Privacy Policy & Terms of Service

1. What is Katav

Katav is an online platform that helps students capture lectures, organize notes, keep recordings and transcriptions, generate AI-assisted summaries, and follow study progress over time.

The service may evolve, change, or gain new features over time.

2. Account creation

To use Katav, you must:

• Provide accurate and up-to-date information.
• Keep your login and password confidential.
• Be responsible for all activity under your account.

3. Acceptable use

You agree not to:

• Use Katav for illegal activities.
• Store offensive, discriminatory, or abusive content.
• Attempt to access other users' data without authorization.
• Exploit security flaws or try to bypass system limitations.

4. Data and content

All content you enter into Katav, including notes, recordings, transcriptions, comments, summaries, and study actions, remains yours.

Katav only processes and stores this data to provide the service.

We do not sell or use your data for external commercial purposes.

5. Free and paid plans

• Katav may offer free and paid plans.
• Features, limits, and prices may change.
• Paid plans can be canceled according to the rules provided at the time of purchase.

6. Service availability

We strive to keep the service stable, but:

• We do not guarantee uninterrupted operation.
• We may perform maintenance, updates, or fixes.
• The service is provided "as is".

7. Account termination

You may close your account at any time.

Katav may close accounts in case of violations of these terms or legal requirements.

8. Limitation of liability

Katav is not responsible for:

• Academic, managerial, or operational decisions made based on information from the platform.
• Data loss caused by misuse of the account.
• Indirect damages or lost profits.

9. Changes to these terms

We may update these Terms of Service. By continuing to use the platform after an update, you agree to the new terms.

1. What data we collect

We collect only what we need to run Katav:

• Account data: name, email, password (stored only as a secure hash) or the Google/Apple sign-in identifier, and your language and profile preferences (such as country, institution, and education level).
• Study content you create or upload: courses, subjects, classes, schedules, notes (typed and handwritten), images, files, audio recordings, transcriptions, AI-generated summaries, flashcards, quizzes, podcasts, exams, tasks, and contacts or collaborators you add.
• Usage and technical data: device and browser type, IP address, access dates, error logs, and records of which features you use (including AI feature usage, used for quotas and cost control).
• Notification data: push-notification tokens and your reminder preferences.
• Purchase data: the plan, product, and subscription status confirmed by Apple, Google Play, or Stripe (never your full card number).
• Connected-app data: when you connect Katav to an AI assistant such as ChatGPT, the app's name, the permissions you granted, the connection dates, and securely hashed access tokens, plus the requests the assistant sends to Katav (see section 4).

2. How we use data

We use your data only to:

• Provide the service: store and sync your notes across devices, organize your classes and calendar, and show your study material.
• Run the AI features you request: transcriptions, summaries, definitions, study guides, flashcards, quizzes, podcasts, and the AI tutor.
• Answer requests from AI assistants you connected, such as ChatGPT, using only the data those requests need.
• Send the reminders, notifications, and emails you can manage in your settings, and important account messages.
• Manage plans, quotas, and payments.
• Keep Katav secure, prevent abuse, fix errors, and improve the product in aggregate.
• Meet legal obligations.

3. Data sharing and recipients

We do not sell your data and we do not use it for advertising. We share it only with the service providers below, only for the purpose listed, and only as much as each needs:

• Vercel (hosting, file storage, and the AI Gateway that routes AI requests) and Neon (database).
• AI model providers, which process the content of an AI request to return the result: Anthropic, OpenAI, and Google. Under their API terms, they do not use this data to train their models.
• AssemblyAI (audio transcription) and Google Cloud / OpenAI (text-to-speech for podcasts).
• Resend (sending emails) and Apple / Google (push notifications).
• Apple App Store, Google Play, and Stripe (payments).
• OpenAI, when you connect Katav to ChatGPT: the results Katav returns to your requests are sent to ChatGPT and are then governed by OpenAI's privacy policy.
• Authorities, only when required by law, or to protect the rights and safety of Katav and its users.

4. Katav in ChatGPT and other AI assistants

You can connect your Katav account to ChatGPT (and other assistants that support the Model Context Protocol) to ask about your own study material. The connection only exists after you sign in to Katav and explicitly approve it.

Katav can read your study material and, when you ask, create or change it. The assistant cannot act on its own: every tool that creates, changes, or deletes something requires your explicit confirmation in the chat first, and replacing a class note keeps the previous version in the note history.

What the assistant sends to Katav (tool inputs): search text, dates, subject, class, or reading-list identifiers, filters, and page cursors; and, for the actions you confirm, the content to save: new subjects (name, code, color, course, dates, syllabus, notes, and optional professor name, email, phone, and office), new classes (title, date, description, summary, and note content), class notes to append or replace, and reading lists, works (title, authors, year, type, DOI, status, priority, tags, notes), and reading notes to create, update, or delete.

What Katav returns (tool outputs), limited to your own account: your subjects (name, code, color, status, notes); your classes (title, date, type, short description, summary, note text, and text extracted from handwritten notes); files attached to those classes (name, type, size, AI summaries, and extracted text); your calendar events (title, date, time, subject, room); and your reading lists, works, and reading notes, including the result of each change you confirmed.

Katav does not receive your ChatGPT conversation. We receive only the requests described above and use them only to carry them out. Content you ask the assistant to create is saved in your Katav account like anything you create in the app, and is never used for advertising or to train AI models.

The information returned is shown to you in ChatGPT and processed by OpenAI under OpenAI's own privacy policy and your ChatGPT settings.

• You can disconnect at any time in Katav under Account Settings › Security › Connected apps, or from ChatGPT's settings. Disconnecting in Katav ends access immediately.
• Access tokens expire after 1 hour and refresh tokens after 60 days of inactivity; tokens are stored only as secure hashes.

5. Data retention

We keep data only as long as needed:

• Account data and study content: while your account is active. When you delete your account, it is permanently deleted from our database and file storage right away, and removed from backups within 30 days.
• Individual items you delete (notes, files, recordings): removed right away, except the last automatic backup of a note, which is replaced or removed with the note.
• Connected-app requests: not stored. Technical server logs that may contain request details are kept for up to 30 days.
• Connected-app authorization records: while the connection is active; after you disconnect, only a record that it was revoked is kept until your account is deleted.
• Feature and AI usage records: while your account is active, for quotas, billing, and security.
• Payment records: as long as required by tax and accounting law.

6. Storage and security

Data is stored on secure servers and encrypted in transit (HTTPS). Passwords and access tokens are stored only as hashes, and each account can only access its own data.

We follow good security practices, but no system is 100% immune. You are responsible for protecting your password.

7. Your controls and rights

You can:

• View, edit, and delete your content directly in the app.
• Disconnect ChatGPT or any other connected app in Account Settings › Security › Connected apps.
• Manage notifications, reminders, and emails in Account Settings.
• Delete your account in Account Settings › Account, which permanently deletes your data.
• Request access to, a copy of, or correction of your data, or ask any privacy question, through our contact page: https://katavnotes.com/en/contact-us. We reply within 30 days.

8. Cookies

We use cookies and similar technologies to:

• Keep your session active.
• Remember your preferences, such as language and theme.
• Measure overall platform usage in aggregate (Vercel Analytics).

9. Users in Canada, the EU, and GDPR

Katav follows applicable data protection principles, such as:

• Data minimization.
• Clear purpose.
• Right of access, correction, portability, and deletion.
• Your data may be processed in countries other than yours, such as the United States, by the providers listed in section 3.

10. Changes to this policy

This policy may be updated. The date at the top of this section shows the latest version. Continued use of the platform indicates agreement with the most recent version.

Subscriptions and payments

Subscriptions purchased in the mobile or tablet app are processed by Apple (App Store) or Google (Google Play), not by Katav.

Subscriptions purchased on the web are processed by Stripe. In either case, Katav does not receive or store your full payment-card details — we only receive confirmation of the purchase, the product, and the subscription status needed to provide your plan.

We use this information to activate and manage your subscription, prevent abuse, and comply with legal obligations.