This Privacy Policy describes how NoteHero (“we”, “us”) collects, uses, and shares information when you use the NoteHero mobile app, the website at notehero.et, our Telegram bots (@NoteHeroBot and @NoteheroAIbot), and related services (together, the “Services”).
1. Who we are
NoteHero provides lecture notes, quizzes, Super Notes, flashcards, GPA tools, and related study features for Ethiopian university and college students. Contact details are at the end of this policy.
2. Information we collect
2.1 Telegram sign-in
NoteHero does not register users with an email address or password. When you log in, Telegram confirms your identity to us. We then store:
- Your Telegram user id (chat id)
- Your Telegram first name and username, if you have one
- A session token on your device so you stay signed in
If you use the Services only through Telegram bots without opening the app, we still store the Telegram profile fields needed to run those bots.
2.2 Courses, progress, and app settings
We store the courses you select, onboarding status, premium status, AI credit balance where applicable, and similar settings needed to run the product. Quiz scores and downloads kept only on your phone stay on the device unless a feature explicitly syncs them.
2.3 Devices and notifications
If you allow notifications, we store a Firebase Cloud Messaging token, device platform, timezone, app version, and coarse activity such as last open time so we can send study reminders and service messages. You can turn notifications off in the app or in system settings.
2.4 Payments
Premium is sold in the app and through @NoteHeroBot. We use Chapa for card and supported local rails, and we may ask you to upload a CBE or similar transfer screenshot through the system photo picker (not full gallery access). We receive payment references, amount, package, and status. We do not store your full card number or bank password. Receipt images are used to verify a transfer and are not published.
2.5 Diagnostics
We use Google Firebase Analytics and Firebase Crashlytics to understand crashes and aggregated usage. Those services may collect device and app diagnostics under Google’s terms.
2.6 Local multiplayer
The optional “Play together” quiz uses your local network so nearby devices can find each other. That traffic is for the game session. We do not use it to build an advertising profile.
2.7 Feedback you send
If you submit in-app feedback, we receive the message, optional contact text you type, app version, and (if you are signed in) that you are a Telegram-authenticated user. Feedback is forwarded to our support chat so we can reply.
2.8 What we do not collect
- We do not create email accounts for NoteHero.
- We do not ask for your contacts, precise GPS location, or full photo library permission on current Android builds.
- We do not sell your personal information.
3. How we use information
- To provide notes, quizzes, premium unlocks, AI features, and bot replies
- To confirm payments and prevent abuse (duplicate receipts, shared accounts, fraud)
- To send notifications you enabled
- To fix crashes and improve the product
- To comply with Ethiopian law, tax, and payment-provider rules
4. Sharing
We share data only as needed to operate the Services:
- Telegram — delivery of bot messages and login confirmation
- Chapa — payment processing
- Google Firebase — analytics, crash reports, and push delivery
- Hosting providers — servers that store the databases described above
- Law enforcement or courts — if required by applicable law
Firebase privacy information: firebase.google.com/support/privacy. Chapa: chapa.co.
5. Retention
We keep account and device records while you use NoteHero. After you complete account deletion, we remove or anonymize personal profile, sessions, device tokens, course selections, and AI credit rows tied to your Telegram id.
We retain payment and tax records (amount, reference, package, status) as required for accounting, chargebacks, and Ethiopian legal obligations. Those records are not used to keep you signed in.
6. Account deletion (required extra steps)
Google Play requires a deletion path. NoteHero does not put a delete button in Settings or on the home screen. To start deletion you must leave the main app screens and finish the request on the website:
- In the app, open More, then About.
- Scroll to the very bottom, past the copyright line, and tap the small Data requests text.
- That opens https://notehero.et/account/ in your browser.
- Read every warning page and tick every acknowledgement box.
- Wait for the on-page timer to finish (the server also enforces this wait).
- Confirm the request in Telegram with @NoteHeroBot.
- Type the exact confirmation phrase shown on the page, then submit.
You can also open notehero.et/account/ in a browser without the app, but you still must complete Telegram confirmation and the phrase step. Logout, uninstalling, or “Clear storage” in Settings does not delete your account.
7. Your choices
- Turn off push notifications in Settings or system settings
- Clear downloaded files on the device from Settings without deleting the account
- Log out of the app (this does not erase server data)
- Complete the website deletion flow in section 6
8. Children
NoteHero is aimed at university and college students in Ethiopia. It is not directed at children under 13. If you believe a child under 13 created an account, contact us and we will delete the associated data.
9. Security
We use HTTPS, hashed session tokens, and access controls on our servers. No method of storage is perfectly secure. Do not share your Telegram login or payment receipts with other people.
10. International processing
Servers and subprocessors (including Google Firebase) may process data outside Ethiopia. By using the Services you understand that this transfer is necessary to operate the app and notifications.
11. Changes
We may update this policy. The “Last updated” date will change. Material changes may also be announced in the app or on notehero.et. Continued use after an update means you accept the revised policy.