Privacy policy

Your course notes are used to make questions for you, and for nobody else. They feed no shared bank, are shown to no other student, and are not used to train any model. They are sent to Google to be turned into QCM, then kept by us for as long as you keep them.

The controller is Ronéo's publisher, reachable as set out in the legal notice. For any question about your data, write to support@roneo.study.

No data protection officer is appointed at this stage: the service carries out neither large-scale systematic monitoring nor large-scale processing of sensitive data. If that changes, this page will be updated before it does.

Account: email address, first name if you give one, password as a hash, and a profile picture if you upload one. These are handled by Clerk.

Studies: year, faculty if you provide it, daily goal, language, accent colour and display name.

Content: the documents you upload, the text extracted from them, the recordings you have transcribed and their transcription, and the questions and fiches produced from them.

Activity: your answers, their discordances, your scores, your runs, your streak and your points.

A live transcription session keeps no audio at all. Sound goes to Google as it is spoken and only the text is stored — which is also what makes it possible to transcribe a lecture theatre without keeping the voices of people who agreed to nothing.

Providing the service — account, upload, generation, revision, transcription: performance of the contract (Article 6(1)(b) GDPR).

Security, abuse prevention and quota enforcement: legitimate interest (Article 6(1)(f)).

Internal audience measurement and the two-version test of the home page: legitimate interest, on aggregate data and a variant identifier that says nothing about you.

Appearing under your name on the leaderboard: consent (Article 6(1)(a)), given in settings and withdrawable in the same place. Unticked — and it is unticked by default — you are still counted in the ranks but never named.

Accounting and tax obligations, once paid subscriptions exist: legal obligation (Article 6(1)(c)).

Supabase — database and document storage, eu-central-1 region (Frankfurt, Germany).

Clerk, Inc. — authentication and account management, United States.

Google — question generation and transcription, through the Gemini API. Your course text and transcription audio pass through it. These are not used to train models.

RackNerd LLC — application server, Buffalo, New York State, United States.

Three of these four providers are established in the United States: your data is therefore transferred outside the European Union. Those transfers rely on the European Commission's standard contractual clauses and, where applicable, on certification under the EU–US Data Privacy Framework. Storage of the documents themselves remains in Germany.

A deleted document goes immediately, along with its extracted text and the questions drawn from it.

The account and its content are kept for as long as the account exists, then erased within thirty days of its closure.

Technical logs are kept for at most twelve months, in line with applicable retention obligations.

Accounting records are kept for ten years, as the law requires.

You have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to give directions about your data after your death.

Most of this is done directly in the application: settings let you correct your information, delete a document or a subject, and request closure of the account. For anything else, write to support@roneo.study; we answer within a month.

You may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.

We sell no data. We do not run targeted advertising. We do not use your courses to train a model, nor to feed another student's questions. No automated decision is taken about you.