Privacy Policy
Last updated October 12, 2026
Citadel helps students capture, combine, and study their class notes together. This policy covers the Citadel iOS app and mycitadel.us (together, “Citadel”). It explains what we collect, why, and the choices you have. Citadel is run by a small student team. You can reach us at my.citadel.official@gmail.com.
What We Collect
Account info: your name, email, username, and, if you sign in with Google, basic Google profile details.
Your content: notes you write or import, files you upload (slides, PDFs, photos, recordings), and study material Citadel generates for you.
Study rooms: limited connection data needed to run live audio, video, and screen sharing.
Usage and device data: pages and features you use, time in the app, device type, operating system, and IP address. We collect this through Supabase.
How We Use It
We use your information to run Citadel. That means syncing and backing up your content, powering search and AI features, running study rooms, keeping accounts secure, answering support requests, and improving the app from aggregate usage. We send account and service emails. We send product updates only if you opt in. We never sell your personal information, and we don’t use your notes for advertising.
Your Notes and Uploads
Your content is private to you and the groups or links you choose to share it with. It is encrypted in transit. Uploads may be processed to pull out text and make them searchable. You can delete any note or upload at any time.
AI Features
When you merge notes or generate quizzes and flashcards, the content involved is sent to our AI provider, Gemini, only to produce your result. We don’t allow that provider to train its models on your content. AI output can be wrong, so check it before you rely on it.
Study Rooms
Audio and video pass between participants in real time and are not recorded unless a host starts a recording. If that happens, everyone in the room is notified.
Who We Share With
We share data only with the service providers that run Citadel: Supabase (hosting, sign-in, analytics), Expo (app delivery), and Gemini (Google). Each one may use your data only to provide its service to us. We may also disclose information if the law requires it or to protect users’ safety.
Students and Children
Citadel is for students 13 and older. If you’re under 18, use Citadel with a parent or guardian’s permission. We don’t knowingly collect data from children under 13. If we learn we have, we delete it. Parents can contact us at any time to review or delete their child’s data.
Keeping and Deleting Data
We keep your content while your account is active. You can delete your account in the app under Settings > [Delete Account]. When you do, we permanently remove your data within 30 days, except limited records the law requires us to keep.
Your Rights
You can access, correct, export, or delete your information, and you can withdraw any consent you’ve given. Depending on where you live, including California and the EU, you may have more rights under local law. To make a request, email my.citadel.official@gmail.com. We’ll respond within 30 days.
Security
We use reasonable technical and organizational safeguards, but no system is perfectly secure. If a breach affects your personal data, we’ll notify you as the law requires.
Where Data Is Stored
Citadel is based in the United States, and your data is processed there. If you use Citadel from outside the U.S., your data is transferred to the U.S. with the safeguards the law requires.
Changes
If we make a significant change to this policy, we’ll update the date at the top and notify you in the app or by email.
Contact
my.citadel.official@gmail.com
