This Privacy Policy explains how ResearchNote AI Personal for Android (the “App”) handles information.
The App has no ResearchNote AI account or BridgeAIWorks cloud sync. Most research content is stored on your device, and BridgeAIWorks does not receive a copy of your local workspace. Some information may leave the device when you choose an online feature, external AI provider, purchase, sharing destination, external link, or support channel, as explained below.
1. Information stored on your device
Depending on the features you use, the App may store the following information locally:
research projects, experiments, protocols, observations, results, notes, notebooks, drawings, literature records, citations, and datasets;
photos, documents, PDF files and annotations, recordings, transcripts, and other files you choose to add;
an optional display name, profile image or emoji, language, voice, reminder, and other App preferences;
AI provider settings and AI responses you choose to save; and
subscription status needed to provide purchased features.
This information is used to provide the App’s research, organization, import, annotation, reminder, accessibility, export, and AI-assisted features.
2. Device access and on-device processing
The App may request access to the camera, selected photos or files, microphone, and notifications only when you use a feature that needs that access. You may deny or later change these permissions in Android settings.
Reminder titles and scheduled times are stored on your device. Reminders are displayed through Android’s local notification and alarm mechanisms, including AlarmManager, and may be rescheduled after the device restarts. The App does not create a push token or use a BridgeAIWorks push server or remote notification service.
The App processes speech, documents, and text recognition on your device. Google ML Kit provides text recognition. Google states that ML Kit may collect device information (manufacturer, model, OS version and build, and available ML accelerators), App information (package name and App version), a per-installation identifier, performance information such as latency, image format and resolution, input and output size, feature version, event type, and error codes. Google uses this information for diagnostics and usage analytics, encrypts it in transit using HTTPS, and states that ML Kit does not share it with third parties. Your images and recognized text are not sent to Google for recognition. See Google’s ML Kit Android data disclosure.
3. Crossref literature search
When you choose to search for literature, the App sends the complete search query or DOI to Crossref for bibliographic search and metadata retrieval. It does not attach your research workspace, files, recordings, or profile to the search.
Crossref receives the query or DOI, your IP address, and ordinary request and connection information. Crossref states that the IP address and request content are recorded in its logs, and that the logs are deleted after three months. Avoid entering confidential, personal, health, participant, or unpublished information in the literature search field. See Crossref’s Metadata Retrieval documentation.
4. Optional external AI and CoResearch AI
AI assistance is optional. You choose the provider endpoint, model, and API key. The API key is stored on your device and, for an online request, is sent directly to your selected provider as the authentication credential. The online provider may receive the endpoint, model, question, selected text, necessary request and network metadata, and your IP address.
An approved request may include your question and selected literature, notes, notebook text, project information, protocols, observations, results, or conclusions. This content may contain personal, health, confidential, participant, or unpublished research information. Review it carefully and send it only if you have permission and the provider is suitable for that information.
Before each transfer, the App previews the provider, endpoint, model, question, and selected text and requires your affirmative consent. Only a provider using the same device’s loopback connection keeps the request on the device. A provider reached through a local network (LAN) or Internet endpoint is an external transfer and requires the same preview and consent. Only the text you review and approve is sent; original PDF, image, audio, and video files remain on your device. BridgeAIWorks does not receive or store the request or response.
The online provider may retain, use, or transfer information under its own terms, privacy policy, and account settings. Removing a saved API key from the App does not revoke it or delete information already held by that provider; use the provider’s account controls for those actions.
5. Google Play purchases
Google Play processes purchases, payments, subscriptions, and refunds. The App receives purchase and subscription information needed to provide or restore paid features. BridgeAIWorks does not receive your complete payment-card details.
Google handles Google Account, payment, transaction, security, and fraud-prevention information under Google’s Privacy Policy and applicable Google Play terms.
6. Export, sharing, and external links
The App exports or shares information only when you choose the action and destination. The receiving app, cloud service, browser, or website handles the copy under its own privacy and retention rules.
Workspace export does not include original attachment content and is not a complete backup of every media item or annotation. Keep original files and other backups. A separate literature-sharing feature may include bibliographic information and PDF attachments.
The App may save links to external websites or media. When you open a link, the selected browser, app, and destination site receive the link and ordinary connection information.
7. Support communications, advertising, and analytics
If you contact us, we receive the email address, message, attachments, and diagnostic information you choose to provide. We use them to respond, investigate problems, protect the service, and meet legal obligations. Please do not send sensitive research or participant information unless necessary and authorized.
The App does not contain advertising, cross-app tracking, first-party analytics, or a first-party crash-reporting service. BridgeAIWorks does not sell personal or sensitive user data.
8. Retention and deletion
Local information remains on your device until you delete it, clear the App’s storage, or uninstall the App. Items placed in Recently Deleted have not yet been permanently erased. Some items must remain there for at least 30 days before permanent deletion becomes available, and they are not deleted automatically when that period ends.
Copies you export or share must be deleted from their destination separately. Information already sent to Google, Crossref, an AI provider, an email provider, or another service is retained and deleted under that service’s policy.
ResearchNote AI does not create an App account, so there is no separate ResearchNote AI account to delete. For information that BridgeAIWorks actually holds, such as a support email, contact us using the address below.
9. Security and international processing
We use reasonable safeguards designed to protect information handled by the App, including protected App storage, secure handling of AI credentials, and encrypted connections for online features. No security measure can guarantee complete protection. Protect your device, credentials, exports, and backups.
Google, Crossref, your selected AI provider, email provider, or sharing destination may process information in other countries. Their privacy policies describe their security, retention, international transfer, and user-rights practices.
10. Your choices
You can manage local content through the App’s edit, restore, permanent-delete, export, and sharing controls. You can also deny device permissions, avoid online search and external AI, remove a saved AI key, clear App storage, or uninstall the App.
11. Changes and contact
We may update this Policy when the App, third-party services, Google Play requirements, or applicable law changes. The effective date above will be updated. Additional notice or consent will be provided when reasonably required.