Legal

Privacy policy

Slate Notes is built so your notebook stays on your iPad. This page says, in plain words, what leaves it, what we keep, and how to remove it.

last updated: to confirmCovers the Slate Notes iPad app and this website

Draft for review. This is not legal advice. It is written from how Slate Notes is designed today. Anything marked to confirm still needs a decision, or a lawyer’s review, before launch.

The short version

  • Your notebooks, pages and handwriting stay on your iPad.
  • When you tap Check or Graph, only what you lasso is sent, or one page’s handwriting if you choose Check This Page’s Writing. A practice answer you hand in and a question you ask Chalk are sent too. You see a plain-words screen about this before your first Check.
  • Our server never stores your lasso image.
  • Confirmed lines and verdicts are kept 30 days. Reports that a flag was wrong are kept 90 days.
  • You can download or delete your data from inside the app.

What stays on your iPad

Slate Notes is a notebook first. It works without an account, and nothing leaves your iPad while you are just taking notes.

  • Notebooks, covers, paper, imported PDFs, scanned pages, your Steps to revisit and your review cards stay on this iPad.
  • Your handwriting stays handwriting. It is only read when you ask a question about it.
  • Notebooks that only live on this iPad stay there until you delete them.

What is sent, and when

Only what you lasso, and only when you tap Check or Graph. On an imported page, that includes the printed part inside your loop. With “Check This Page’s Writing”, all the handwriting on that page is sent, never the printed page under it. Anything written inside your loop goes with it, so leave your name out of it. A practice answer you hand in is read and checked the same way, and when you ask Chalk about a check, your question is sent too. Other pages stay on your iPad.

  • Before your first Check, a screen explains how checking works. You can choose Continue or Not now, and change it any time in Settings › Privacy & data.
  • An image of your selection (or of the page’s handwriting, with Check This Page’s Writing) is sent to Mathpix or Claude, by Anthropic, which turns the ink into typed math. You see what was read, and can fix it, before anything is checked.
  • A math engine checks each step. It isn’t guessed by an AI. Claude, by Anthropic, gets the typed math, and any printed problem text inside your loop, to word the hints, and your question too when you ask Chalk, to word its reply.
  • Verdicts and hints come back to your page.
  • “Send only what I lasso” is always on. It is how checking stays private. The exceptions are ones you choose yourself: Check This Page’s Writing, a practice answer you hand in, and a question you ask Chalk.
  • “Help improve checking”, a switch for sharing problems the app couldn’t read, would be off by default. Whether v1.0 has it is still an open decision. to confirm

Graph, Watch, hints and questions to Chalk never use a Check.

What we keep, and for how long

This is the list of what our server holds, and for how long.

WhatWhat it isKept for
Lasso imageThe picture of the handwriting you circledNever stored by our server
Confirmed linesThe text of each line, once it was read and you confirmed it30 days
VerdictsThe result for each step: checks out, look here or can’t verify yet30 days
Printed problem textOn an imported page, the printed problem inside your loop30 days, with its check
HintsThe hints you were shown, and what they’re written from: the flagged step’s rule, reason and corrected line30 days, with its check
Wrong-flag reportsWhat you send when you tap “This flag is wrong”90 days
Cost recordsWhich kind of call was made and what it cost, with no content. It keeps your sign-in id for about a day after each call, even if you delete your data90 days
Practice, Chalk and the Exam PassWhat the server keeps for practice answers, Chalk questions and Exam Pass purchasesto confirm
Birth dateThe age screen asks once and doesn’t keep the dateNot kept
AccountYour Sign in with Apple account and your monthly Check countUntil you delete your data
Deleted account recordAfter Delete my data: your sign-in id, this month’s Check count and a keyed hash of your Apple user id (never the id itself), so deleting can’t reset the monthly limit8 days after you delete, or to the end of that month if later
Waitlist emailThe address you give on this website, stored only once you tap the link in our email to confirm itUntil you leave the list (every email has the link, and asking to join again sends a new one), or until we email you that Slate Notes is ready. Removed addresses stay in the database’s backups for up to 7 days
Waitlist limitsKeyed hashes of your address and your IP address (never either one itself), so no inbox gets more than 3 of our emails a day, and, after you leave, so an old confirm link can’t add you back24 hours; 3 days after you leave
Waitlist emailsEach email we send you, held by Resend, the service that sends itto confirm

Your account

Notes work without an account. Checks, Graph, Chalk, practice grading and, for now, the explainers need one: they use our server, and we count your free Checks. You sign in with Apple, and we don’t ask for your name or email.

Age and young users

Checks are for ages 13 and up. Notes work for everyone. The age screen asks once and doesn’t keep the date.

If you are under 13, Slate Notes runs in notes-only mode: you can write and draw with Apple Pencil, import PDFs, scan pages and make your own review cards, and everything stays on your iPad. Checks, hints, Chalk, Graph and practice grading are switched off, and nothing is sent anywhere.

  • Children’s privacy rules. Which rules apply to the under-13 experience, and what a parent or guardian can do.to confirm
  • Explainers and practice problems for under-13s. Whether the Watch explainers and practice packs work in notes-only mode. This is still an open decision.to confirm

Who helps us

Two services help with checking, the same ones the app names before your first Check: Mathpix or Claude, by Anthropic, reads your handwriting, and Claude, by Anthropic, words the hints and Chalk’s replies. We don’t use your homework to train AI. Before launch we will add where each one operates and how long it keeps anything.

  • Accounts, hosting and error reports. Supabase runs Sign in with Apple and holds our database, our server runs on Fly.io, Sentry receives its error reports, and Cloudflare R2 serves the explainers. This website and its waitlist run on Cloudflare, whose Turnstile check stops bots signing up, and Resend sends the waitlist email. What each one receives, and where.to confirm
  • No-training terms. That each provider’s terms on our account rule out training on what it receives.to confirm
  • Provider retention. How long each provider keeps what it receives.to confirm
  • Analytics and crash reports. Whether the app collects either, and exactly what.to confirm

Your choices

  • Download my data. Your notebooks, check history and settings in one file, from Settings › Privacy & data.
  • Delete my data. Deletes your account, your checks, hints and reports from our servers, and signs you out. Your notes stay on this iPad unless you also choose to delete them. So that deleting can’t reset the monthly limit, we keep your sign-in id, this month’s Check count and a keyed hash of your Apple user id until 8 days after you delete, or to the end of that month if later. It can’t be undone.
  • Choose Not now on the Check screen, or turn checking off in Settings, at any time.
  • iCloud sync. Sync is not built yet, so the wording about synced notebooks depends on what ships first.to confirm

Changes and contact

If this policy changes in a way that matters, we will update this page and the date at the top.

  • Contact address. Where to send privacy questions and requests.to confirm
  • Governing law and place. Which country’s law applies, and who the data controller is.to confirm
  • Last-updated date. To be set when counsel signs off.to confirm