Privacy Policy

Introduction

Summit ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

1. Information We Collect

1.1 Information You Provide

Account Information:

• Email address (required)
• Password (encrypted)
• Display name (optional)
• Profile picture (optional)

Payment Information:

• Payment handled by Google Play or Stripe
• We do NOT store credit card numbers
• We receive transaction confirmation only

Content You Submit:

• URLs you share with the Service
• Text content you input
• Content saved to your queue
• Audio preferences and playback history
• Labels and categories you create

1.2 Automatically Collected Information

Usage Data:

• Features used
• Time spent in app
• Audio playback statistics
• Queue management actions
• Summary generation requests

Device Information:

• Device type and model
• Operating system version
• App version
• Unique device identifiers
• IP address
• Browser type (for web/extensions)

1.3 Information from Third Parties

AI Processing:

• Your content is sent to AI providers (Google Gemini, OpenAI, Lemonfox)
• AI providers process content per their privacy policies
• We do NOT train AI models on your data

AI Provider Privacy Policies:

• Google Gemini
• OpenAI
• Lemonfox

2. How We Use Your Information

2.1 Service Delivery

• Provide and maintain the Service
• Process your content requests
• Generate summaries and audio
• Store your queue and preferences
• Sync across devices

2.2 Communication

• Send service announcements
• Respond to support requests
• Send marketing emails (with consent)
• Notify of Terms/Policy changes

2.3 Improvement and Analytics

• Analyze usage patterns
• Improve features and performance
• Fix bugs and issues
• Develop new features

3. How We Share Your Information

3.1 Service Providers

Infrastructure: Supabase (database, authentication, storage) - United States

AI Services: Google Gemini, OpenAI, Lemonfox - Content processing

Billing: RevenueCat (subscription management via Google Play)

Error Tracking: Sentry (error monitoring)

3.2 We Do NOT Sell Your Data

• We do not sell personal information to third parties
• We do not share for third-party marketing without consent

4. International Data Transfers

Our infrastructure is located in: United States (Supabase US region)

For EU/EEA Users: Your personal data may be transferred to and processed in countries outside the European Economic Area, including the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

As an Israeli business, we also comply with the Israeli Privacy Protection Law, 1981.

5. Data Retention

Account Data: Retained while account is active, deleted within 30 days of account deletion.

Content and Audio: Queue items kept until you delete them. Generated audio cached for 30 days.

Backup Data: May persist in backups for up to 90 days.

Deletion Requests

To delete your data:

• Delete account in app settings, OR
• Email support@summarize-it.app with "Data Deletion Request"

6. Your Privacy Rights

6.1 Rights for All Users

• Access: View your personal data
• Correction: Update inaccurate data
• Deletion: Request account and data deletion
• Portability: Export your data
• Opt-Out: Unsubscribe from marketing emails

6.2 GDPR Rights (EU/EEA/UK Users)

Under GDPR, you have additional rights including erasure ("right to be forgotten"), restriction of processing, and lodging complaints with supervisory authorities.

To exercise GDPR rights: support@summarize-it.app

6.3 CCPA Rights (California Users)

Under CCPA, you have the right to know what data we collect, access your data, delete your data, and not be discriminated against for exercising your rights.

We do NOT sell personal information.

7. Data Security

We implement reasonable security measures:

• Encryption in transit (TLS/SSL)
• Encryption at rest (database encryption)
• Access controls and authentication
• Regular security audits
• Secure password storage (bcrypt)

No system is 100% secure. We cannot guarantee absolute security. You use the Service at your own risk.

8. Children's Privacy

The Service is NOT intended for children under 13 (or under 16 in EU).

• We do not knowingly collect data from children
• If you're under required age, do not use the Service
• Parents: If you believe your child provided data, contact us

9. Cookies and Tracking

Essential Cookies: Authentication and session management (cannot be disabled)

Analytics Cookies: Usage statistics (can be disabled)

Preference Cookies: Remember your settings (can be disabled)

Manage cookies through your browser settings. We do not currently respond to Do Not Track signals.

10. AI Content Processing

Your content is sent to AI providers for summarization and text-to-speech generation. We do NOT use your content to train our AI models. AI providers may have their own data usage policies - please check their terms.

Summaries and audio are AI-generated:

• May contain errors or inaccuracies
• Not reviewed by humans
• Provided "as is"

11. Changes to Privacy Policy

• We may update this Policy at any time
• Material changes notified via email
• 30-day notice period before changes take effect
• Continued use = acceptance

12. Contact Us