01. Introduction and Scope

Clipnote, Inc. ("Clipnote," "we," "us," or "our") is committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use the Clipnote mobile application, website, and related services (collectively, the "Service"). This Privacy Policy is incorporated into and forms part of our Terms of Service. By using the Service, you consent to the practices described in this Privacy Policy.

This policy applies to all users of the Service, including visitors, registered users, and creators. If you do not agree with any part of this Privacy Policy, please discontinue use of the Service immediately.

02. Information We Collect

2.1 Account Information

When you register for an account, we collect: your email address; the username you choose; your date of birth (for age verification); your profile photo (if you choose to upload one); your bio and genre preferences; and any other information you voluntarily add to your profile.

2.2 Content You Create and Post

We collect and store all content you submit to the Service, including: audio recordings you upload or record within the app; written notes, titles, and descriptions; cover images you upload; comments you post on others' content; and direct messages you send to other users.

2.3 Usage and Activity Data

We automatically collect information about how you interact with the Service, including: content you listen to, how long you listen, and at what point you stop; notes you clip, save, or share; content you comment on, report, or interact with; notes you publish and their engagement metrics; search queries you enter; followers and accounts you follow; and subscription activity.

2.4 Device and Technical Information

When you access the Service, we automatically collect: device type, model, and manufacturer; operating system and version; app version; unique device identifiers (such as advertising ID or device ID); IP address; general location derived from your IP address (country and region level only — we do not collect precise GPS location without explicit permission); and network type (WiFi, cellular).

2.5 Communications Data

If you use in-app direct messaging, post comments, submit feedback, or contact our support team, we collect the content of those communications. Support correspondence may be retained for quality assurance and legal compliance purposes.

2.6 Cookies and Tracking Technologies

We use the following tracking technologies:

• Session cookies — required for authentication and maintaining your logged-in state. These are deleted when you close the app.
• Analytics cookies — used to understand aggregate usage patterns, such as which features are most used, to improve the Service. These are de-identified and not tied to your personal identity.

We do not use third-party advertising tracking technologies, ad network cookies, or pixel trackers from social media platforms.

03. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Operating and Providing the Service

To authenticate your identity and manage your account; to deliver content to your feed; to process and display your User Content; to facilitate interactions between users (following, clipping, commenting, messaging); and to process subscription payments.

3.2 Personalizing Your Experience

To personalize your content feed and discovery recommendations based on your listening history, genre preferences, and engagement patterns; and to suggest writers you might want to follow.

3.3 Communications

To send you transactional communications, including account confirmations, security alerts, password reset emails, and subscription receipts — these are essential and cannot be opted out of while your account is active. To send you optional marketing and feature announcement emails — you can opt out of these at any time by clicking "Unsubscribe" in any such email or by adjusting your notification preferences in Settings.

3.4 Safety, Security, and Enforcement

To detect, prevent, and respond to fraud, abuse, spam, and other harmful or illegal activity; to enforce our Terms of Service and community guidelines; to investigate reports of content violations; and to protect the rights, property, and safety of Clipnote, our users, and the public.

3.5 Analytics and Improvement

To analyze usage patterns and trends in aggregate (not individually identified) to understand how the Service is used; to test new features and measure their effectiveness; to troubleshoot bugs and technical issues; and to develop new features and improve existing ones.

3.6 Legal Compliance

To comply with applicable laws, regulations, and governmental requests; to respond to valid legal process, including subpoenas and court orders; and to protect Clipnote's legal rights.

04. How We Share Your Information

4.1 No Sale of Personal Data

4.2 Advertising and Platform Promotion

4.3 Service Providers

We share your information with carefully selected third-party service providers who assist us in operating the Service. These providers are permitted to use your information only as necessary to perform their contracted services for Clipnote and are bound by data processing agreements that prohibit them from using your data for their own purposes. Categories of service providers include:

• Cloud infrastructure and hosting
• Payment processing (Apple App Store, Google Play)
• Email delivery services
• Customer support platforms
• Crash reporting and performance monitoring

4.4 Legal Compliance and Law Enforcement

We may disclose your information to courts, law enforcement agencies, government authorities, or other third parties if we determine, in our reasonable judgment, that such disclosure is required by applicable law, legal process (such as a subpoena, warrant, or court order), or is necessary to protect the rights, property, or safety of Clipnote, our users, or the public. Where legally permissible, we will attempt to notify you of such requests before complying.

4.5 Business Transfers

If Clipnote is involved in a merger, acquisition, reorganization, bankruptcy, asset sale, or similar transaction, your personal information may be transferred as part of that transaction. We will notify affected users via email and prominent in-app notice at least thirty (30) days before your information is transferred and becomes subject to a materially different privacy policy. You will have the opportunity to close your account before the transfer takes effect.

4.6 With Your Consent

We will share your personal information with third parties in ways not described in this Privacy Policy only with your explicit prior consent.

4.7 Publicly Posted Content

Content you post publicly on Clipnote — including your notes, comments, profile information, and username — is visible to all users of the Service and may be indexed by search engines and archived by third parties outside our control. Please consider carefully what you share publicly.

05. Data Retention

We retain your personal information for as long as your account is active and as necessary to provide you the Service. Specifically:

• Account information and User Content are retained while your account remains open. Upon account deletion, your public-facing content and personally identifiable information will be deleted or fully anonymized within thirty (30) days.
• De-identified analytics data derived from your usage may be retained indefinitely, as it cannot be used to re-identify you.
• Data necessary for legal compliance, dispute resolution, enforcement of agreements, or fraud prevention may be retained beyond account deletion for as long as legally required or necessary for those purposes.
• Backup copies of data are maintained on a rolling cycle and are permanently purged within ninety (90) days following deletion from primary systems.
• Direct messages are retained as long as either participating account remains active. If both accounts are deleted, messages are deleted within thirty (30) days.

06. Your Rights and Choices

6.1 Access and Correction

You may access and update your account information at any time through Settings → Account Info within the app.

6.2 Account Deletion

You may permanently delete your account and associated personal data by navigating to Settings → Account → Delete Account, or by emailing privacy@clipnote.social. Deletion is permanent and cannot be reversed.

6.3 Data Export

You may request a machine-readable export of your personal data — including your account information, content, and listening history — by contacting privacy@clipnote.social. We will provide the export within thirty (30) days of your verified request, free of charge for one request per twelve-month period.

6.4 Marketing Communications

You may opt out of marketing and promotional emails at any time by clicking the "Unsubscribe" link in any such email or by updating your notification preferences in Settings → Notifications.

6.5 California Residents — CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, disclose, or sell
• The right to request deletion of your personal information (subject to certain exceptions)
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information (we do not sell personal information)
• The right to limit the use of sensitive personal information
• The right to non-discrimination for exercising your CCPA rights

To submit a verifiable consumer request under CCPA, contact privacy@clipnote.social with the subject line "CCPA Request." We will respond within forty-five (45) days.

6.6 EU, UK, and EEA Residents — GDPR Rights

If you are located in the European Union, United Kingdom, or European Economic Area, you have rights under the General Data Protection Regulation (GDPR) and/or UK GDPR, including:

• The right to access your personal data
• The right to rectify inaccurate personal data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing based on legitimate interests
• The right to lodge a complaint with your local data protection supervisory authority

Our lawful bases for processing your personal data are: (a) performance of a contract — processing necessary to provide you with the Service you have requested; (b) legitimate interests — processing for analytics, security, fraud prevention, and service improvement, where not overridden by your rights; and (c) consent — where we have asked for and received your explicit consent, such as for marketing communications.

To exercise your GDPR rights, contact privacy@clipnote.social. We will respond within thirty (30) days, consistent with GDPR requirements.

07. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect, use, or share personal information from children under 13. If we discover that a user under the age of 13 has registered for the Service, we will immediately delete the account and all associated personal data. If you are a parent or guardian and believe your child under the age of 13 has created an account or provided us with personal information, please contact us immediately at privacy@clipnote.social with the subject line "Child Account Removal" and we will take prompt action.

For users between 13 and 18 years of age, we recommend that parents and guardians review this Privacy Policy with them.

08. Security

8.1 Technical and Organizational Measures

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS 1.2 or higher) for all data transmitted between your device and our servers
• AES-256 encryption for sensitive data stored at rest
• Role-based access controls that limit employee access to personal data to those with a documented business need
• Regular internal security reviews and external penetration testing on an annual basis
• A formal incident response plan
• Secure development practices, including code review and vulnerability scanning

8.2 Limitations

No system of data transmission or storage can be guaranteed to be 100% secure. While we use commercially reasonable measures to protect your data, we cannot guarantee its absolute security. You use the Service at your own risk.

8.3 Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and any applicable supervisory authority as required by law — including within 72 hours under GDPR where feasible. Notification will be provided via email to your registered address or via prominent in-app notice.

09. Third-Party Links and Services

The Service may contain links to third-party websites, apps, or services that are not operated by Clipnote. When you click on such links, you will leave the Service and be subject to the privacy practices of those third parties. We are not responsible for the privacy practices of third-party services and encourage you to review their privacy policies before providing any personal information. This includes social media platforms you may choose to share content to through our share features.

10. International Data Transfers

Clipnote is based in the United States. If you use the Service from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. Data protection laws in these countries may differ from those in your home country. Where we transfer personal data from the EU, UK, or EEA to countries not deemed to provide an adequate level of data protection, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or UK Information Commissioner's Office.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. For material changes, we will provide at least thirty (30) days' advance notice via email to your registered address or via a prominent in-app notification. The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revisions were made. We encourage you to review this Privacy Policy periodically. Your continued use of the Service following notice of changes constitutes your acceptance of the updated Privacy Policy.

12. Contact and Data Controller Information

For privacy-related questions, requests, or concerns:

Clipnote, Inc.
[Address]
United States

For EU/UK data subjects — EU/UK Representative:
eurepresentative@clipnote.social
[EU Representative Address to be updated]