Privacy policy
ZuruNote lets a university student listen to a lecture on iPhone and make notes for that visit. This page says what the app and zurunote.com handle.
This site
zurunote.com explains the product and holds the legal pages and support. It does not use cookies. It has no analytics. Reading a page does not send personal information.
Operator
The legal name and address of the operator are not on this page yet. Ask support@zurunote.com and we will send them without delay.
What we do not collect
We do not collect your name. We also do not collect audio, a precise location, an approximate location, contacts, or an advertising identifier. If sign-in offers an email or a name, we do not keep it.
Listening
Listening becomes text on the iPhone. Audio is not saved or sent.
What leaves the phone
The text, the marks, the board photos, and the memos leave the device only when you both have permission to share and agree to send them. Without permission to share, the visit stays on the phone.
Board photos are turned into JPEG on the device, and EXIF, including location, is removed before they are sent.
A name a teacher says in class can end up in the text. So can a remark about health.
Sign-in and affiliation
Sign-in is Sign in with Apple and Google. We use only the sub from the ID token. We store an HMAC of that sub and a random user id.
Affiliation is separate from sign-in. We send a code to the university email. The address stays in memory only while the check runs. What we store is an HMAC. We cannot write back to that address later.
The mail sender keeps the destination address in its own log. The sender is not chosen yet. When it is, this page will name the company and the country.
The external model
Making a note sends text to an external model. The model vendor is not chosen yet. The contract will forbid training on the text and will forbid keeping it. We do not send the user id, the record id, or the university name.
In the teacher's talk, a student's words are shown as "questioner". Your own text is readable only by you.
Tane
Purchase records for tane pass through the App Store and RevenueCat. RevenueCat is a company in the United States. The balance itself lives in ZuruNote's ledger.
Where data is stored
The app's data sits on Cloudflare: Workers, D1, R2, Durable Objects, and KV. Storage is not limited to Japan.
How long we keep it
| Data | Period |
|---|---|
| Waiting on the phone | Until it is accepted or permanently refused |
| Your text and memos on the server | Until the note is final, and no later than 48 hours after the period ends. We then delete the key and the ciphertext. |
| The teacher's talk and the note | Until that lecture visit is deleted |
| Original board photos | 30 days, for now |
| Workers logs | 7 days |
| Audit log | 1 year. It is not rewritten. |
| Restore copies | Up to 30 days after deletion. Text and memos stay unreadable because the key is gone. Random ids, the timetable, the tane ledger, and HMACs can remain for that period. |
| The deletion record | 31 days |
Deletion
You delete the account inside the app. We delete the keys for your text, revoke the Sign in with Apple token, delete the RevenueCat customer, delete the session and the App Attest key, and delete your row.
A finished note and the teacher's talk stay. Student speech in them is already shown as "questioner".
Teacher ratings
We keep teacher ratings, and an optional short note, with no expiry. They are not shown to anyone yet. They are deleted when you delete the account.
Age
People under 16 cannot use ZuruNote. We do not store a birth year. We store only whether you are 16 or older.
Requests and a breach
Requests for access, correction, or a stop on use go to support@zurunote.com. If data leaks, we tell you in the app and with a push. We cannot use the university email for that.
When this page changes, the date above changes with it.