Privacy Policy

Last updated: September 15, 2025

GalaxySailLab Inc. ("GalaxySailLab," "we," "us," or "our") provides the SideNote mobile application and related websites and services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Services, and the choices you have.

Scope: Our Services are intended for residents of the United States only.

Content

  1. Information We Collect
  2. How We Use Information
  3. Disclosure of Information
  4. Advertising, Analytics & Third-Party SDKs
  5. Your Rights & Choices
  6. Data Retention
  7. International Transfers
  8. Security
  9. Children's Privacy
  10. Do Not Track
  11. Changes to This Policy
  12. Contact Us
  • Appendix A – California Notice at Collection
  • Appendix B – US State Privacy Rights

1. Information We Collect

We collect information about you in the following ways:

A. Information you provide

Account & profile: name, display name, email, phone number, password or authentication tokens, avatar, preferences.

Content: messages, text, photos, videos, audio/voicemail, documents, and other submissions you upload or generate within SideNote.

Support & feedback: questions, bug reports, survey responses.

Payment (if applicable): billing address, transaction records. Payments are processed by our payment processor; we do not store full card numbers.

B. Information collected automatically

Device & app data: device model, OS version, app version, device identifiers (e.g., IDFA/GAID where permitted), language, time zone, battery/connection status.

Usage data: in-app events, screens viewed, taps/clicks, feature usage, crash logs, performance data.

Log data: IP address, timestamps, referrer/UTM parameters, and diagnostic information.

Location: coarse or precise location if you grant permission in your device settings.

C. Information from third parties

Single sign-on (e.g., Sign in with Apple/Google), if you choose to connect.

Contacts: if you opt in, we may access your contacts solely to enable features like inviting friends or matching connections; contact data is not used for other purposes without consent.

Linked services: if you connect external accounts, we receive information per your authorization.

D. Mobile permissions (optional and requested in-app)

  • Camera/Photos for capturing or uploading media.
  • Microphone for voice features.
  • Contacts to find friends/invite (opt-in).
  • Location to enable location-based features.

You can manage permissions in your device settings; some features may not work without them.

2. How We Use Information

We use personal information to:

  • Provide and operate SideNote, including account creation, core features, and customer support.
  • Process transactions, subscriptions, and send purchase confirmations.
  • Personalize content, settings, and recommendations.
  • Communicate with you (service messages, security alerts, updates); with your consent or as permitted by law, send marketing communications you can opt out of at any time.
  • Improve the Services (analytics, debugging, research, and testing).
  • Ensure safety and integrity (fraud prevention, abuse detection, enforcing terms, protecting our rights and users).
  • Comply with legal obligations and respond to lawful requests.
  • (If applicable) Advertising & measurement, including cross-device/context measurement in accordance with your choices (see Section 4).
  • (If applicable) Automated processing/AI features to deliver functionality such as transcription, summaries, classification, or recommendations. We do not use your content to train models for third parties without your consent.

3. Disclosure of Information

We disclose personal information in these circumstances:

  • Service providers/Processors: companies that help us run the Services (hosting, analytics, customer support, cloud storage, payments, SMS/push, email, fraud prevention). They may access information only to perform services on our behalf under contractual confidentiality and security obligations.
  • Business transfers: as part of or during negotiations of a merger, financing, acquisition, reorganization, or sale of assets.
  • Legal & safety: to comply with law, enforce our terms, or protect the rights, safety, and property of GalaxySailLab, users, or the public.
  • With your direction or consent: e.g., when you share content publicly or connect third-party accounts.
  • (If applicable) Advertising partners: see Section 4 and Appendix A for "sale"/"sharing" disclosures under California law.

We do not sell personal information for money. Some US state laws define "sell" or "share" to include use of certain advertising identifiers—your choices are described below.

4. Advertising, Analytics & Third-Party SDKs

We may use analytics tools and, if applicable, advertising networks and mobile SDKs to understand usage and (where allowed) deliver or measure ads. These partners may set or read identifiers on your device and collect usage data over time and across apps or sites for analytics or interest-based advertising (also called "targeted advertising" or "cross-context behavioral advertising").

Your choices

  • Opt-out of interest-based ads: Use in-app settings (if provided), your device settings ("Limit Ad Tracking" / "Opt out of Ads Personalization"), or platform tools.
  • Do Not Sell or Share My Personal Information (California): contact us via privacy@trysidenote.com.
  • We maintain a list of key subprocessors/SDKs. Request through privacy@trysidenote.com.

5. Your Rights & Choices

Account & preferences

  • Access and update profile info in the app.
  • Control notifications (push, email, SMS) via in-app settings or device settings.
  • Delete your account any time in the app or by contacting us (see Section 12).

Marketing

Opt out of marketing emails by using the unsubscribe link. Transactional messages will still be sent.

Privacy rights under US law

Residents of certain US states (including CA, CO, CT, UT, VA, and others as laws become effective) may have rights that include access/know, portability, delete, correct, and the right to opt out of sale/share/targeted advertising and certain profiling. See Appendix B for details and how to exercise these rights.

Exercising rights & verification

Submit requests at privacy@trysidenote.com. We will verify your request (e.g., by email or signed statement). Authorized agents may act on your behalf where permitted.

6. Data Retention

We retain personal information only as long as necessary to provide the Services, for legitimate business needs (e.g., security, fraud prevention), and to meet legal obligations. Typical retention periods:

  • Account/profile data: retained while your account is active; deleted or anonymized within 60 days after deletion request or inactivity period of 24 months, unless required otherwise by law.
  • Content (e.g., uploads/voice): retained per your settings and as needed to provide the feature; you can delete content in-app where available.
  • Transaction & compliance records: retained for up to 7 years or as required by law.

We may keep de-identified/aggregated data that does not identify you.

7. International Transfers

We are a US company and primarily process information in the United States. Your information may also be processed in other countries where our service providers operate. Those countries may have different data protection laws than your state or country of residence.

8. Security

We employ administrative, technical, and physical safeguards designed to protect personal information (e.g., encryption in transit, access controls, monitoring). No method of transmission or storage is 100% secure; if we learn of a security incident affecting your information, we will notify you as required by law.

9. Children's Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children without appropriate consent. If you believe a child has provided personal information to us, please contact privacy@trysidenote.com and we will take appropriate steps to delete it.

10. Do Not Track

Some browsers transmit "Do Not Track" signals. We currently do not respond to these signals. We honor legally required Global Privacy Control (GPC)/universal opt-out mechanisms where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you (e.g., by email, in-app notice, or posting the revised policy with a new "Last updated" date). Your continued use of the Services after the effective date constitutes acceptance of the revised Policy.

12. Contact Us

Controller: GalaxySailLab Inc.
Address: 902 Ormonde Dr, Mountain View, CA 94043
Email: privacy@trysidenote.com

Appendix A – California Notice at Collection

Categories of Personal Information We Collect (CPRA)

  • Identifiers (e.g., name, email, phone, device IDs, IP).
  • Customer records (billing info, limited payment details via processor).
  • Protected classifications (only if you choose to provide; not required).
  • Commercial information (purchase history, subscriptions).
  • Internet or network activity (app interactions, logs).
  • Geolocation data (if you enable location).
  • Audio/visual data (if you use voice or media features).
  • Inferences (preferences or features derived from usage).
  • Sensitive personal information (only if necessary and with consent, e.g., precise location, authentication data).

We do not use or disclose sensitive personal information for purposes other than those permitted by CPRA §1798.121.

Purposes for Collection & Use

See Section 2 above (providing Services, security, debugging, analytics, personalization, marketing with your choices, compliance).

Retention

See Section 6 above.

"Sale"/"Sharing" of Personal Information

We do not sell personal information for money. We may "share" identifiers and internet/network activity with advertising or analytics partners to provide cross-context behavioral advertising or measurement. You can opt out via privacy@trysidenote.com.

Your California Rights

  • Know/Access, Delete, Correct, Portability, and the right to opt out of sale/share and limit use of sensitive information.
  • Non-discrimination for exercising rights.

Shine the Light: California residents may request a list of third parties to whom we disclosed personal information for their direct marketing in the past year (if any). Submit requests as described in Section 5 or through privacy@trysidenote.com.

Appendix B – US State Privacy Rights

Residents of certain US states (including CA, CO, CT, UT, VA, and others as laws become effective) may have the following rights, subject to exceptions:

  • Access/Know and Portability of personal information.
  • Delete personal information.
  • Correct inaccuracies.
  • Opt out of (i) sale of personal data; (ii) targeted advertising; and (iii) certain profiling in furtherance of decisions that produce legal or similarly significant effects.

Appeal: If we decline to act on a request, you may appeal by replying to our decision or contacting privacy@trysidenote.com; if denied, you may contact your state attorney general.

How to exercise: Use in-app settings, or email privacy@trysidenote.com. We will verify your request and respond within the timeframe required by law.