Privacy Policy

Last updated: November 10, 2026

Smart Notes ("Smart Notes," "we," "our," or "us") is an Anki extension and accompanying web service that uses artificial intelligence to generate flashcard content. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

By using Smart Notes you agree to this Privacy Policy. If you do not agree, do not use the service.

The service is operated by Rosebud Labs, LLC, a Delaware limited liability company, and is intended for users worldwide.

1. Information We Collect

Account information

When you create an account we collect your email address and sign-in details through our authentication provider. You can sign in with email and password or with Google, and we may add more sign-in methods over time.

Content you submit

When you use Smart Notes to generate flashcard content, the text of the Anki note fields you choose, along with your prompts and settings, is sent to our servers and to third-party AI providers to generate results.

We do not store the content of your prompts or your notes on our servers after a request completes.

Usage and billing information

We store information needed to run your account and bill you, including your subscription plan, credits used, identifiers of the Anki notes you generate for (not their text), payment-processor customer identifiers, and account status. Payment card details are handled by our payment processor, Stripe — we never see or store card numbers.

Device, log, and diagnostic information

When you use the service we automatically collect your IP address, request metadata (such as the model used and credits consumed), server logs, and error reports, which may include the content of the request that caused the error.

Analytics

We use analytics tools to understand how people use our website and the extension and to improve them. This data is linked to your account when you are signed in. The extension creates a random identifier for each installation and sends it with its requests, including before you sign in; once you sign in, we link that identifier to your account.

Session replay

On our website and in the extension's Smart Notes window, we record interactions such as clicks, scrolling, and the screens you open, to find and fix usability problems. Text you type into website forms is masked.

Cookies

We use cookies that are needed to keep you signed in and to process payments, as well as analytics cookies and similar browser storage on our website. We do not use advertising cookies.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, secure, and improve the service, including generating AI responses to your requests.
Manage your account, subscription, and billing.
Enforce usage limits and detect or prevent fraud and abuse (this is the primary reason we collect and store IP addresses).
Communicate with you about your account, the service, and (where permitted) product updates.
Debug errors, monitor service health, and improve reliability and performance.
Understand what kinds of material people study with Smart Notes, to improve the service.
Develop new features and improve existing ones.
Comply with legal obligations and enforce our terms.

We may also use de-identified or aggregated data — data that does not identify you — for any purpose, including research, benchmarking, analytics, and improving the service. We do not use your content or the results generated from it to train AI models.

3. AI Processing and Third-Party AI Providers

We send your prompts and note content to third-party AI providers (such as OpenAI, Anthropic, Google, ElevenLabs, and Microsoft Azure) to generate results. We use their business API services, under which they do not use your content to train their models, and each provider processes it under its own terms. We may change AI providers over time.

4. Sub-Processors and Service Providers

We use third-party service providers for hosting, databases, payments, authentication, email, analytics, session replay, logging and error monitoring, and customer communication. These providers process data on our behalf to provide their services to us.

5. How We Share Information

We do not sell your personal information or share it for cross-context behavioral advertising. We share personal information in the following circumstances:

With our service providers and AI providers, to operate the service.
At your direction or with your consent.
When required by law, legal process, or a valid governmental request.
To protect the rights, property, or safety of Smart Notes, our users, or the public, including investigating fraud or abuse.
In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, in which case personal information may be transferred as part of the transaction and we will make reasonable efforts to notify you before it becomes subject to a different privacy policy.

6. Data Retention

Account information is retained while your account is active.
Prompt and note content is not currently retained on our servers after a request completes.
Usage and billing records are retained while your account is active and as required by tax and accounting rules after that.
IP addresses kept for fraud and abuse detection are retained for up to 90 days.
Server logs and error reports are retained according to our providers' retention policies, typically up to 90 days.
Analytics data is retained according to our analytics providers' retention policies.
Backups of the database may persist for a limited time after deletion.

7. Data Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS) and encryption at rest at the database level. No system is perfectly secure, and we cannot guarantee the absolute security of your data.

8. International Data Transfers

Our infrastructure is currently located in the United States, and our service providers and AI providers may process data in the United States and other countries. By using the service you consent to your information being transferred to, processed in, and stored in the United States and other countries where our providers operate.

If you are in the European Economic Area, the United Kingdom, or Switzerland, transfers of your personal information outside of those regions are made under appropriate safeguards, such as the Standard Contractual Clauses, where required.

9. Your Rights

Depending on where you live, you may have the following rights with respect to your personal information:

Access — request a copy of the personal information we hold about you.
Correction — request that we correct inaccurate information.
Deletion — request that we delete your personal information.
Restriction or objection — request that we limit or stop certain types of processing.
Portability — request your information in a portable format.
Withdraw consent — where we rely on your consent, you may withdraw it at any time.

To exercise any of these rights, email us at support@smart-notes.xyz. We will respond within a reasonable period and within the time required by applicable law. If you are in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data-protection authority.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) to know what personal information we have collected, to request deletion, and to request correction of inaccurate personal information. We do not sell your personal information or share it for cross-context behavioral advertising.

Account deletion

To delete your account and the personal information associated with it, email us at support@smart-notes.xyz and we will process your request promptly. Some information may persist in backups for a limited period as described in Section 6.

10. Children's Privacy

Smart Notes is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@smart-notes.xyz and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this policy. If the changes are material, we will provide additional notice (for example, by email or through the service) where required by law. Your continued use of the service after the changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or our data practices, contact us at support@smart-notes.xyz.