Privacy Policy

Nosca operates the Nosca website, web application, mobile applications, and related learning services (together, the “Service”). This Privacy Policy applies when you use the Service, create an account, publish to the community, purchase a subscription, or contact us.

In this policy, “Nosca,” “we,” “us,” and “our” refer to the operator of the Service under the Nosca name. Questions or privacy requests may be sent to business.reelai@gmail.com.

We collect information from you, from the browser or device you use, and from service providers involved in delivering the Service.

• Account information. Username, email address, password hash, verification status, account plan, and authentication or session records.
• Study inputs and uploads. Topics, prompts, pasted notes, URLs, filenames, documents, images, and other material you choose to submit, plus extracted text, transcripts, summaries, and generated learning content.
• Learning profile and activity. Goals, deadlines, time zone, availability, study plans, settings, drafts, viewing history, progress, feedback, assessments, and mastery signals.
• Community content. Sets, titles, descriptions, tags, reel links, reactions, and the username associated with material you publish or interact with.
• Support communications. Messages, attachments, and contact details you provide when requesting help or reporting an issue.
• Payment and subscription information. Stripe collects payment card details directly. Nosca receives information such as a Stripe customer identifier, subscription plan and status, billing events, and transaction identifiers. We do not receive your full card number.
• Technical and usage information. Internet Protocol address, browser and device information, timestamps, pages or features used, job and provider usage, error details, diagnostic logs, and security signals.

Please do not submit sensitive personal information or material that you do not have the right to use.

We use information to:

• create and secure accounts, verify email addresses, and keep sessions working;
• ingest source material and generate, personalize, order, and synchronize learning reels, plans, assessments, and recommendations;
• save settings, history, goals, progress, community activity, and other features you request;
• process subscriptions, measure plan usage, and prevent duplicate or unauthorized billing;
• send transactional messages and respond to support, privacy, and safety requests;
• detect abuse, enforce our Terms, protect the Service, debug failures, and improve reliability; and
• comply with law, resolve disputes, and protect the rights and safety of users, Nosca, and others.

Nosca uses artificial intelligence providers, including OpenAI and Google, to help analyze source material and generate learning content. Depending on the feature, we may send a prompt, relevant excerpts, transcripts, documents, or images to those providers so they can return a result. We limit what is sent to what is reasonably needed for the requested feature, but provider processing and retention are governed by our arrangements with those providers and applicable law.

Generated results may be inaccurate or may repeat information from your inputs. Review results before relying on them, and avoid including unnecessary personal, confidential, medical, financial, or legally privileged information in prompts or uploads.

We disclose information only as needed for the purposes described above, including to:

• Infrastructure providers that host the website, application, databases, files, and operational logs;
• AI providers such as OpenAI and Google that process material for generation and analysis;
• Source and media providers such as YouTube and Supadata that help retrieve or process source media and transcripts;
• Payment providers such as Stripe for checkout, subscriptions, billing portals, fraud prevention, and payment records;
• Communications providers that deliver verification, account, and support email;
• Embedded content providers such as YouTube, Instagram, or TikTok when you load their content; and
• Authorities, advisers, or transaction parties where required by law, necessary to protect rights or safety, or involved in a financing, merger, acquisition, reorganization, or sale of assets.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Ordinary prompts, uploads, goals, settings, and private learning activity are not published to the community by default. When you choose to publish a community set, its title, description, tags, linked reels, reactions, and curator username may be visible to other users and may be copied or reshared by them. Do not publish information you want to keep private.

We may moderate, restrict, or remove public content to enforce our Terms or protect the Service and its users.

Nosca uses browser storage, including localStorage and sessionStorage, to keep you signed in and remember theme, settings, history, drafts, goals, progress, and pending operations on your device. Clearing browser storage may sign you out or remove information that has not synchronized to an account.

We do not currently use third-party advertising or behavioral analytics cookies. Payment, hosting, and embedded media providers may use cookies or similar technologies under their own policies. Loading or interacting with embedded YouTube, Instagram, or TikTok content may disclose your IP address, device information, and interaction data to that provider.

We retain information for as long as reasonably needed to provide the Service, maintain account and learning history, complete billing and support, protect security, comply with law, and resolve disputes. The period varies by category: verification and session records generally expire sooner, while account content, progress, community records, and billing records may remain while the account is active or as legally required.

You can request account deletion from Settings → Account. Account deletion initiates deletion or de-identification of account-linked personal information and cancellation handling for an active Stripe subscription. Some information may remain where required for legal, billing, fraud-prevention, security, backup, or technical reasons. Certain uploaded materials or technically isolated records may not be removed automatically; if you believe material remains after deletion, email business.reelai@gmail.com so we can investigate.

Deleting local browser data does not by itself delete an account or information already synchronized to the Service.

Depending on where you live, you may have the right to request access, correction, deletion, restriction, objection, or portability of personal information, or to withdraw consent where processing relies on consent.

To make a request, email business.reelai@gmail.com from the address associated with your account and describe the request. We may need to verify your identity. You may use an authorized agent where local law permits; we may request proof of authorization and identity verification. We will not discriminate against you for exercising a privacy right.

You may appeal a denied privacy request by replying to our decision and asking for an appeal. You may also complain to the privacy or data-protection authority where you live.

California and other U.S. states. In the preceding 12 months, the categories of personal information we may have collected include identifiers; customer and account records; commercial and subscription information; internet or electronic activity; audio, visual, and electronic content; education-related information; and inferences based on learning activity. We collect these categories from the sources described in Section 2, use them for the purposes in Section 3, and disclose them to the recipient categories in Section 5. We do not sell or share these categories for cross-context behavioral advertising, and we do not offer financial incentives for personal information. Where applicable, residents may request to know, access, correct, delete, or receive a portable copy of information and may limit certain uses of sensitive personal information.

EEA, United Kingdom, and Switzerland. We process information as needed to perform our contract with you, based on our legitimate interests in operating and securing the Service, with consent where requested, and to meet legal obligations. You may have rights to access, rectify, erase, restrict, object, port data, withdraw consent, and complain to a supervisory authority.

We use administrative, technical, and organizational safeguards designed to protect information. No internet service or storage system is completely secure, so we cannot guarantee absolute security. Keep your password private and contact us if you believe your account has been compromised.

Nosca and its providers may process information in the United States and other countries whose data-protection laws differ from those where you live. Where required, we use recognized transfer mechanisms or other lawful safeguards.

The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you are under the age of legal majority where you live, use the Service only with permission from a parent or legal guardian. If you believe a child under 13 has provided personal information, contact business.reelai@gmail.com.

We may update this policy as the Service or law changes. We will post the revised policy here, update the effective date, and provide additional notice when required.

Privacy questions and requests: business.reelai@gmail.com.