Privacy Policy

About this policy

SecondEarth operates NoteCube and the NoteCube event website. This notice explains how we handle information when you record conversations, create notes, join an event, or connect an AI service. Contact: sunwoo@secondearth.io. Privacy requests may also be sent to sunwoo@secondearth.io.

Information we process

• Account: email address, name or profile image if supplied by you or your sign-in provider, account identifier, authentication and security records. WorkOS provides account authentication.
• Your content: audio recordings you create or upload, transcripts, speaker labels, translations, summaries, vocabulary, documents, edits and revision history, prompts and generated results. These can include personal information about you and other speakers. Recordings and documents are stored on our servers; NoteCube is not an exclusively on-device service.
• Events: event details, host and attendee identifiers, participant activity needed to provide access, captions and shared results. A web viewer provides a name and may optionally provide an email address or LinkedIn profile. The name and contact details are shown to the host. Information you choose to contribute to an event may be visible to its host and other participants according to that feature's audience.
• Purchases: store transaction identifiers, subscription status, entitlements, and credit or event-pass records. Apple or Google handles payment details; we do not receive your full payment-card number. RevenueCat helps us validate purchases and access.
• Operations and support: IP addresses and technical request records, device/app details, usage and diagnostic information where enabled, and messages you send to support. Contact us for information about analytics and available privacy controls.

Why we use it

We process this information to authenticate you, record and transcribe speech, produce and update documents, provide event captions, execute your authorized AI connections, manage purchases and usage limits, respond to requests, and protect and maintain the service. Where applicable, processing relies on providing our contract with you, your consent, legal obligations, or legitimate interests in security and service operation. You may withdraw consent for optional processing; doing so does not invalidate earlier lawful processing.

Providers and AI processing

We use WorkOS for authentication, Convex for backend processing and storage, Soniox for speech recognition, OpenRouter and the model providers it routes to for AI processing, and RevenueCat for purchase management. Our website hosting and operational providers also process the technical information needed to deliver the service. Text sent for AI processing may include transcript excerpts, document context and your instructions.

We configure our server AI requests to exclude model providers that collect request data under OpenRouter's provider routing controls. This routing control does not mean that all providers have zero retention, that no operational logs exist, or that every external AI account has the same policy. Provider processing and retention depend on the applicable service terms and configuration. We do not claim end-to-end encryption.

When you authorize an external AI connection, such as Claude or ChatGPT through MCP, that service can request the NoteCube content and actions allowed by the connection. A connection may read recordings' transcripts and update documents. Review the permissions before connecting and revoke access when it is no longer needed. Revocation stops future authorized access; it does not erase copies already received by another service. That service's own terms and privacy settings apply to its copies.

Events, recording and sharing

Tell other speakers before recording and obtain the permissions required in your situation. The host is responsible for explaining event recording, captions, sharing and the audience. App consent does not replace another person's legally required permission. Treat an event QR code or link as an access credential: people who receive or forward it may access the content available through that link. Do not include confidential information in a shared event unless you are entitled to share it.

We disclose content to the people and services you authorize, to providers operating the service, and when reasonably necessary to comply with law or protect rights and security. A corporate restructuring may require transfer subject to appropriate protections. We do not sell your recordings or documents.

Retention, deletion and your choices

We retain account-linked recordings, transcripts and documents to provide your saved library until you delete them or your account, subject to service limits disclosed to you. Removing a source recording can also affect document entries and revision history derived from it. Deletion is processed asynchronously; a successful request is not a guarantee that every provider copy has already been removed.

You can request account and associated-content deletion in NoteCube's account settings or by emailing sunwoo@secondearth.io with the subject NoteCube account deletion. Use the email associated with your account; we may need to verify ownership. You may also request access, correction, a copy, deletion, restriction or objection where applicable. Event viewers without an account may contact us with the event link and information they wish to remove. Do not send passwords or a recording containing unrelated private information.

Limited records may remain where needed for transaction and legal obligations, security, abuse prevention, or evidence of your deletion request. A minimal account marker can prevent a deleted account from being silently recreated. Backups and provider systems may take additional time to expire or be purged. We will explain applicable retention exceptions when handling a request. Subscription cancellation is separate from account deletion; manage renewal through the store where you purchased.

International processing and security

Our providers may process information outside your country. We use applicable contractual and other safeguards for international processing. We apply access controls and service safeguards appropriate to the data; no service can promise absolute security. Provider locations and the relevant transfer details are available on request.

Children and changes

NoteCube is not directed to children under 13, or a higher minimum age required by applicable law. In South Korea, our minimum age is 14. Do not create an account below that age. If we learn that we have collected a child's information without a required authorization, we will take steps to remove it. Parents and guardians can contact us above. We will post material changes to this notice and provide additional notice where required.

Operator information and effective date

Operator brand: SecondEarth. Apple App Store seller: Sunwoo Kim. Support: sunwoo@secondearth.io. Privacy contact: sunwoo@secondearth.io.

Effective October 1, 2026.

Website analytics

This marketing website does not currently load a visitor analytics integration or set analytics cookies. Vercel hosts this website and may process technical request information needed to deliver and secure it. The participant application and mobile app process usage and diagnostic information separately.