Privacy.

The short version

Without an account, your notes never leave your device. With an account, we store what is needed to sync your notebooks and, only for the notebooks you choose, to let an AI you connect read and search them. There are no ads, no tracking and no third-party analytics in the app.

What we collect

• Account: your email address and an account ID, to sign you in with Apple, Google or an emailed link. With Sign in with Apple this may be a private relay address.
• Devices: the name and platform of each device you sign in on, and a random ID created for this installation (not an advertising ID), so additions reach the right device.
• Notebooks you sync (Pro): the notebooks you choose to keep in Corollary’s cloud storage, so they appear on your other devices. [Confirm what cloud storage holds at launch: ink, images and PDFs, or text only.]
• AI index (only for notebooks you share with an AI): the text and LaTeX of those notebooks, their titles and folder names, and page positions, so the AI you connect can search them and link back to the page.
• AI connections: which services you connected, the notebooks and permissions you gave each, and the suggestions they sent.
• Usage counts: how many AI requests each connection made per month, for limits. Never their content.
• Waitlist (website): your email address and, if known, where you came from (for example a search engine or the site that linked to us).

What we don’t do

• We don’t sell or rent your data, and we don’t use it for advertising.
• We don’t track you across apps or websites. The app contains no third-party analytics, advertising or crash-reporting code.
• We don’t send your notes to any AI company on our own, and we don’t use your notes to train AI models. [Confirm for the handwriting recognition model.]
• We don’t read your notes, except when you ask us to for support.

AI services you connect

AI access is off by default. When you connect an AI app such as Claude or ChatGPT, you choose the notebooks it may read and whether it may suggest additions. Text from those notebooks is sent to that service only when it searches or reads on your behalf. Its handling of that text is governed by its own privacy policy. You can revoke a connection, or exclude a notebook, at any time in Settings; access stops at once.

This website

trycorollary.com is hosted on Cloudflare. We use Cloudflare Web Analytics, which counts visits without cookies and without identifying you. Cloudflare processes IP addresses to deliver the site and protect it from abuse. We set no cookies on this site.

Who processes data for us

• Supabase: database, sign-in and server functions. [Confirm hosting region.]
• Cloudflare: this website, its analytics and the waitlist form.
• Apple and Google: sign-in, if you choose them. Apple: payments for Pro; we never see your card details.

How long we keep it

• Account data: until you delete your account.
• Deleted notes: removed from our servers within 30 days. In the app, Recently Deleted keeps them for 30 days so you can restore them.
• Pending AI suggestions: expire after 30 days if they are never delivered.
• Usage counts: 13 months.
• Backups: [daily, kept for 7 days], after which deleted data is gone from them too.
• Waitlist: until we invite you or you ask us to remove you.

Your choices

• Export: download a copy of your cloud data from Settings at any time, and export any note as PDF, PNG or .tex.
• Delete: delete your account in Settings. This removes all of your cloud data and AI connections, and revokes Sign in with Apple. Notes on your devices stay yours.
• Waitlist: write to us to be removed.
• Depending on where you live, you may have further rights, such as access, correction and objection. [Confirm GDPR and CCPA wording.] Write to us to use them.

Children

Corollary is not directed at children under 13 [confirm age, and 16 in the EU], and we don’t knowingly collect their data.

Changes and contact

If we change this policy we will update the date above, and tell you in the app for significant changes. Questions: [email protected]. [Legal entity and postal address.]