Privacy Policy

Introduction

Noorify is a provider of AI-assisted educational tools and infrastructure. We understand that you care about your personal privacy interests, and we take that seriously. This Privacy Policy describes Noorify's policies and practices regarding its collection and use of your personal data and sets forth your privacy rights.

We recognize that information privacy is an ongoing responsibility and will update this Privacy Policy as we adopt new personal data practices. This policy applies to all users of Noorify, including individual users, students, educators, and institutional customers.

Data Protection Contact

Noorify LLC is an Indiana limited liability company headquartered in the United States. To contact us about your data practices or with any inquiries, you can email info@noorify.ai.

If you believe you have found a security vulnerability in our platform, please contact us immediately at info@noorify.ai with "Security" in the subject line. We will investigate the issue and respond to you as soon as possible.

Information We Collect

Noorify collects personal information about its website visitors and customers for the functionality of the platform ("Services"). This information includes:

Account Information

• Name
• Email address
• Login credentials (password stored securely via encryption)
• School or institutional affiliation (for institutional accounts)
• Google account information (if using Google OAuth for sign-in)

Educational Content

• Uploaded files including PDFs, PowerPoint presentations, Word documents, text files, and handwritten notes
• User-created study notes and content
• Course information and metadata
• Language preferences for courses

Learning Activity Data

• Chat messages and interactions with our AI tutor
• Quiz and practice session performance (scores, accuracy, time spent)
• Flashcard interactions and progress
• Learning progress metrics and analytics
• Gamification data (streaks, XP, achievements)
• Exam readiness scores and predictions

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number on our servers. Stripe may collect and store:

• Billing name and address
• Payment card details (processed securely by Stripe)
• Transaction history
• Subscription status and renewal dates

Device and Usage Information

• IP address
• Device identifiers and type
• Browser type and version
• Operating system
• Pages visited and features used
• Session duration and access times
• General geographic location (country/region level)

How We Use Your Information

We use the information we collect for the following purposes:

• Providing Services: To deliver our AI-powered tutoring, generate flashcards, quizzes, and summaries, and provide personalized learning experiences
• Personalization: To adapt content and recommendations based on your learning progress and preferences
• Analytics and Improvement: To analyze usage patterns, monitor platform performance, and improve our services
• Communication: To send account-related notifications, respond to inquiries, and provide customer support
• Security: To protect our platform, detect fraud, and ensure the safety of our users
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

We do not sell personal information to anyone and only share it with third parties who are facilitating the delivery of our services.

AI and Machine Learning

Noorify uses artificial intelligence to provide educational services including AI tutoring, content summarization, flashcard generation, and quiz creation.

Your content is processed by AI systems solely to provide you with our services (such as generating summaries, flashcards, and answering your questions). We use third-party AI providers including:

• Google Vertex AI: For conversational AI and tutoring responses
• OpenAI: For document embeddings and search functionality

These providers process your content in accordance with their respective privacy policies and data processing agreements. Your data is used only to provide immediate service responses and is not used to train their general AI models.

Cookies and Tracking Technologies

Noorify's website collects certain information automatically and stores it in log files. This information may include IP addresses, browser type, operating system, and usage information about your use of our website.

We use cookies and similar technologies for:

• Authentication: To keep you logged in and maintain your session (via AWS Cognito)
• Analytics: To understand how users interact with our platform (via PostHog)
• Functionality: To remember your preferences and settings

Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire.

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our services.

Sharing Information with Third Parties

The personal information Noorify collects from you is stored on servers hosted by third parties located in the United States. These third parties do not use or have access to your personal information for any purpose other than cloud storage and service delivery.

Our third-party service providers include:

• Amazon Web Services (AWS): Cloud infrastructure, file storage (S3), and authentication (Cognito)
• Stripe: Payment processing
• Google Cloud (Vertex AI): AI-powered tutoring and content generation
• OpenAI: Document embeddings for search functionality
• PostHog: Analytics and usage tracking
• Zilliz: Vector database for educational content search and retrieval

We do not otherwise reveal your personal data to non-Noorify persons or businesses for their independent use unless:

• You request or authorize it
• The information is provided to comply with the law (for example, to comply with a search warrant, subpoena, or court order)
• The information is provided to enforce an agreement we have with you
• The information is provided to protect our rights, property, or safety, or the rights, property, or safety of our employees or others
• The information is provided to our agents, vendors, or service providers who perform functions on our behalf
• To address emergencies or health and safety concerns
• To address disputes or claims

We may gather aggregated data about our services and website visitors and disclose the results of such aggregated (but not personally identifiable) information for analytics and platform improvement purposes.

Data Security

We implement industry-standard security measures to protect the confidentiality of your data:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Secure password hashing through AWS Cognito
• Regular security assessments and monitoring
• Access controls and authentication requirements
• Secure cloud infrastructure through AWS

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining appropriate safeguards.

Data Storage and Retention

Your personal data is stored by Noorify on servers located in the United States through Amazon Web Services (AWS).

Noorify retains service data for the duration of the customer's business relationship with Noorify and for a period of time thereafter, to analyze the data for Noorify's own operations, and for historical and archiving purposes associated with Noorify's services.

All personal data that Noorify controls may be deleted upon verified request from Data Subjects or their authorized agents. For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at info@noorify.ai.

Under GDPR and CCPA, you have the right "to be forgotten" and request that all of your personal data be deleted from our systems. To do so, please contact us at info@noorify.ai with the subject line "Data Deletion Request".

Data Subject Rights (GDPR)

The European Union's General Data Protection Regulation (GDPR) and other countries' privacy laws provide certain rights for data subjects:

• Right to be informed: To know what personal data we collect and how we use it
• Right of access: To request a copy of your personal data
• Right to rectification: To correct inaccurate or incomplete personal data
• Right to erasure: To request deletion of your personal data
• Right to restrict processing: To limit how we use your data
• Right of data portability: To receive your data in a portable format
• Right to object: To object to certain processing of your data
• Rights related to automated decision making: Including profiling

If you wish to confirm that Noorify is processing your personal data, or to have access to the personal data Noorify may have about you, please contact us at info@noorify.ai.

Reasonable access to your personal data will be provided at no cost. If access cannot be provided within a reasonable time frame, Noorify will provide you with a date when the information will be provided. If for some reason access is denied, Noorify will provide an explanation as to why access has been denied.

If you are located in the European Union, you can also have recourse to the European Data Protection Supervisor or with your nation's data protection authority.

California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you
• Right to Delete: You have the right to request the deletion of your personal information, subject to certain exceptions
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information. Note: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise your California privacy rights, please contact us at info@noorify.ai. For more information on your rights, you may visit https://oag.ca.gov/privacy.

Children's Privacy

As an educational technology platform, Noorify interacts with educational institutions and may serve students of various ages. We are committed to protecting the privacy of children and comply with the following regulations.

Children's Online Privacy Protection Rule (COPPA) Notice

Noorify offers an educational platform to help students study and learn. While our primary audience is students aged 13 and above, our service may be used by younger students through educational institution accounts. This notice supplements our privacy policy and helps parents and guardians understand what information we collect from students younger than the age of 13 ("children").

Parental Consent

We have the following methods of obtaining parental consent:

• School Accounts: Where children use Noorify as part of their school, we rely on these schools for our collection and processing of children's personal information on behalf of parents. We ask schools to provide our privacy policy and this notice to parents of those students and to obtain parental consent to use our platform.
• Individual Accounts: For children who access our platform for personal use, we require that they set up their account through an established Google account. Google provides verified parents/guardians the ability to approve or deny sign-ins to other apps.

Parents' consent is required for the collection, use, or disclosure of children's personal information. We will not collect, use, or disclose your child's personal information if you do not consent.

Information We Collect from Children

• Name and contact information: Name, username, and email address
• Profile information: Education level, intended use of our service, and classes
• Content and files: Classroom assignments, notes, and other educational content uploaded
• Account access information: Username and password (password is encrypted and inaccessible to us)
• Device information: IP address, device type, operating system, and browser
• Usage information: Activity on our platform, pages visited, and time spent
• Learning activity: Quiz scores, flashcard progress, and learning analytics

Parental Rights

You have the right to:

• Revoke your consent to our collection, use, and disclosure of your child's personal information
• Access and review your child's personal information
• Update or correct your child's information
• Request that we delete your child's personal information

If you revoke consent, your child will not be able to use Noorify. Deleting your child's personal information may result in the termination of their account.

Further information regarding COPPA and your rights can be found at the Federal Trade Commission's website.

If you have questions about our collection, use, and disclosure of your child's personal data, please contact us at info@noorify.ai. Please include "COPPA Question" or "Student Record Request" in the subject line.

Family Educational Rights and Privacy Act (FERPA) Notice

In accordance with the Family Educational Rights and Privacy Act (FERPA), Noorify affirms the following:

• We do not disclose information pertaining to the student's educational record and "directory information" to external non-educational parties without the express consent of the student's parents (for minors) or the student (for adults)
• Parents and eligible students have the right to request corrections to educational records if they believe them to be inaccurate, incomplete, or misleading
• Reasonably sound information security practices have been implemented to protect user information

Information may be released without consent to the following parties as defined in FERPA:

• School officials with legitimate educational interest
• Other schools to which a student is transferring
• Specified officials for audit or evaluation purposes
• Appropriate parties in connection with financial aid to a student
• Organizations conducting certain studies for or on behalf of the school
• Accrediting organizations
• To comply with a judicial order or lawfully issued subpoena
• Appropriate officials in cases of health and safety emergencies
• State and local authorities, within a juvenile justice system, pursuant to specific State law

Student Online Personal Information Protection Act (SOPIPA) Notice

In accordance with the Student Online Personal Information Protection Act (SOPIPA), Noorify affirms the following:

• There is no data collected in order to provide targeted advertising to students
• There are no advertising profiles being created for students or teachers
• Student and teacher information is not being sold to third parties
• Reasonably sound information security practices have been implemented to protect user information
• Disclosure of information is only in cases where the law requires, or as part of maintenance, development, or corporate transactions
• Information is only shared with educational researchers and agencies, or for processing the data to provide the Service
• Only de-identified and aggregated data is used to continue development of the Service

If any disputes regarding SOPIPA are not satisfactorily resolved with us, you may contact the California Privacy Protection Agency at 2101 Arena Blvd, Sacramento, CA 95834, or by telephone at (279) 895-1412.

International Data Transfers

Noorify is based in the United States, and your personal data is stored and processed on servers located in the United States through Amazon Web Services (AWS).

If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

By using our services, you consent to your information being transferred to our facilities and to the facilities of those third parties with whom we share it as described in this Privacy Policy. We take appropriate measures to ensure that any international transfers of personal data comply with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy at any time. When we make changes, we will update the "Effective Date" at the top of this page. For significant changes, we may notify you via email or in-app notification.

Continued use of the platform after changes are posted constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated policy, you should stop using the platform and contact us to delete your account.

Questions, Concerns, or Complaints

If you have questions, concerns, complaints, or would like to exercise your data rights, please contact us at:

We will respond to your inquiry within a reasonable timeframe. For questions regarding educational compliance (COPPA, FERPA, SOPIPA), please include the relevant regulation in the subject line of your email.

Thank you for trusting Noorify with your educational journey. We are committed to protecting your privacy while helping you learn smarter.