Privacy Policy

1.Summary

• Your notes are stored on your device. They are sent to Cloud when you request a manual backup or sign in with Plus or Pro to sync your library. Pages are also processed for the AI features you use and automatic handwriting search on Plus and Pro.
• An account is optional. You can use Apple or, when available, Google or your email.
• AI processes pages or transcripts for the features you request and pages for automatic handwriting search on Plus and Pro. We never use your notes to train AI models.
• Apple or Google Play handles payments, depending on the platform. We never see your card details.
• We don’t sell your data and we don’t use third-party ads or trackers.
• You can delete your account and your cloud data anytime from the app.

2.Who is responsible for your data

The data controller is Movild, LLC (“Pensibly”, “we”, “us”). For any privacy question, email support@pensibly.com.

3.Data we process

Your note content

Your notes, drawings, imported PDFs, images and audio recordings are stored locally on your device. Pensibly works without an account and offline, in which case we receive none of that content.

Account (optional)

If you sign in with Apple, we receive an Apple user identifier and, if you choose to share them, your name and email (which may be an Apple private relay address). We use the account for your plan, backups, the synced Plus and Pro library and AI usage limits. We store an encrypted Apple credential so we can revoke access when you delete your account.

If you use Google, when available, we receive its stable identifier, your verified email and your name to authenticate you and manage your account. We do not request access to Gmail, Drive, contacts or other Google services. This identity data is not used for advertising or sent to AI.

When email sign-in is enabled, we verify email ownership through a link to choose or reset your password. We store a password verifier using scrypt and a random salt, never a readable password. Links expire in 30 minutes and can be used only once; resetting a password invalidates previous sessions. Accounts using different sign-in methods are never automatically merged based on a matching email.

Automatic ink notes (Pro, optional)

When you activate this feature, compatible speech recognition transcribes on your device. To generate notes, we send Anthropic the recognized text and, as context, titles and already recognized or typed text from up to three recent previous notes (up to 6000 characters in total). Those recordings, images and original ink strokes are not sent to AI. Handwriting size, slant and thickness are calculated locally; this adapts a base handwriting style and is not an exact clone. Generated ink notes and diagrams are saved as material in the same note. Manual Cloud backups and Plus and Pro sync include this material along with the note’s other content.

Pensibly Cloud backups and sync

Lite, Plus and Pro let you manually back up the notes you choose. On Plus and Pro, signing in automatically syncs the account’s notes and folders to your other devices, where they appear directly in the library without importing each backup. Each note package contains its complete content, including its PDFs, images and audio recordings, along with its metadata (title, last modified date and size). Sync also processes note and folder identifiers, their organization and revisions to detect changes. We upload it to our cloud storage provider with encryption in transit and at rest, and keep a version history depending on your plan.

You can edit offline; changes sync when you reconnect. Concurrent changes are preserved in a separate note containing this device’s changes instead of being silently merged. Recordings are included once finished. Signing out stops sync for that account.

AI features

When you ask for a summary, quiz, flashcards, an exam or its grading, chat with your notes or handwriting recognition, the app sends our servers only the material you selected: images of the chosen pages, text recognized and stored on your device and/or a recording’s transcript. Our servers forward it to Anthropic’s direct API to generate the result and send it back to you.

On Plus and Pro, while you’re signed in, the app also recognizes handwriting automatically so you can search for words in your notes. While the editor is open, it may send images of up to 12 pages with content when you open a modified note or shortly after editing it, without asking for confirmation on each upload. These images may include other visible page content, such as inserted PDFs or photos. They pass through our servers to Anthropic’s direct API; recognized text is stored on your device for search. If a note is already indexed or was processed recently, it is not sent again at that time.

• We don’t use your content to train AI models.
• We only work with providers that contractually commit not to train on the data we send them. Any temporary retention for security and abuse prevention depends on the provider and service terms; we do not promise a single deletion period for all providers.
• Audio is transcribed on your device. AI features receive the transcript text, not the recording. Cloud backups and Plus and Pro sync do include the note’s completed recordings.

Purchases and subscriptions

On iOS, subscriptions are purchased through the App Store and we verify Apple-signed transactions. On Android, purchases made through Google Play are verified with Google’s API. We receive the product, dates, identifiers and subscription status to activate your plan and bind it to your account. While your account exists, we store the Google Play purchase credential encrypted so we can recheck its status. Apple or Google processes the payment; we never receive card or billing details.

Usage and technical data

To apply each plan’s limits we count how many times you use each AI feature per month. AI request logs include your account identifier, feature, model, token counts, duration and status or error. To limit abuse we use the IP address or a protected representation of it. Infrastructure providers may generate their own technical logs.

Support

If you email us or use the support form, we process your email address and message to reply.

App updates

We use Expo (EAS Update) to check for and deliver app updates. These requests include a random installation identifier, operating system and app runtime version. They may also include details of a previous fatal error to recover from a failed update. This data is used to distribute updates and diagnose errors, without advertising tracking. Expo describes its retention in its privacy policy.

Device permissions

The app may ask for microphone access (to record audio synced to your notes), camera and photo access (to insert images). That content is used inside your notes. It is sent off the device in the manual backups you request and in automatic library sync when signed in with Plus or Pro. It may also be processed by AI and included in page images sent for automatic handwriting search on Plus and Pro.

Website

pensibly.com doesn’t use advertising cookies or third-party trackers. Our hosting provider may log technical data about visits (such as IP address) for security.

4.Why we use it and our legal bases

5.Who we share it with

We don’t sell or rent your personal data, and we don’t share it for advertising. We only share it with:

• Service providers: Vercel for hosting and storage; Neon for the database; Expo for app updates and error recovery; Anthropic for AI results through its direct API; and, when email sign-in is enabled, Google Workspace to deliver its verification and password-reset messages. We do not send them all your notes: AI receives material for the features you request and pages processed for automatic handwriting search on Plus and Pro; storage receives the notes you back up manually or sync automatically while signed in with Plus or Pro. You can ask about current providers at support@pensibly.com.
• Apple, for Sign in with Apple and to process purchases and subscriptions, under Apple’s privacy policy.
• Google, for sign-in if you choose that method and to process and verify Google Play purchases and subscriptions on Android, under its privacy policy.
• Authorities, when required by law or to protect the rights and safety of Pensibly and its users.
• A buyer or successor, if Pensibly is involved in a merger or asset sale, who must honor this policy.

6.International transfers

Our servers and providers may be located in the United States and other countries than yours. When we transfer data from the European Economic Area, the United Kingdom or other regions with similar requirements, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7.How long we keep it

• Account data, encrypted Apple credential or email password verifier: while your account exists.
• Backups: the current copy of each note remains until you delete it or your account. Previous versions are kept for your plan’s history period. Downgrading applies the new history period and keeps the current copy. Expired versions are deleted when you next list, download or manage your cloud backups.
• AI material: we do not store input images or text in our database after responding. Generated exams are stored with their title, questions, rubrics, language, grading attempts and latest score so we can grade them. They are deleted with your account.
• Usage counters and AI request logs linked to your account remain until you delete it. Support messages are kept to handle and follow up on your request; you can ask us to delete them. We do not currently delete these records automatically based on age.
• Apple sign-in from Android and Google sign-in use temporary authorization data. Its exchange code expires after one minute and can be used only once. That data is deleted when the exchange completes, when new sign-in requests process expired entries, or when its linked account is deleted.
• Email verification and password-reset links expire in 30 minutes. They are removed when used, when a password change completes, when the email account is deleted, or when new requests clean up expired links.
• When you delete your account we erase your data from our active systems, including the password verifier and pending links for email accounts. If your account uses Apple, we revoke its credential. We also erase the Google Play purchase credential. We retain minimal App Store and Google Play transaction information and a pseudonymous ownership binding to verify and restore subscriptions and prevent another account from claiming them. Providers’ technical backup copies follow their own retention policies and applicable obligations.

8.Security

We use encryption in transit (TLS) and at rest, least-privilege access controls and periodic reviews of our providers. No system is 100% secure: if a breach affecting your data occurs, we’ll notify you and the authorities where required.

9.Your rights

Depending on where you live (for example under the EU GDPR, the UK GDPR, Brazil’s LGPD, Argentina’s Law 25,326 or the privacy laws of California and other US states), you can:

• access your data and get a copy;
• correct inaccurate data;
• delete your data;
• object to or restrict certain processing;
• receive your data in a portable format;
• withdraw consent where processing relies on it.

Email support@pensibly.com; we reply within 30 days. You can also complain to your local data protection authority. We don’t sell or “share” personal information for cross-context behavioral advertising, as defined by California law (CCPA/CPRA), and we won’t discriminate against you for exercising your rights.

10.Deleting your account

You can delete your account and all your cloud data in the app under Profile › Account › Delete account. The full process is described on Delete your account. Deleting your account doesn’t cancel your subscription. Manage it in Apple subscription settings or Google Play subscriptions, depending on where you purchased it.

11.Children

Pensibly is not directed to children under 13 (or the minimum age required in your country) and we don’t knowingly collect their data. If you’re a parent or guardian and believe a child gave us data, contact us and we’ll delete it.

12.Changes to this policy

If we make material changes we’ll let you know in the app or by email before they take effect. The date of the latest update is shown at the top of this page.

13.Contact

Movild, LLC · support@pensibly.com