Themis Legal Notebook™

THEMIS PRIVACY POLICY

Effective Date: [Jan 1, 2026]

This Privacy Policy explains what information Themis Legal Notebook™ (“Themis,” “we,” “us,” or “our”) collects, stores, uses, and discloses, and the choices available to you.

1. Overview

The App is designed to limit unnecessary data collection, but some information is processed and stored in our systems to operate the service, including database-backed storage, security, subscriptions, and optional AI features.

2. Information We Collect

A) User Content

We may collect, store, and process content you create, upload, paste, import, or generate in the App, including notes, outlines, drafts, research materials, citations, prompt templates, documents, AI prompts, and AI outputs.

This content may be stored on your device and in our databases to provide app functionality such as saving, retrieval, organization, backup, restoration, and, where supported, access across sessions or devices.

B) Account, Subscription, and Transaction Data

If you create an account or use subscription features, we may process identifiers such as internal user IDs, Apple transaction or receipt data, subscription status, and related metadata needed to authenticate access and provide paid features. We do not receive your full payment card information from Apple.

C) Technical and Usage Data

We may process limited technical data such as device type, operating system, app version, timestamps, request IDs, security signals, IP-address-based information, crash data, performance metrics, and feature usage metadata.

We try to minimize collection and avoid storing the substance of your legal content in diagnostic logs unless reasonably necessary to investigate a failure, prevent abuse, protect the service, or comply with law.

D) Communications

If you contact support or otherwise communicate with us, we may keep your contact information and the contents of the communication.

3. How We Use Information

We may use information to:

• provide, maintain, and improve the App,
• save, retrieve, organize, and display your content,
• provide AI-assisted features and generate outputs,
• authenticate users and validate subscriptions,
• secure the App, detect abuse, prevent fraud, and enforce our terms,
• troubleshoot errors and improve reliability,
• communicate with you about service issues, support, or policy updates, and
• comply with legal obligations and protect rights, safety, and security.

4. AI Processing and Company-Managed API Keys

If you use AI features, your prompts, documents, instructions, and related content may be transmitted through our systems to third-party AI providers using Themis-managed API credentials. You do not need to supply your own API key to use supported AI features.

To operate the App, we may format, structure, route, filter, store, and post-process requests and responses. We may store AI inputs and outputs in our databases and related systems as needed to provide features such as saving, retrieval, history, project continuity, security, debugging, and, where supported, access across sessions or devices.

Third-party AI providers may process submitted data under their own terms, privacy policies, and service settings. We do not control third-party providers’ data practices. If you do not want data transmitted to third-party AI providers, do not use AI features.

5. Storage, Retention, and Deletion

We may store your content in databases operated by us or on our behalf for as long as needed to provide the App and related functionality, or until you delete it through available controls, subject to backup, legal, security, and operational retention needs.

Content you delete may persist for a limited time in backups, caches, logs, or replicated systems before permanent deletion. Subscription records, security logs, and similar business records may be retained longer where reasonably necessary for accounting, fraud prevention, legal compliance, dispute resolution, or enforcement.

6. Encryption and Security

We use reasonable administrative, technical, and organizational safeguards designed to protect data. This includes encrypted transmission between your device, our systems, databases, and integrated service providers, and encrypted storage for data maintained in our systems.

Encryption reduces risk but does not make data immune from unauthorized access, disclosure, alteration, or loss. Encryption also does not mean your data is inaccessible to the App or service systems when processing is required to provide functionality.

Access to data is limited to authorized personnel and service providers who reasonably need it to operate, support, secure, or maintain the App.

7. When We Share Information

We do not sell your personal information or your legal content.

We may share information with service providers that help us operate the App, such as:

• cloud hosting, database, storage, security, and content delivery providers,
• Apple for subscriptions and platform services,
• analytics, crash reporting, or customer support providers,
• third-party AI providers used to generate responses, and
• professional advisers, acquirers, or successors in connection with a merger, financing, acquisition, or similar transaction.

We may also disclose information when reasonably necessary to comply with law, respond to legal process, enforce our terms, or protect rights, safety, and security.

8. Logs and Diagnostics

We try to avoid using the substance of your notes, documents, or AI content for analytics. However, limited operational logs, performance data, and diagnostics may be processed to keep the App running, investigate failures, detect abuse, and improve reliability.

If you opt into device-level diagnostics or crash sharing, Apple or other platform providers may supply crash or performance reports that include device or app information.

9. Your Choices and Controls

You may be able to:

• use non-AI features without using AI features,
• edit or delete content stored in the App through available in-app tools,
• stop using the App or uninstall it,
• request deletion of account-linked server-side data by contacting [email protected], subject to legal, security, backup, and operational retention needs, and
• choose not to upload privileged, confidential, or sensitive information.

Deleting the App from your device does not necessarily delete server-side data associated with your account or use of the service.

10. Privacy Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, or to object to or limit certain processing. To exercise available rights, contact [email protected]. We may need to verify your identity before acting on a request.

11. Children

The App is not directed to children under 13. If you are under 18, use should be with appropriate supervision and only where lawful.

12. Changes

We may update this Privacy Policy from time to time. The Effective Date at the top will indicate when the latest version took effect. Continued use of the App after a revision becomes effective means you accept the revised policy.

13. Contact

If you have questions or requests regarding this Privacy Policy, contact:

Potato Studios Development
[email protected]