Infinote App Privacy Policy

Effective Date: 3 August 2026

Infinote (“Infinote,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how information is collected, used, stored, shared, and deleted when you use the Infinote mobile application and related services.

This policy applies to the Infinote application. It does not apply to unrelated retail, ecommerce, shipping, or purchasing activities operated through other websites or services.

1. Information We Process

The information processed by Infinote depends on the features you choose to use.

Account Information

When you create or access an Infinote account, we may process:

• your email address;
• your display name, where provided;
• a unique account identifier;
• your selected authentication provider;
• authentication tokens and provider identifiers required to keep you signed in securely.

Infinote supports authentication through services such as Sign in with Apple and Google Sign-In. We do not receive or store your Apple ID or Google account password.

Documents and User Content

When you use Infinote, you may create, import, scan, save, or process content including:

• scanned document images;
• photographs selected from your device;
• PDF files;
• OCR-extracted text;
• notes, titles, tags, summaries, and other text you create;
• document dates, page information, collections, Spaces, and organizational metadata;
• reminders, meeting details, agenda information, and related metadata;
• content you choose to share or export.

This content may contain personal, confidential, financial, health-related, or other sensitive information depending on what you choose to scan or enter. You are responsible for deciding what content to store or process through Infinote.

Device and Technical Information

To operate and secure the application, we and our service providers may process limited technical information such as:

• device type and operating system version;
• application version;
• language and region;
• network and request information;
• IP address;
• application installation identifiers;
• authentication and security events;
• error, crash, and performance information, where diagnostics are enabled.

We do not use this information for third-party advertising or cross-app tracking.

Support Communications

When you contact us for assistance, we may process:

• your name and email address;
• the contents of your support request;
• screenshots, diagnostic information, or files you voluntarily provide;
• our communications with you.

Please avoid including sensitive document content in a support request unless it is necessary to resolve the issue.

2. Device Permissions

Infinote may request access to certain device features only when required for a feature you choose to use.

Camera

Camera access is used to scan documents and capture images.

Photos and Files

Photo-library or file access may be used to import images, PDFs, or other supported documents that you select.

Notifications

Notification permission may be used to deliver reminders that you create.

Calendar

Calendar access may be used to add a meeting or event to your selected device calendar when you explicitly request it.

Infinote does not require you to grant optional permissions unless they are necessary for the specific feature you are trying to use. You can manage permissions through your device settings.

3. How We Use Information

We process information to:

• create and manage your Infinote account;
• authenticate you and protect your session;
• scan, import, organize, display, search, and retrieve your documents;
• perform OCR and extract text from selected documents;
• generate summaries, meeting information, reminders, or other requested results;
• save and synchronize account-related information;
• provide optional cloud-processing features that you explicitly select;
• export or share content at your request;
• connect to third-party storage destinations chosen by you;
• schedule reminders and create calendar entries at your request;
• provide customer support;
• detect abuse, protect accounts, and maintain service security;
• diagnose crashes and technical problems where diagnostics are enabled;
• comply with applicable law and enforce our legal rights.

We do not use your document content for third-party advertising.

We do not sell or rent your personal information.

4. Local and Cloud Processing

Infinote includes features that may process information locally on your device and features that may use cloud services.

On-Device Processing

Where a feature is described as private, local, or on-device, the relevant processing is designed to occur on your device.

Content stored locally remains on your device unless:

• you choose a cloud-processing feature;
• you enable synchronization or connected storage;
• you share, email, or export the content;
• a feature clearly informs you that information will be transmitted.

Cloud Processing

Some optional OCR, artificial intelligence, synchronization, sharing, or backup features may transmit selected content to a cloud service.

Before sending document content to a third-party cloud AI or OCR provider, Infinote is intended to explain that the content will leave your device and obtain your permission where required.

Depending on the feature selected, transmitted information may include:

• document images;
• PDF pages;
• OCR text;
• prompts or instructions;
• document titles and related metadata;
• the result generated by the service.

Cloud processing is limited to the content needed to perform the action you request.

You should not use a cloud-processing feature for content you are not authorized to transmit.

5. Third-Party Service Providers

We use service providers to operate specific parts of Infinote. These providers process information on our behalf or at your direction and are expected to apply appropriate privacy and security protections.

Depending on the features enabled in the application, these providers may include:

Apple

Apple may process information when you use Sign in with Apple, Apple platform services, device permissions, calendars, notifications, or App Store services.

Google and Firebase

Google services may be used for:

• Google Sign-In;
• account authentication;
• cloud database services;
• server-side functions;
• temporary cloud file processing;
• application integrity checks;
• crash and diagnostic reporting, where enabled;
• cloud OCR or document-processing features, where selected.

Cloud OCR and AI Providers

Optional cloud-processing features may use providers such as Google Cloud services or Sarvam AI. Only information required for the selected request should be transmitted.

Connected Storage Providers

When you connect an external storage service, information may be sent to the provider you select, such as:

• Google Drive;
• Dropbox;
• Box;
• Microsoft OneDrive.

These connections are optional. The selected provider’s privacy policy and account settings also apply to information stored with that provider.

Amazon Web Services

Amazon Web Services may be used for email delivery or supporting backend infrastructure where those features are enabled.

Email and Communication Providers

When you choose to email, share, or request support, the relevant email or communication provider may process the recipient information, message content, and attachments you provide.

We do not authorize service providers to use Infinote user content for their own advertising.

6. Crash Reports and Diagnostics

Infinote may offer an optional diagnostics or crash-reporting setting.

When enabled, diagnostic reports may include:

• application installation identifiers;
• device and operating system information;
• application version;
• crash stack traces;
• technical events associated with a failure.

We aim not to intentionally include document images, OCR text, document titles, file contents, or other user-created content in crash reports.

Diagnostic information is used to identify problems, improve reliability, and maintain application security.

Where diagnostics are optional, you may change your choice through the application’s privacy settings.

7. Sharing and Disclosure

We may share information only in the following circumstances:

At Your Direction

Information is shared when you choose to:

• export a document;
• send an email;
• use the system share sheet;
• save content to an external storage provider;
• use a cloud OCR or AI feature;
• create a calendar entry;
• send information to another service.

With Service Providers

Information may be processed by service providers described in this policy when necessary to provide a feature you request or operate the service.

For Security and Legal Reasons

We may disclose information where reasonably necessary to:

• comply with applicable law, regulation, court order, or valid legal request;
• investigate fraud, abuse, or security threats;
• protect the rights, safety, and property of users, Infinote, or others;
• establish, exercise, or defend legal claims.

Business Transfers

If Infinote is involved in a merger, acquisition, restructuring, financing, or transfer of assets, information may be transferred as part of that transaction, subject to applicable privacy protections.

8. Data Storage and Retention

Local Data

Scans, imported documents, OCR results, notes, and related content may be stored locally on your device.

Local content generally remains until you:

• delete the content;
• delete your account and associated local data;
• clear the application’s data;
• uninstall the application.

Deleting the application may remove locally stored information that has not been saved elsewhere.

Cloud and Account Data

Account and cloud-stored information is retained while your account remains active and for as long as reasonably necessary to provide the service.

When you delete content or your account, we initiate deletion of associated information under our control, subject to:

• temporary processing queues;
• security and fraud-prevention requirements;
• backup rotation periods;
• legal or regulatory obligations;
• records necessary to demonstrate that a deletion request was completed.

Temporary files used for cloud processing are intended to be removed when processing is completed or after the limited period required to complete, retry, secure, or audit the requested operation.

Information stored in a connected third-party service may remain with that provider until you delete it through that provider.

9. Account and Data Deletion

You can request deletion of your Infinote account using the Delete Account option available within the application’s Settings.

Account deletion is intended to remove:

• your Infinote authentication account;
• cloud data associated with your Infinote account;
• locally stored Infinote account data;
• connected-service credentials held by Infinote;
• eligible files and records associated with your account.

You may be required to sign in again before deletion to protect your account.

Deleting your Infinote account does not automatically delete copies that:

• you previously exported or shared;
• were saved to another person’s device;
• were sent through email;
• are stored in a connected third-party service;
• must be retained for limited legal, security, or fraud-prevention purposes.

You may also contact us using the details below if you cannot access the in-app deletion option.

10. Your Privacy Choices and Rights

Depending on your location, you may have the right to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request a portable copy of eligible information;
• complain to an applicable data-protection authority.

You may also:

• disable optional diagnostics;
• decline optional cloud processing;
• disconnect linked storage providers;
• revoke permissions through your device settings;
• delete individual documents;
• delete your Infinote account.

Withdrawing consent does not affect processing that occurred before consent was withdrawn.

To exercise a privacy right, contact us using the information below. We may need to verify your identity before completing the request.

11. Security

We use administrative, technical, and organizational safeguards designed to protect information, including:

• authenticated access controls;
• account-based ownership restrictions;
• encrypted network connections;
• access restrictions for cloud-stored information;
• integrity checks for downloaded application resources;
• deletion and session-revocation controls;
• monitoring and security protections provided by our infrastructure partners.

No storage or transmission system is completely secure. We cannot guarantee that unauthorized access, loss, or misuse will never occur.

You should protect your device, account credentials, and connected-service accounts.

12. International Data Processing

Infinote and its service providers may process information in India and in other countries where our infrastructure providers operate.

These countries may have data-protection laws that differ from those in your location. Where required, we use appropriate measures intended to protect information during international processing.

13. Children’s Privacy

Infinote is not directed to children below the minimum age permitted to independently consent to data processing in their jurisdiction.

We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information without appropriate authorization, contact us so that we can investigate and take appropriate action.

14. No Advertising or Cross-App Tracking

Infinote does not sell personal information.

Infinote does not use document content for targeted advertising.

Infinote does not use third-party advertising SDKs or track users across applications and websites owned by other companies for advertising purposes.

If these practices change, we will update this policy, obtain any consent required by law or platform rules, and update the application’s App Store privacy disclosures.

15. Changes to This Policy

We may update this Privacy Policy to reflect:

• changes to Infinote features;
• changes to our service providers;
• legal or regulatory requirements;
• improvements to our privacy and security practices.

When we make material changes, we will update the effective date and provide additional notice where required.

We encourage you to review this policy periodically.

16. Contact Us

For privacy questions, requests, or concerns, contact:

When contacting us about a privacy request, please use the subject line “Infinote Privacy Request.”