Privacy Policy

1. Information We Collect

Airpen, a product of Almond Group ("Airpen," "we," "our," or "us"), collects information necessary to provide our intelligent learning workspace:

• Account & Authentication: Name, email address, password hashes, multi-factor authentication preferences, device trust signatures, and OAuth profiles (e.g., Google Sign-In) managed securely via our authentication partners.
• Audio & Lecture Recordings: Audio streams, recorded lecture files, ambient audio snippets, and associated audio timestamps submitted for indexing and transcription.
• Study & Learning Content: Transcripts, notes, LaTeX formulas, code snippets, concept maps, flashcards, diagnostic quiz responses, study plans, and uploaded academic documents (e.g., course slides, syllabi, PDF readings).
• Technical & Usage Data: IP addresses, browser types, session timestamps, device identifiers, and execution logs from interactive code sandbox sessions.

2. Audio Processing & Transcription

When you record or upload audio to Airpen, files are processed through secure speech-to-text pipelines to create time-synchronized transcripts and structured study artifacts. Audio data is encrypted in transit and at rest. You retain full control to delete raw audio recordings from your workspace at any time without deleting your generated concept maps or notes.

3. AI Model Training & Data Privacy Commitment

We do not use your private study notes, audio recordings, lecture transcripts, or uploaded course materials to train public foundational AI models.

AI processing is performed strictly to fulfill your direct requests—such as generating structured notes, synthesis summaries, flashcards, LaTeX equations, and diagnostic quizzes—using enterprise APIs with contractual zero-data-retention or isolated tenant boundaries.

4. How We Use Information

We use your information to:

• Authenticate your identity, enforce device trust, and secure your workspace.
• Process, transcribe, and synthesize audio recordings and course documents into structured knowledge.
• Execute Python algorithms and calculations within our isolated browser STEM sandbox.
• Deliver scheduled spaced-repetition flashcards, active recall questions, and study plans.
• Monitor infrastructure performance, troubleshoot bugs, and improve service reliability.
• Communicate critical product updates, security notices, and customer support responses.

5. Service Providers & Sub-processors

We partner with vetted third-party service providers to deliver core platform functionality, including authentication (Clerk), cloud hosting, managed databases, encrypted object storage, email delivery, and AI speech-to-text processing. All sub-processors are bound by strict data processing agreements and security standards. Airpen never sells or rents your personal data.

6. Data Portability, Retention & Deletion

You maintain complete ownership of your academic content. You can export your notes, formulas, and flashcards in open formats (such as Markdown, LaTeX, and JSON) at any time. When you request account deletion through settings, all personal records, transcripts, and study workspaces are permanently removed from production databases, subject only to necessary legal record-keeping requirements.

7. Security & Sandbox Safeguards

Airpen implements multi-layered security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, and isolated container sandboxes for interactive code execution. While we maintain rigorous defensive controls, no digital environment is entirely immune from risk, and we urge users to maintain strong, unique credentials.

8. Student Privacy & Age Requirements

Airpen is intended for university students, researchers, and adult learners. The service is not directed to individuals under the age of 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal data from children. For institutional deployments, we align our privacy practices with student data protection frameworks including FERPA principles.

9. Your Choices & Global Privacy Rights

Depending on your jurisdiction (such as under GDPR, UK GDPR, or CCPA/CPRA), you have the right to access, correct, download, restrict processing of, or delete your personal information. You may exercise these rights directly within your account settings or by contacting our privacy team.

10. International Data Transfers

Airpen and its service providers may store and process data in the United States and other global cloud regions. Where international transfers occur, we implement recognized legal mechanisms such as Standard Contractual Clauses (SCCs) to ensure equivalent data protection.

11. Updates and Contact

We may update this Privacy Policy periodically to reflect technological or regulatory changes. Significant revisions will be notified via email or within the application. For privacy questions or data rights inquiries, reach out to support@airpen.app.