Version 2.1 | Effective Date: March 24, 2026
Welcome to Norsha Notes! This Privacy Policy explains how Norsha Dynamics, LLC ("we," "us," "our," or "Norsha Dynamics"), a Texas limited liability company, collects, uses, shares, and protects your information when you use the Norsha Notes web application ("Platform") at norshanotes.com.
We are committed to protecting your privacy and being transparent about our data practices. Please read this policy carefully.
By using Norsha Notes, you agree to the collection and use of information as described in this policy.
Data Controller: Norsha Dynamics, LLC — Email: contact@norshadynamics.com
We use the following trusted third-party services to operate the Platform. We do not sell your personal information to third parties.
Google Gemini 2.5 Flash (AI Generation)
Powers all AI features including study guide generation, flashcard creation, quizzes, glossaries, and the AI Tutor (Nora). Your text inputs and uploaded images are sent to Google's Gemini API for processing. Under Google's paid API terms, your inputs and outputs are not used to train AI models.
Firebase / Google Cloud (Authentication & Database)
Firebase Authentication manages user accounts and login. Cloud Firestore stores your account data, study guides, quiz scores, tutor sessions, learner profile, streak, and all other study activity data. Data is encrypted in transit (TLS) and at rest. Hosted on Google Cloud servers in the United States.
Stripe (Payments)
Processes all subscription payments and billing. We never receive or store your credit card information. Stripe handles all payment data in accordance with PCI-DSS standards.
Vercel (Hosting)
Hosts the Norsha Notes web application. Vercel may receive standard web request data (IP address, browser type) as part of serving the Platform.
Web Speech API (Voice Input)
A browser-native API used for voice input in the AI Tutor. Speech processing occurs entirely within your browser. No audio data is transmitted to Norsha Dynamics servers. See Section 5 for full details.
The AI Tutor (Nora) supports voice input via the Web Speech API, a feature built into modern web browsers. Here is exactly how it works:
Voice input availability depends on your browser's support for the Web Speech API. We encourage you to review your browser's privacy documentation for information about how it handles audio processing locally.
You may upload images when generating study guides or when sending messages to the AI Tutor (Nora). Image uploads are available on all plans subject to the daily limits described in our Terms of Service. When you upload an image:
Only upload images you own or have the right to share. Do not upload images containing sensitive personal information about yourself or others.
Your data is stored on Google Cloud (Firebase/Firestore) servers located in the United States.
| Data Type | Retention Period |
|---|---|
| Account information (email, name, plan) | Duration of account + 30 days after deletion |
| Study guides and generated content | Until you delete it or close your account |
| Quiz scores and score history | Until you delete them or close your account |
| AI Tutor chat sessions | Last 30 messages per session; until account deletion |
| Mistake history and learner profile | Until account deletion |
| Flashcard schedules and mastery data | Until account deletion |
| Study streak data | Until account deletion |
| Match / Connect game best times | Until account deletion |
| Daily image upload counts | Resets daily at midnight UTC; until account deletion |
| Uploaded images | Processed and not permanently stored |
| Usage analytics | 26 months |
| Crash reports | 90 days |
| IP addresses | 14 days |
| Purchase history | 7 years (tax and legal compliance) |
| Support communications | 3 years |
When you delete your account, we begin deletion of your personal data within 30 days. Some data may persist in encrypted backups for up to 90 days. Purchase history is retained for 7 years as required by law. Anonymized, aggregated data may be retained indefinitely.
You have the following rights regarding your personal data. To exercise any of these rights, email contact@norshadynamics.com. We will respond within 30 days (up to 45 days for complex requests). We may need to verify your identity before processing requests.
Norsha Notes is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13.
When you create an account, we ask for your date of birth. If you indicate you are under 13, you will not be able to create an account and no personal information will be collected or stored.
If you are a parent or guardian and believe your child under 13 has provided personal information to us, contact us immediately at contact@norshadynamics.com. We will promptly investigate and delete any such information.
If you are a California resident, you have additional rights under the CCPA and CPRA, including the right to know, delete, correct, opt-out of sale/sharing, limit use of sensitive personal information, and non-discrimination.
We do NOT sell your personal information. We do not share your personal information for cross-context behavioral advertising.
To submit a California privacy request, email contact@norshadynamics.com with "California Privacy Request" in the subject line. We will respond within 45 days.
If you are in the EEA, United Kingdom, or Switzerland, you have rights under GDPR, including the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time.
Contact us at contact@norshadynamics.com with "GDPR Request" in the subject line. We will respond within 30 days.
Our services are operated from the United States. By using Norsha Notes, your information is transferred to and processed in the United States. By using the Platform, you acknowledge and consent to this transfer. If you object to international data transfers, you may choose not to use the Platform.
Norsha Notes is a web application. We use minimal tracking technologies:
We do not use:
We may update this Privacy Policy from time to time. For material changes, we will notify you via email or in-app notification at least 30 days before changes take effect. Minor changes will be reflected in the updated "Effective Date." Your continued use of the Platform after the effective date constitutes acceptance.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Norsha Dynamics, LLC
Email: contact@norshadynamics.com
We will respond to inquiries within 5 business days and process formal privacy requests within 30 days.
For GDPR requests, include "GDPR Request" in the subject line. For CCPA requests, include "California Privacy Request" in the subject line.
This Privacy Policy was last updated on March 24, 2026.