How RichNote collects, uses, discloses, retains, and protects information when you use the Service.

 

Effective October 20, 2026

MOONBACK USA INC ("MOONBACK," "we," "us," or "our") provides the RichNote mobile application, websites, connected reading-device features, and related services (collectively, the "Service").

Information we collect

• Account and authentication information: name, email address, profile information, age or date-of-birth information where required, authentication provider identifiers, verification records, and session information.
• User content: imported books and files, reading progress and positions, notes, highlights, quotations, knowledge cards, generated images, meeting information, voice notes, recordings, transcripts, AI prompts, and AI-generated responses.
• Device and connectivity information: device model, operating-system version, app version, device identifiers, IP address, Bluetooth and nearby-device information, Wi-Fi network information needed to connect to a reading device, and push-notification tokens.
• Camera, audio, and media information: QR-code images used for pairing, microphone recordings you choose to create, images or files you select, and media you choose to save or share.
• Subscription and transaction information: selected product, purchase channel, subscription status, transaction or receipt identifiers, renewal, cancellation, and refund status. Payment credentials are processed by the applicable payment provider; we do not receive or store your complete payment-card number.
• Diagnostics and activity information: feature interactions, synchronization events, error details, logs, and performance information used to operate, secure, and improve the Service.
• Communications: messages and information you send to customer support or provide in a deletion, privacy, or billing request.

Device permissions

RichNote requests permissions only when needed for a feature you choose to use:

• Microphone: to record voice notes, meeting audio, and voice input.
• Camera: to scan a QR code when pairing a reading device.
• Bluetooth and nearby devices: to discover, pair with, and communicate with supported reading devices.
• Location on older Android versions: because Android may require location permission for Bluetooth or Wi-Fi discovery. RichNote does not use this permission for advertising or continuous location tracking.
• Notifications: to deliver account, device, synchronization, and service messages.
• Photos, media, files, and storage: to import content you select and save or share generated content at your direction.

You can change permission choices in your device settings, although disabling a permission may prevent the related feature from working.

How we use information

• Provide accounts, authentication, synchronization, reading, note-taking, transcription, AI, device-pairing, and customer-support features.
• Process subscriptions, confirm entitlements, prevent duplicate purchases, and manage cancellations and refunds.
• Process user-selected text, images, or audio to provide transcription, search, summarization, text-to-speech, and other requested AI features.
• Send requested service messages and push notifications.
• Protect the Service, prevent fraud and abuse, troubleshoot failures, and improve reliability and usability.
• Comply with legal obligations and enforce our Terms of Service.

How we disclose information

We do not sell personal information and do not use personal information for third-party targeted advertising. We disclose information only as needed for the following purposes:

• Cloud hosting and storage providers process account data and user content so we can host, synchronize, back up, and deliver the Service.
• AI and speech service providers, including the configured Alibaba Cloud Model Studio/DashScope services, process the text, image, or audio content needed to perform an AI or speech feature you request.
• Firebase Cloud Messaging processes device and push-token information to deliver notifications.
• Google and Apple process authentication information when you choose their sign-in services.
• RevenueCat, Google Play, Apple App Store, and Stripe process subscription, purchase, entitlement, and payment information for the purchase channel you use.
• Email delivery providers process email addresses and message-delivery information for verification, security, and service communications.
• Authorities, advisers, or transaction participants may receive information when required by law, necessary to protect rights and safety, or involved in a merger, financing, acquisition, or transfer of assets, subject to appropriate safeguards.

When you intentionally export, share, or send content to another person or service, that information is disclosed at your direction.

Data storage, security, and international processing

Information may be stored on your phone, a connected reading device, and our or our service providers' systems. We use administrative, technical, and organizational safeguards appropriate to the nature of the information, including access controls, session controls, and encrypted network transport where supported. No storage or transmission method is completely secure.

We and our service providers may process information in countries other than the country where you live. Where required, we use appropriate measures for international data transfers.

Retention and deletion

We retain account information and user content while your account is active and as reasonably necessary to provide the Service. Logs, security records, support communications, and transaction records may be kept for periods reasonably necessary for security, dispute resolution, tax, accounting, fraud prevention, and legal compliance.

You can request deletion in the app through Settings > Delete account. The account is deactivated and active sessions are revoked immediately. Permanent deletion is scheduled after a 30-day cooling-off period; signing back in during that period cancels the scheduled deletion. When deletion is completed, we delete or de-identify account data and user content under our control, except information we must retain for legitimate legal, security, fraud-prevention, accounting, or transaction-record purposes.

You can also start a deletion request through our Account Deletion page. Deleting a RichNote account does not automatically cancel a subscription billed by Google Play, Apple, or another purchase provider; cancel the subscription through the original purchase channel to prevent future renewal.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal information. You may manage profile information and permissions in the app or device settings, export available account data before deletion, or contact us to submit a privacy request. We may need to verify your identity before completing a request.

Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law requires a higher minimum age, that higher age applies. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and delete it where required.

Changes to this policy

We may update this Privacy Policy to reflect changes to the Service, our practices, or applicable law. We will post the updated policy and revise the effective date. Where required, we will provide additional notice or request consent.

Contact us

For privacy questions or requests, contact:
MOONBACK USA INC
Email: care@richnote.ai

Delete your account

Request deletion of your RichNote account and associated app data inside the app or through our support team.

Provided by MOONBACK USA INC

Delete your account in the app

1. Open RichNote and sign in to the account you want to delete.
2. Open Settings.
3. Select Delete account.
4. Read the deletion notice and confirm Delete after 30 days.

This is the fastest method because you are already authenticated in the app.

Request deletion outside the app

If you cannot access the app, email us from the address associated with your RichNote account. Include the words Account Deletion Request and identify the RichNote account you want deleted. We may ask for limited additional information to verify that you own the account. Never send your password or complete payment-card information.

Email an account deletion request：care@richnote.ai

What happens after a deletion request

• Your RichNote account is deactivated and active sessions are revoked when the authenticated deletion request is accepted.
• Permanent deletion is scheduled after a 30-day cooling-off period.
• Signing back in during the 30-day period cancels the scheduled deletion.
• After the cooling-off period, account information and associated content under our control are deleted or de-identified, including profile and authentication data, imported content stored with the account, reading progress, notes, highlights, knowledge cards, AI conversations and jobs, recordings and transcripts, device pairings, and synchronization data.
• Limited transaction, security, fraud-prevention, support, tax, or accounting records may be retained when reasonably necessary or legally required. Data retained for these purposes is restricted from ordinary product use.

Cancel subscriptions separately

Deleting your RichNote account does not automatically cancel a subscription managed by Google Play, Apple, Stripe, RevenueCat, or another purchase provider. To prevent future renewals, cancel the subscription through the same store or service where you purchased it before deleting your account. If you need help identifying the purchase channel, contact care@richnote.ai.

Questions

For questions about deletion, retained records, or privacy rights, contact MOONBACK USA INC at care@richnote.ai. See our Privacy Policy for more information.