Privacy Policy

NotBad Labs L.L.C. ("we", "us", or "our") operates the website notbadhq.com (the "Site") and associated mobile applications (collectively, the "Services"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal information we receive from users of the Services.

1. Information Collection and Use

While using our Services, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to, your name and email address ("Personal Information").

2. Log Data

Like many service operators, we collect information that your browser or device sends whenever you visit our Site or use our applications ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

3. Cookies

Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive. Like many sites, we may use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.

4. Third-Party Services

We may employ third-party companies and individuals to facilitate our Services, to provide the Services on our behalf, to perform Service-related tasks, or to assist us in analyzing how our Services are used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Our Site is hosted on Firebase Hosting (Google LLC). Our mobile applications may use Firebase Analytics, Firebase Crashlytics, and Google Cloud services. We do not sell, trade, or otherwise transfer your Personal Information to outside parties.

5. Data Security

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

6. Data Retention

We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

7. Children's Privacy (COPPA)

Our Services, including SnapDrill (小本本), are designed to be used by K-12 students with the consent and supervision of a parent or guardian. We comply with the Children's Online Privacy Protection Act (COPPA).

WE DO NOT knowingly collect Personal Information from children under 13 without verifiable parental consent.

If you are a parent or guardian and you provide your child with access to our Services, you are consenting to the collection and use of your child's information as described in this Privacy Policy. If we discover that a child under 13 has provided us with Personal Information without parental consent, we will delete such information from our servers immediately.

8. Student Data Privacy & On-Device Processing

We prioritize the privacy of student data. Our applications are built with a "Local-First" architecture:

• On-Device Processing: All OCR (Optical Character Recognition), handwriting recognition, and mistake analysis are performed entirely on your device using Apple's Core ML and Vision frameworks.
• No Cloud Uploads: Photos of homework, exam papers, and handwritten notes are stored locally on your device. We do not upload this content to our servers.
• iCloud Sync: If you choose to enable iCloud backup, your data is encrypted and stored in your personal iCloud container, managed by Apple. We do not have access to your iCloud data.

9. Your Privacy Rights

Depending on your location, you may have certain rights regarding your Personal Information, including:

• Right to Access: You may request a copy of the Personal Information we hold about you.
• Right to Correction: You may request that we correct any inaccurate Personal Information.
• Right to Deletion: You may request that we delete your Personal Information, subject to certain legal exceptions.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Opt-Out: You may opt out of certain data processing activities.

To exercise any of these rights, please contact us at hello@notbadhq.com. We will respond to your request within 45 days.

10. California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your Personal Information.

We do not sell or share your Personal Information as defined by the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA/CPRA.

California residents have the right to request disclosure of the categories and specific pieces of personal information collected, the categories of sources, the business purpose for collecting the information, and the categories of third parties with whom the information is shared. To make such a request, please contact us at hello@notbadhq.com.

11. Do Not Track Signals

Our Site does not currently respond to "Do Not Track" (DNT) browser signals. However, we do not engage in cross-site tracking or sell your personal information to third parties.

12. International Users

Our Services are operated and managed on servers located within the United States. If you choose to use our Services from the European Union, or other regions of the world with laws governing data collection and use that may differ from U.S. law, please note that your Personal Information will be transferred to and processed in the United States.

13. Mobile Applications

When you use our mobile applications, we may collect additional information including device identifiers, device type, operating system version, and app usage data. Our applications may process data locally on your device using on-device machine learning models. Data processed on-device is not transmitted to our servers unless explicitly stated within the application. We adhere to Apple's App Store Guidelines and Google's Play Store policies regarding data collection and privacy.

14. Changes to This Privacy Policy

This Privacy Policy is effective as of February 16, 2026 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page. We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, please contact us at hello@notbadhq.com.

NotBad Labs L.L.C.
Registered in Wyoming, United States