Privacy Notice

Anquin is responsible for the personal information described in this notice. Questions and privacy requests: support@strawfy.com.

Information you provide

• Account details: your name, email address and sign-in details.
• Study material you upload or create: notes, PDFs, scans, photos, recordings, your questions, and the notes and pages made from them.
• Support messages and feedback.
• Your plan and its payment status. Card details go to Dodo Payments, our reseller, not to us.

Information created when you use Strawfy

• Activity, settings and feature use needed to run and improve the service.
• Device, browser, IP address, approximate region, times and error details.
• Your country, worked out from your IP address when you view our prices, so they show in your currency; at checkout it sets the currency you pay in and the country of your billing address. It stays in your browser; we do not store it.
• Page views and performance, counted in aggregate by Vercel Web Analytics and Speed Insights.

• Provide, maintain and fix the study service.
• Make the notes, pages and answers you ask for from the material you provide.
• Manage accounts, plans, payments, cancellations and refunds.
• Answer support, privacy, accessibility, copyright and security messages.
• Protect the service, prevent fraud and abuse, and enforce our terms.
• Measure how the website is used and how it performs, in aggregate.
• Meet legal, tax and accounting obligations.

Where laws such as the GDPR or UK GDPR apply, we rely on:

• Contract to provide the service, your account, the AI output you ask for, and your plan.
• Legitimate interests to secure, run and fix the service, balanced against your rights.
• Consent where required, for example for marketing email. You can withdraw it at any time.
• Legal obligation for tax, accounting, fraud prevention and valid legal requests.

When you use an AI feature, the material needed for that request is processed by AI and infrastructure providers working for us. Do not upload sensitive personal information unless your study request needs it. The AI Policy explains these features and their limits.

When you report one of Berry’s answers, notes or pages, we keep your report with a copy of what you reported (for an answer, the question before it too) so we can review it. Reports are deleted a year after they are sent, or sooner with your account.

We share information with the providers that run Strawfy for us: hosting, email delivery, AI processing, security, error reports (Sentry, set up to leave out your notes, your material, your email address and your IP address), page analytics (Vercel) and payments (Dodo Payments). We may also disclose information when the law requires it, to protect rights and safety, in a sale or merger of the business, or when you ask us to.

We do not sell personal information or share it for cross-context behavioral advertising.

Website checkout and billing are handled by Dodo Payments, our online reseller and the Merchant of Record for website orders. The payment form on strawfy.com/checkout is Dodo Payments’ own, inside a secure frame, so your card details go straight to Dodo Payments, which processes them with your billing address, tax and fraud information under Dodo Payments’ Privacy Policy. We never receive your full card number or security code; we receive what we need to confirm payment, manage your plan, and handle refunds and disputes. For a free trial we also read the card's network, last four digits, expiry and country, only to keep one free trial per card, and keep just a one-way fingerprint of them.

Plans bought in our apps are handled by Apple or Google instead; see Our mobile apps.

This notice also covers the Strawfy apps for iPhone and Android. They use the same account as the website and handle your information in the same way, with these additions.

• Camera, photos and files. The app uses the camera only when you scan a page, and opens only the photos and files you pick. It saves a page to your photos only when you ask. You can turn these permissions off at any time in your phone’s settings.
• Microphone and speech. When you record a lecture, your phone turns the speech into text on the phone itself. The sound is not kept or sent to us; only the text is saved to your project.
• Signing in. If you sign in with Apple or Google, they share your name and email address with us, and Google may also share your profile photo. With Apple you can choose to share a private relay address instead of your email. Your sign-in is kept in your phone’s secure storage.
• Purchases. Plans bought in the app are sold and charged by Apple (the App Store) or Google (Google Play), under their own terms and privacy policies. We receive what we need to give you your plan, such as which plan it is, its dates and its status. We never receive your card details.
• Reminders. Study and trial reminders are set up on your phone itself. We do not use push notifications, so no notification token is sent to us.
• Device and crash information. The app keeps a random device identifier so we can tell your sign-ins apart and keep your account secure. If something breaks, a crash report goes to Sentry with technical details such as the error, the screen, where in our code it happened, and your phone’s model and system version, without your notes, your material, your email address or your IP address.
• No advertising or tracking. The app shows no ads, uses no advertising identifier, and does not track you across other companies’ apps or websites.

We use no advertising cookies. You can turn off usage analytics on your Account page, under Your data. The Cookie Policy lists what the website keeps in your browser.

We keep information only as long as we need it to provide the service, or as the law requires for tax, security and disputes. IP addresses recorded when you sign up, sign in or use the service are deleted after 90 days. When you delete your account, Delete Your Account explains what is deleted and what is kept, and for how long.

Depending on where you live, you can ask to access, correct or delete your personal information, to restrict or object to its use, or for a portable copy; you can withdraw consent and appeal a refusal. California residents can also ask what categories of personal information we collect, where from, why and who receives it, and will not be treated differently for using these rights.

Send requests to support@strawfy.com. We may need to verify your identity, and you may use an authorized agent where the law allows. You can also complain to your local data-protection authority.

Strawfy and its providers may process information outside your country. Where required, we use an approved transfer mechanism and appropriate safeguards.

Strawfy is not for children under 13, and they may not create an account. If we learn that we collected personal information from a child under 13, we delete it. A parent or guardian can contact support@strawfy.com.

We protect information with technical and organizational measures suited to it, though no online service is completely secure. We may update this notice; the date above shows the latest version, and we tell you about material changes where the law requires.