Privacy Policy

Introduction & scope

This Privacy Policy describes how TransformMyNotes (“we”, “us”, or “our”) collects, uses, and safeguards information when you use our note-transcription service — including our web application at app.transformmynotes.com and our Android app. By using TransformMyNotes you agree to the practices described here. This policy applies to all users of the service regardless of how they access it.

Information we collect

We collect only what is necessary to provide the service:

• Account information. When you create an account we collect your email address. Authentication is handled through AWS Cognito; we do not store your password directly.
• Note images. When you capture or upload a photograph of your handwritten notes, that image is transmitted to our servers for processing.
• Transcribed note content. The text extracted from your images — the digital version of your notes — is stored so you can access, search, and organise it later.
• Basic usage data. Standard server logs (IP address, browser/device type, pages visited) are collected automatically to operate and secure the service.

How we use your information

We use the information we collect solely to:

• Provide the core note-transcription feature — converting your handwritten note images into searchable digital text.
• Authenticate you and keep your account secure.
• Store, organise, and surface your notes so you can access them across devices.
• Operate, maintain, and improve the reliability and quality of the service.
• Respond to support enquiries or account-related requests.

We do not use your note content for advertising, do not build profiles for third-party marketing, and do not train machine-learning models on your personal data or note images.

Image processing

The core function of TransformMyNotes is optical character recognition (OCR) — converting photographs of handwritten notes into editable digital text. When you submit a note image, it is sent to AWS Bedrock, Amazon’s managed AI infrastructure, which performs the transcription. AWS Bedrock processes the image solely to return the extracted text; it does not retain your images for model training under the standard AWS Bedrock service terms. The transcribed text is then stored in your account for your use.

Where your data is stored

All account data, note metadata, and transcribed note content are stored on Amazon Web Services (AWS) infrastructure. Authentication and account management are handled by AWS Cognito. Our infrastructure is operated in the United States. By using the service you consent to your data being processed and stored in the US.

Camera & photo permissions (Android app)

The TransformMyNotes Android app requests access to your device’s camera and/or photo library solely to allow you to capture or select images of your handwritten notes for transcription. We do not access, scan, or store any other photos on your device. Camera and photo access is used only in direct response to your explicit action of initiating a note capture. You can revoke these permissions at any time through your device’s settings; doing so will prevent you from uploading new note images but will not affect notes already saved in your account.

Data sharing

We do not sell your personal data or note content to any third party, ever. We share data only as strictly necessary to operate the service:

• AWS (infrastructure subprocessor). Amazon Web Services hosts our application, stores data (DynamoDB, S3), processes images (Bedrock), and manages authentication (Cognito). AWS acts as a data processor on our behalf and is contractually bound to handle your data only as we direct.
• Legal requirements. We may disclose information if required to do so by law or in response to valid legal process (such as a court order or subpoena).

Data retention & deletion

Your notes and account data are retained for as long as your account remains active. If you wish to delete your account and all associated data — including all stored note images and transcriptions — please contact us at the email address below. We will process deletion requests within a reasonable timeframe. Please note that some residual data may remain in encrypted backups for a short period before being purged automatically.

Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These measures include encrypted data transmission (HTTPS/TLS), authentication via AWS Cognito with JWT-based session tokens, and access controls on our cloud infrastructure. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security; however, we are committed to protecting your data using industry-standard practices.

Children’s privacy

TransformMyNotes is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this page periodically. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

Contact us

If you have any questions about this Privacy Policy, want to request access to or deletion of your data, or have any other privacy-related concerns, please contact us at: [email protected].