting, highlights, bookmarks and dictionary words;
• your reading positions, reading statistics and goals, and app settings.

We call this “your content”. We store it only to provide sync and the features you use. We don't read, review, analyse or mine it for any other purpose. See section 4 for the narrow exceptions, such as fixing a problem you report or responding to a legal requirement.

3.4 Shared books and collaboration

If you create a shared book or join one through an invite link, we store the book, its changes and your role in it (owner, editor or viewer), plus the display name and colour you appear under. Other members of that book can see the shared content, your display name and colour, and which changes you made. Anyone who has an active invite link can join the book with the role it grants, so share links only with people you trust. The owner can revoke links at any time.

3.5 AI features

When you ask the AI a question or use another AI feature, we process the question, the parts of your book, document, notebook or page images needed to answer it, and the conversation so far. We also keep a usage record for each answer: the time, the model used, where in the app you asked (for example, in a book or a notebook), the amount of text processed (tokens) and the credits charged. The usage record does not contain your question, your content or the answer. Full details are in section 5.

3.6 Purchases and plan status

If you buy a plan, Apple processes the payment. We receive only what we need to give you what you bought: the product you bought, the purchase and renewal dates, the subscription status (for example, active, cancelled or expired), Apple transaction identifiers and the country or currency of the purchase. We use this to unlock your plan, to apply Restore Purchases, and to track your AI credit balance. We never receive your card number, bank details or billing address. See section 6.

3.7 Technical information

Like any online service, when your device connects to Lernote, our hosting providers automatically receive technical information: your IP address, browser and device type, operating system, the time and the address requested, and error information if something fails. This is used to deliver the app, keep it secure, prevent abuse and fix problems. We don't use it to track you across sites or to build a profile about you.

If you use Add from a link, our server downloads the file at the web address you give it and passes it straight to your device. The file isn't stored or looked into on our server, but the address and the request are handled by our hosting provider.

3.8 When you contact us

If you email us, we receive your email address, your message and anything you choose to attach. We use it only to answer you and to keep a record of the request.

3.9 What we don't collect

We don't collect your precise location, contacts, photos library (other than images you choose to import), microphone or camera recordings, advertising identifiers or browsing history. We don't use analytics, advertising or social-media tracking tools.

4. How we use it and why

We use personal information only for the purposes below. Where the EU or UK General Data Protection Regulation (GDPR) or a similar law applies, we rely on the legal basis shown.

We do not use your information for advertising, we don't sell it, and we don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Automatic checks, such as AI credit limits, plan limits and abuse protection, only control access to features.

We may send marketing emails only if you've agreed to them, and every such email will let you unsubscribe. We don't send any today.

5. AI features

5.1 What's sent and when

AI features run only when you use them, for example when you ask a question about a book or a notebook. Nothing is sent to the AI in the background. When you ask, our server sends the following to our AI provider, Anthropic, PBC (makers of Claude):

• your question and the earlier messages in that conversation;
• the text, and where needed the page images, from the book, document or notebook you're asking about that the answer needs;
• our own instructions to the model.

We don't send your email address, name or other account details with the request. AI is available only to signed-in users so that credits can be applied and abuse prevented.

5.2 How Anthropic handles it

• Anthropic acts as our service provider (data processor). It processes the request only to produce the answer and to keep its own service safe, under its commercial terms and data processing terms.
• Anthropic does not use content sent through its commercial API to train its models.
• Anthropic keeps requests and answers only for a limited time, under its retention policy (generally up to 30 days). It may keep them longer only where needed to enforce its usage policies or comply with law, for example when a request is flagged for a safety review.
• Anthropic's own privacy information: anthropic.com/legal/privacy.

5.3 What we keep

AI conversations are kept in your account so you can see them again and sync them, and you can delete them like the rest of your content. For each answer we keep the usage record described in 3.5. We use it to show your Usage screen, apply credits and plan limits, and spot abuse. It doesn't include what you asked or what the AI answered.

5.4 Things to keep in mind

• AI answers are generated automatically and can be wrong, incomplete or out of date. Check anything important yourself, and don't rely on AI answers for medical, legal, financial or other professional advice.
• Avoid sending the AI sensitive information you don't need to, such as health information, government ID numbers or other people's private details.
• Only ask the AI about material you have the right to use (see section 14).
• If you don't want any of your content processed by the AI provider, simply don't use the AI features. Everything else works without them.

6. Purchases and payments

All purchases in Lernote are made through Apple's App Store In-App Purchase and charged to your Apple account. Apple is responsible for processing the payment and for the billing information it collects. Apple's Privacy Policy and the App Store terms apply to that information. Subscriptions, cancellations and refunds are managed by Apple in your Apple account settings. We can't issue App Store refunds ourselves.

We receive only the purchase information described in 3.6, and we use it only to provide and manage your plan, apply Restore Purchases, prevent fraud, and keep the records the law requires.

7. Who we share it with

We don't sell your personal information, and we don't share it for advertising. We share it only as follows.

7.1 Service providers

These companies help us run Lernote. They act on our instructions and are bound by contracts to protect the information and use it only to provide their service to us.

7.2 Other companies you choose to use

Apple (App Store purchases and Sign in with Apple) and Google (Google sign-in) handle your information as independent companies under their own privacy policies. We exchange with them only what's needed for the purchase or sign-in.

7.3 People you share with

Content you put in a shared book, and your display name and colour there, can be seen by the members of that book (see 3.4).

7.4 Legal reasons and protection

We may access, keep or disclose information if we believe in good faith that it's reasonably necessary to: comply with a law, regulation, court order or lawful request from a public authority; enforce our Terms or investigate possible violations; detect, prevent or address fraud, security or technical problems; or protect the rights, property or safety of Lernote, our users or the public. Where the law allows, we'll try to tell you before disclosing your information in response to a legal demand.

7.5 If the Service changes hands

If Lernote is transferred, for example sold, merged or moved to a company we set up, personal information may be transferred as part of that. The receiving party will have to respect this policy, and we'll tell you before your information becomes subject to a different policy.

8. International transfers

We're based in Israel, and our service providers may store or process information in the United States, the European Union and other countries. These countries may have different data protection laws from where you live. The European Commission recognises Israel as giving an adequate level of protection. When personal information from the EU, UK or Switzerland goes to a country without such a decision, such as the United States, we rely on appropriate safeguards. These include the European Commission's Standard Contractual Clauses (and their UK and Swiss equivalents) in our providers' data processing terms, or a provider's certification under the EU-US Data Privacy Framework where available. You can ask us for more information about these safeguards.

9. How long we keep it

We keep personal information only as long as we need it for the purposes in this policy:

We may keep information longer if we have to by law, or if it's needed to resolve a dispute, enforce our agreements or defend a legal claim, and only for as long as that's needed. Information stored only on your device stays there until you remove it (see section 12).

10. Security

We protect your information with technical and organisational measures appropriate to the risk. Data is encrypted in transit (HTTPS) and at rest by our providers. Database access rules make your data available only to your own account and to the members of books you share. Passwords are stored only as secure hashes. Our server functions are the only part of the Service that holds the keys to the AI provider and the admin side of the database, and access to them is limited to us.

Like any online service, the operators of the Service can technically access stored data. We access it only when needed to keep the Service running, to fix a problem you ask us to look at, or when the law requires it.

No method of transmission or storage is completely secure, so we can't guarantee absolute security. You help by using a strong, unique password, keeping your devices and sign-in details safe, sharing invite links only with people you trust, and keeping your own backup of anything important. If a security incident affects your personal information, we'll notify you and the relevant authorities where the law requires.

11. Your rights and choices

Depending on where you live, you have some or all of these rights over your personal information:

• Access: get a copy of the information we hold about you.
• Correction: fix information that's wrong or incomplete.
• Deletion: have your information deleted.
• Portability: get your content in a usable format (Settings has a backup you can download).
• Restriction and objection: ask us to limit how we use your information, or object to processing based on our legitimate interests.
• Withdraw consent: where we rely on consent, withdraw it at any time. This doesn't affect what was done before.
• Complain: to a data protection authority (see section 17).

Most of this you can do yourself in the app: change your details, export a backup, delete content, or delete your account. For anything else, email support@lernote.com. We'll answer within 30 days, or sooner if your local law requires it. To protect your account, we may need to confirm your identity first, normally by having you write from the email address on the account. We won't treat you differently for using your rights.

Some requests can be limited by law. For example, we can't hand over other people's information, and we may have to keep records the law requires.

12. Exporting and deleting your data

• Back up: Settings lets you download a backup of your library to keep or move.
• Delete your account: open Settings → Delete account…. This permanently deletes your account and everything synced to it from our servers. Backups clear within the period in section 9. This can't be undone.
• Remove data from a device: Sign out clears that device and keeps your account. You can also use Reset all data in the app's menu, or clear the site's data in your browser settings.
• Subscriptions: deleting your account doesn't cancel an App Store subscription. Cancel it in your Apple account settings, otherwise Apple keeps charging you.
• Sign in with Apple: you can also stop using it with Lernote in your Apple account settings.

13. Children

Lernote isn't directed at young children. You must be at least 13 years old to create an account, or at least 16 if you live in the European Economic Area or the United Kingdom, unless your country sets a lower age or a parent or guardian has given consent where the law allows it. If you're under 18, or under the age of majority where you live, please use Lernote with a parent's or guardian's permission. Without an account, nothing is collected (see 3.1).

We don't knowingly collect personal information from children below these ages. If you believe a child has given us personal information, contact us and we'll delete it.

14. Your content and other people's information

What you import or write stays yours, as set out in the Terms. You're responsible for making sure you have the right to import, store, share and ask the AI about the material you use in Lernote. If your content contains other people's personal information, such as names in notes or documents you import, you're responsible for having a lawful reason to use it. For that content we act on your behalf: we store and process it only to provide the Service to you. If someone asks us about their information in your content, we may refer them to you.

15. Cookies and device storage

Lernote doesn't use advertising, analytics or tracking cookies. It uses your browser's own storage (such as IndexedDB and local storage) to keep your library, your settings and, if you sign in, your session on your device. This storage is strictly necessary for the app to work, stays on your device, and isn't used to track you. You can clear it in your browser settings, which removes anything not synced to an account. Because we don't track you, we don't respond differently to “Do Not Track” signals.

16. Other companies' services and links

Lernote lets you use services run by other companies, such as Apple and Google, and to open or import from websites run by others. We don't control those services or sites and aren't responsible for their content or privacy practices. Please read their privacy policies.

17. Regional information

Israel

We handle personal information under the Israeli Protection of Privacy Law, 5741-1981, and its regulations. You can review the information we hold about you and ask us to correct or delete it as described in section 11. You may also contact the Privacy Protection Authority at the Israeli Ministry of Justice. You aren't legally required to give us any personal information. You can use Lernote without an account, but without the information listed in 3.2 we can't provide sync, sharing, AI or purchases.

European Economic Area, United Kingdom and Switzerland

The rights in section 11 apply to you under the GDPR, the UK GDPR or Swiss law, and the legal bases are listed in section 4. You can complain to the data protection authority where you live or work, or where you believe a violation happened, though we'd appreciate the chance to sort it out with you first.

United States, including California

We don't sell personal information and don't “share” it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act and similar state laws, and we haven't done so in the past 12 months. We don't use sensitive personal information to infer characteristics about you. The categories we collect are described in section 3: identifiers (such as your email and account ID), commercial information (plan and purchase status), internet activity (technical information), and the content you choose to store. We collect them from you, your device, and Apple or Google when you use them, for the purposes in section 4, and we disclose them only to the recipients in section 7. Depending on your state, you can ask to know, access, correct or delete your information and to appeal our decision. Email us, and you can use an authorised agent. If we decline a request, you can appeal by replying to our answer.

18. Changes to this policy

We may update this policy as the Service or the law changes. The date at the top always shows the latest version. If a change materially affects how we handle your personal information, we'll tell you in advance, in the app or by email. Where the law requires your consent to a change, we'll ask for it. Continuing to use the Service after a change takes effect means the updated policy applies.

19. Contact

Questions, requests or complaints about privacy:
Etai Galili (Lernote), Israel
support@lernote.com

This policy is written in English. If it's translated, the English version applies where there's a difference, to the extent the law allows.

← Back to Lernote