Privacy Policy

Who we are

SeeNot is an Android attention-management app and related website operated by the SeeNot project maintainer. For privacy questions, contact contact@seenot.site.

Information handled by the website and account service

• Account information: email address, optional display name, locale, account status, creation time, and update time.
• Authentication information: password hashes, email verification and password reset challenge records, access tokens, refresh token hashes, token expiry and revocation status.
• Device connection information: device ID, platform, app version, optional device name, last-seen time, creation time, and revocation time.
• Paid plan information, if you purchase SeeNot Plus or another paid SeeNot plan: plan, entitlement, quota, renewal, billing status, Paddle customer or transaction references, invoice or tax metadata shared by Paddle, refund status, and customer-support records needed to provide and manage that service.
• Security and operations events: account, token, verification, login, and device events. These events may include hashed IP address or user-agent fields when enabled by the backend.

Information handled by the Android app

• Intent input: the text you type or the transcription of what you say, plus the structured intent generated from it.
• Session and rule data: controlled app package names, app display names, time limits, constraints, intervention levels, session start/end times, and end reasons.
• Screen analysis records: screenshot hashes, AI analysis results, confidence values, violation or in-scope judgments, action records, elapsed time, media context, and optional screenshot file paths.
• User corrections: false-positive marks and app-specific hints you add so later judgments can be more accurate.
• Configuration: selected AI provider, model, base URL, speech-to-text settings, and API keys. API keys are stored on the device using Android encrypted shared preferences.
• Diagnostics and exports: if you enable development diagnostics or manually export logs/configuration, those files are created on your device and are only shared when you choose to share them.

Accessibility, screenshots, overlays, microphone, and app visibility

SeeNot asks for Android Accessibility Service access so it can detect app and window changes, take screenshots for screen analysis, and perform gestures such as back or home when an intervention requires it. It asks for overlay permission to show the floating input button and intervention UI. It asks for microphone access only for voice input. It asks for package visibility so you can select and manage apps.

• SeeNot does not use Accessibility Service access to read passwords for account takeover, perform advertising profiling, or sell behavioral data.
• Sensitive screens such as payment confirmation, financial display pages, login, registration, verification-code, and password-list screens are treated with privacy-first handling and are excluded from normal history persistence.
• Voice input is optional. Text input works without microphone access or speech-to-text configuration.

Prominent permission disclosures

This Privacy Policy is not a substitute for any in-app permission explanation, Android system permission dialog, app-store Data Safety disclosure, or other prominent disclosure required for sensitive permissions. Where required, SeeNot should explain the relevant permission before or when asking you to enable it.

AI providers and third-party processing

SeeNot needs an AI model to parse intents, analyze screens, and optionally transcribe speech. The app can use providers such as Qwen/DashScope, OpenAI-compatible providers, Gemini, Anthropic, GLM, or a custom/self-hosted endpoint depending on your settings.

• When you use intent parsing, your intent text is sent from the Android app to the configured AI provider.
• When you use screen analysis, screenshots or screen-derived content are sent from the Android app to the configured vision model provider.
• When you use voice input, audio or recorded speech data are sent from the Android app to the configured speech-to-text provider.
• If you use SeeNot Plus or another paid SeeNot plan that includes managed AI access, the app uses project-managed credentials or entitlement tokens to call Qwen/DashScope or another disclosed AI provider directly from the app. SeeNot does not route, receive, or proxy your prompts, screenshots, or audio for AI analysis through a SeeNot screen-analysis server.
• Third-party AI providers process that information under their own terms and privacy policies. SeeNot does not control those providers' retention, training, logging, or security practices.
• If you configure a self-hosted or custom endpoint, data is sent to the endpoint you provide.

Paddle payments

If you purchase SeeNot Plus or another paid SeeNot plan through Paddle, Paddle.com may act as merchant of record or online reseller for the order. Paddle may collect and process buyer, payment, billing, tax, fraud-prevention, invoice, refund, dispute, and customer-support information under Paddle's own buyer terms and privacy notice.

• SeeNot does not need to store your full payment card number when Paddle processes the payment.
• SeeNot may receive limited transaction, subscription, entitlement, customer, refund, dispute, tax, or invoice metadata from Paddle so we can activate access, provide support, reconcile accounts, prevent abuse, and comply with law.
• Payment support, tax exemption requests, and some refund workflows may be handled by Paddle directly through Paddle buyer support.

What we do not do

• We do not sell your personal information.
• We do not use your Android session history for advertising.
• We do not operate a hosted SeeNot screen-history backend for the Android app.
• For SeeNot Plus or another paid SeeNot plan, we do not receive your prompts, screenshots, or audio for AI analysis on a SeeNot screen-analysis server.
• We do not intentionally collect payment card numbers, banking credentials, passwords, or verification codes through SeeNot screen-history features.

How we use information

• Provide account registration, sign-in, email verification, password reset, token refresh, and device management.
• Provide and administer SeeNot Plus or other paid plan, trial, quota, renewal, refund, and support flows when you use those services.
• Run SeeNot's intent-based attention-management features on Android.
• Enable the Android app to send configured requests directly to AI providers selected by you.
• Secure the service, prevent abuse, debug failures, and maintain reliability.
• Respond to support, privacy, and account requests.

Storage and retention

• Android app records are stored locally on your device unless you export or share them.
• API keys and endpoints are stored on your device in encrypted shared preferences.
• Website account and device records are stored in the SeeNot account backend for as long as needed to provide the account service, secure sessions, comply with obligations, and resolve disputes.
• Payment, entitlement, quota, billing, refund, and support records for SeeNot Plus or another paid SeeNot plan may be retained for the period needed to provide the service, meet tax/accounting obligations, prevent fraud, handle disputes, and comply with law.
• Refresh tokens expire according to the backend configuration and may be revoked when you sign out, reset your password, or revoke a device.
• Email verification and password reset challenges are short-lived and may be retained in backend records for security and audit purposes.

Your choices and rights

• You can use text input instead of voice input.
• You can choose your AI provider, configure a custom endpoint, or stop using AI-backed features.
• If SeeNot Plus or another paid SeeNot plan is available to you, you can choose whether to use that managed access where available, or continue using your own provider credentials where the product supports it.
• You can delete Android app data through Android app storage controls, in-app delete/export controls where available, or by uninstalling the app.
• You can revoke connected devices from the account page when device management is available.
• You can delete your SeeNot account from /account/delete/ when signed in. The website and Android account deletion flows delete the same account.
• You can request access, correction, deletion, or other privacy assistance by contacting contact@seenot.site. Depending on where you live, local law may give you additional rights such as objection, restriction, portability, or appeal.

Security

We use technical safeguards such as password hashing, refresh-token hashing, token expiry, encrypted on-device storage for AI credentials, and transport security where services are deployed over HTTPS. No system can be guaranteed perfectly secure.

Children

SeeNot is not directed to children under 13. If you believe a child provided personal information to SeeNot without appropriate consent, contact us so we can review and delete it where required.

International use

SeeNot may be used with service providers and AI providers in different countries. If you choose a provider outside your country, your content may be processed in that provider's operating regions.

Changes

We may update this policy as SeeNot changes. Material changes will be reflected by updating the effective date and, where appropriate, adding notice in the product or website.