Editing Notability (section)

===Users Privacy violations (''2025'')===
[[File:Locked out.png|thumb|User unable to access Notability unless the new Privacy Policy is accepted]]
In July 2025, Notability updated its [https://notability.com/privacy&#x20;Privacy&#x20;Policy Privacy Policy]. All users, including those who purchased the app before November 2021, were locked out of the app and their notes until they accepted the new terms. User reports and concerns are discussed in these Reddit threads ([https://www.reddit.com/r/notabilityapp/comments/1msjoi7/has_anyone_read_the_updated_privacy_policy/ 1], [https://www.reddit.com/r/notabilityapp/comments/1my5fe2/read_the_privacy_policy_and_now_deleting_account/ 2], [https://www.reddit.com/r/notabilityapp/comments/1mabkou/notabilitys_new_privacy_policy_ai_and_voice_notes/ 3]).

Key concerns raised about the updated policy include:

*'''AI processing of personal notes and voice''': Notability uses AI services to process notes and voice recordings for features like transcripts, summaries, and quizzes. Although they state data is deleted after processing, temporary retention and the use of unnamed third-party providers raise transparency and control concerns.
*'''Persistent storage of audio transcripts''': Original audio is deleted after processing, but the resulting text transcripts are retained indefinitely on Notability servers unless a user requests deletion.
*'''No clear opt-out or local processing''': There is no obvious option to run transcripts or summaries entirely on-device. These features send content to third-party processors, and users are not clearly informed at the moment of use that data will leave their device.
*'''Data sharing in case of acquisition or merger''': The terms allow transferring user data if the company is acquired or merges. Given the sensitivity of personal and educational notes, this presents potential risks if ownership changes.
*'''Limited transparency about AI vendors''': The policy references “AI providers” without naming them, preventing users from assessing their reliability or compliance.
*'''Children’s privacy protections''': While certain features are not intended for users under 16, protections appear to rely on self-reported age, meaning data could be collected from minors who do not disclose their age.