Back to home
ReviewNote Privacy Policy
How ReviewNote handles account information, uploaded documents, AI analysis results, study records, and notification data.
Effective August 1, 2026 · Last updated August 1, 2026
1. Data Controller
Dstudio (the "Company") complies with the Personal Information Protection Act of Korea and other applicable laws in providing ReviewNote (the "Service"), and publishes this Privacy Policy to explain how it handles users' personal information safely.
| Item | Details |
|---|---|
| Service | ReviewNote |
| Operator | Dstudio |
| Contact email | admin@dstudio.kr |
| Privacy officer / responsible team | Dstudio Operations Team |
2. Information We Collect
The Company collects only the minimum information needed to provide the Service.
| Category | Items collected |
|---|---|
| Account (default) | An anonymous authentication identifier (a randomly generated ID). The Service starts immediately with an anonymous account — no sign-up process. |
| Account (when signing in with Apple) | Email address (a private relay address if you use Apple's "Hide My Email"), name (optionally provided at first sign-in), and an Apple account linking token (used only to revoke the link when you delete your account). Signing in with Apple is optional. |
| Service content | PDF documents you upload, and AI-generated summary notes, quizzes, flashcards, and terms with their relationships (mind map) data |
| Study records | Quiz results (selected answers, correct/incorrect) and flashcard review schedules and progress |
| Device & notifications | Push notification device token (APNs), device language, and notification preferences (on/off for analysis-complete and analysis-failed) |
| Payments & subscriptions | Apple-transaction-based product ID, subscription status, and expiration date. Payment method details (card numbers, etc.) are handled directly by Apple and are not collected by the Company. |
| Service usage | Document analysis usage (credit deductions, monthly analysis counts, page counts, AI processing volume), selected AI model settings, access logs, and other infrastructure records |
3. Purposes of Collection and Use
- Document analysis and study material generation: analyzing uploaded PDFs to create summary notes, quizzes, flashcards, and mind maps
- Usage limit management: calculating and applying each plan's (Free, Basic, Premium) monthly credits, analysis counts, and page limits
- Subscription management: verifying subscription status and providing plan-specific features
- Push notifications: analysis-complete and analysis-failed alerts (subject to your notification settings)
- Account linking and sync: keeping your account available across devices when you sign in with Apple
- Service operation and improvement: incident response, abuse prevention, and quality improvement
4. AI Processing and International Transfers
To provide the Service's core document-analysis features, documents you upload are transmitted to and processed by the AI providers listed below. Each plan has default AI models, and you can also choose models in the app's settings; your document is sent to the provider of the selected model. If your document contains personal or sensitive information, that content is transmitted as well — please review your documents before uploading.
| Recipient | Country | Data transferred | Purpose | Retention |
|---|---|---|---|---|
| Google LLC (Gemini API) | United States | The uploaded PDF document | Document recognition, term extraction, and analysis (default analysis model for Free and Premium, or when selected by the user) | Deleted after API processing per the provider's policy |
| OpenAI, L.L.C. (OpenAI API) | United States | The uploaded PDF document | Document recognition, term extraction, and analysis (default analysis model for Basic, or when selected by the user) | Deleted after API processing per the provider's policy |
| Anthropic PBC (Claude API) | United States | Text and terms extracted from the document | Generating summary notes, quizzes, and flashcards; organizing and merging terms | Deleted after API processing per the provider's policy |
| Apple Inc. (APNs) | United States | Push device token and notification content (including the document title) | Delivering push notifications | Until the delivery purpose is fulfilled (per Apple's policy) |
| Supabase Inc. | South Korea (Seoul region servers) | All items listed in Section 2 | Service infrastructure: database, file storage, authentication, etc. | Until the account or document is deleted |
- The Google, OpenAI, and Anthropic APIs used by the Company are governed by each provider's API data policies, under which data sent via the API is not used to train their AI models.
- Subscription payments are processed directly by Apple under Apple's own terms and privacy policy.
5. Retention and Use Period
- Account deletion: running Settings → Delete Account in the app immediately deletes all server-side data — the account identifier, uploaded documents, AI analysis results, study records, device tokens and notification settings, and subscription information. For Apple sign-in users, the Apple account link is also revoked (the linking token is destroyed).
- Document deletion: the document file and everything generated from it (summary notes, quizzes, flashcards, study records) are deleted immediately.
- Where retention is required by applicable law, data is kept for the required period and then destroyed.
6. Account Types and Data Access
- Anonymous mode: the Service runs on an anonymous account that collects no contact information. If you delete the app or switch devices, you can no longer access the previous account and its data — before you stop using the Service, we recommend deleting your server data via Settings → Delete Account first.
- Apple sign-in: signing in again with the same Apple account restores access to your data after reinstalling or switching devices, and your data syncs across devices.
7. Your Rights and How to Exercise Them
- Account deletion: Settings → Delete Account in the app (processed immediately after a two-step confirmation)
- Document deletion: swipe to delete in the library
- Stopping push notifications: turn items off in the app's Settings → Notifications, or block all app notifications in your device's Settings → Notifications
- Other privacy requests: contact us at admin@dstudio.kr (for anonymous users, including the account ID shown in the app's Settings screen helps us process your request)
8. Security Measures
- Encryption in transit (TLS)
- Row Level Security on the database, blocking access to anyone else's data
- Server-side privilege separation: payment and subscription changes are applied only for requests that pass Apple's server signature verification
- Data minimization: no contact details or real names are collected for default (anonymous) use
9. Children's Privacy
The Company does not knowingly collect personal information from children under 14. The Service operates without a sign-up process; if we learn that a child under 14 has used the Service, we will delete the related data at the request of a legal guardian.
10. Changes to This Policy
When this policy changes, the effective date and the changes will be announced on this page. Significant changes will additionally be announced in the app.
Supplementary Provisions
- This policy takes effect on August 1, 2026. (Originally effective July 19, 2026)
- Revised on August 1, 2026: reflected the launch of Sign in with Apple (email, name, account linking token), analysis-complete/failed push notifications (device tokens, notification settings), and AI model selection in Sections 2, 3, 6, and 7; added OpenAI and Apple (APNs) to the international transfer table (Section 4); and updated usage-limit wording to the credit system.
- This document is provided in Korean, English, and Japanese. If there is any inconsistency between language versions, the Korean version prevails.