Octai Privacy Policy

Effective October 9, 2026.

This policy explains what data Octai handles, why, who it is shared with, and what rights you have. It is governed by Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015), and related regulations. It also includes a section for users in the United States.

Data controller

• Name: Anderson Gonzalez Acosta (individual)
• Country: Colombia
• Contact email: privacy@octaiapp.com

Summary

• Your notebooks, notes, and drawings are stored only on your device. There are no user accounts and no servers that store your notes.
• Octai does not use advertising, analytics, or tracking across apps or websites.
• The only things that leave your device are what you choose to send to Cloud AI, and only after you give permission the first time for each service.

What data is handled and why

What stays on your device

Your notebooks, pages, drawings, images, quick notes, the text Octai recognizes in your handwriting, your study progress (concepts, correct answers, streak, and flashcards), your agenda (the reminders you schedule when Octai detects a date in your notes; detection happens on the device), and your preferences are stored in the app's storage on your device (and in your iCloud or computer backups, if you have them turned on, according to Apple's settings). Handwriting recognition, the magic pencil, shapes, and Apple Intelligence features run on the device itself.

What is sent to Cloud AI (only if you ask for it)

Some AI features use third-party artificial intelligence services. Each time you use one, only what that feature needs is sent:

• Explain with AI: the selected text and the notebook's name.
• Study with AI (questions, quizzes, flashcards, explanations, summaries, concept maps, study guides, and checking your answers): images and the recognized text of the pages you choose to study (or of your selection), the notebook's name, the concepts the AI previously drew from those notes, the answers you type so they can be checked, and, when creating flashcards, the front of the ones you already have for that notebook (so they are not repeated). Reviewing flashcards you already have sends nothing.
• Redraw with AI: an image of your selection and, if you write one, the description of how you want it.
• Title with AI (drawn by AI): the title text and the style description.
• AI-generated cover: the notebook's name and the description you write.
• Infographic with AI: to write its content, the same as in Study with AI is sent to Google (images and text of the chosen pages and the notebook's name); to draw it, only its title, what it is about and the icons it includes are sent to the image service (Meta or Google), not your notes.
• Board Photo: the straightened photo of the board, so the AI can read its text. If you don’t accept the notice, the text is read only on your device and the photo is not sent. Drawings are always traced on your device.

Purpose: only to provide that feature (explaining, helping you study, redrawing, or generating the image) and return the result to you. It is not used for advertising or profiling.

Services that may receive this data, depending on the feature and which service is available:

• Google (Gemini API) — policy: https://policies.google.com/privacy
• Meta (Meta model API) — policy: https://www.facebook.com/privacy/policy
• Black Forest Labs — policy: https://bfl.ai/legal/privacy-policy

These services process the data on their own servers, which may be outside Colombia (for example, in the United States or the European Union), and handle it under their own policies and terms. By accepting a feature's notice, you authorize that international transfer for the stated purpose.

Requests go through an intermediate server operated by the data controller and hosted on Cloudflare, which only forwards them to the service and does not store their content. To apply the usage allowance and prevent abuse, that server uses a random identifier generated by the app (which does not identify you) and counts how many requests are made. That identifier is stored in your device's keychain, so it remains if you delete and reinstall the app (so the free allowance does not reset); it is not transferred to other devices.

How to give and withdraw permission: the first time you use each service, you will see a notice telling you what is sent and to whom; if you do not accept, nothing is sent. You can withdraw permission at any time in Octai: your profile (the button with your photo, top right of the notebooks screen) → Privacidad y términos (Privacy and Terms) → Permisos de AI en la nube (Cloud AI permissions). From then on, nothing more is sent to that service until you accept again.

In-app purchases

Payment for Octai Plus is handled by Apple through your Apple Account. The data controller does not receive your payment details or your identity. To apply the Octai Plus allowance, the app sends the intermediate server the subscription proof signed by Apple (which subscription it is, its transaction number, and when it expires); the server checks the signature, counts that subscription's usage, and does not store it with anything else.

Technical data

Octai does not collect usage or crash reports on its own. If you share analytics data with Apple, Apple may share anonymous crash reports with developers, according to your Privacy & Security settings.

Device permissions

• Notifications: to remind you one day before something in the trash is permanently deleted, and for the reminders you schedule in the Agenda.
• Photos and Files: only when you choose a video or an image; Octai accesses only what you select.
• Camera: only to take the photo of the board in “Board Photo.” The photo is not stored in the app: what remains is the notes you put on the page.

How long data is kept

• What is on your device is kept until you delete it or uninstall the app. Items you move to the trash are permanently deleted after 3 days.
• The intermediate server does not store the content of requests; usage counters (per device or per subscription) are deleted when their day or month ends.
• What the artificial intelligence services receive is kept according to their own policies.

Your rights

As the owner of your data, you have the right to:

• Know, update, and correct your data.
• Request proof of the authorization you gave.
• Be informed about how your data has been used.
• Withdraw your authorization and request deletion of your data when legal principles, rights, and guarantees are not respected.
• Access your data free of charge.
• File complaints with Colombia's Superintendence of Industry and Commerce (www.sic.gov.co), after first submitting your inquiry or claim to the data controller.

Because your notes are only on your device, you can delete them yourself at any time from the app. For any inquiry or claim, write to privacy@octaiapp.com describing your request. Inquiries are answered within 10 business days and claims within 15 business days, as required by law.

Users in the United States

If you live in the United States, in addition to the above:

• We do not sell or share your personal information, as those terms are used in state privacy laws (for example, California's CCPA/CPRA). We also do not use it for targeted advertising or profiling.
• What information and why: only the content you choose to send to Cloud AI (text or images of your selection), solely to provide that feature. Google, Meta, Black Forest Labs, and Cloudflare act as providers that process that request.
• Your rights: you can ask to know what information we have about you, correct it, or delete it by writing to privacy@octaiapp.com. We will not treat you differently for exercising these rights. Because your notes are not stored on any of our servers, we will usually not have any information about you.
• Privacy signals: Octai does not track you, so there is nothing to turn off with "Do Not Track" or Global Privacy Control.

Children

Octai is not directed to children or to anyone under 14, and we do not knowingly collect information from children (in the United States, from children under 13, under COPPA). If you are a minor, use AI's cloud features only with permission from your parents or legal guardian. If you are a parent or guardian and believe your child sent us information, contact us and we will delete it.

Security

Communications with cloud services are encrypted (HTTPS). Your notes are stored in the app's protected storage on your device.

Language

This policy is available in Spanish and English. Both versions say the same thing; if they ever differ, the one more favorable to you applies.

Changes to this policy

If this policy changes, the new version will be published with its date. If the change affects what is sent to the cloud, Octai will ask for your permission again.