Privacy Policy

1. Who we are

Noqta is a study-summary platform for medical students, operating at noq-ta.app. We sell access to written summaries that are read online through our own secure reader.

This policy covers the Noqta website, the reader, and the checkout process. Where this policy says “we”, it means the Noqta team responsible for that service.

2. What we collect

We only collect what the service actually needs. Here is the complete list.

Account information

Order information

When you place an order we collect the details you type into the checkout form, plus the files you attach:

• Full name, university, faculty and phone number
• Your university email address, and the email of the account you are signed in with
• Which summaries you ordered, their prices, and any promo code used
• Payment method and the payment receipt image you upload
• A university ID image, if you choose to upload one — this is optional

An administrator reviews these to confirm the payment before granting access.

Information created while you use the reader

• Your notes and highlights — stored per book and page so they are still there next time you open the book
• Reading activity — a record of which book was opened and when, used to detect account sharing and bulk copying
• Session information — a sign-in token and a rough device description, so you stay signed in and so we can enforce one active session per account

Restriction records

If an account is banned, we keep the email address, the reason, the date, and who applied it, so the ban can be enforced and reviewed. If a ban is lifted, your existing account, student code and purchases remain intact.

3. Signing in with Google

Google sign-in is the only way to access a Noqta account. When you sign in, Google asks for your permission and then tells us three things: your name, your email address, and your profile photo. Nothing else from your Google account is shared with us — we cannot read your Gmail, contacts, files, or calendar.

You can withdraw Noqta's access at any time from your Google account permissions page. Doing so prevents future sign-ins but does not by itself delete the data we already hold — for that, see Your rights.

4. How we use your data

• To create and run your account, and to keep you signed in
• To process your order, verify your payment, and give you access to what you bought
• To show you your library and your previous orders
• To save your highlights and notes
• To protect our summaries from being copied and redistributed
• To contact you about an order if something needs clarifying

We do not sell your data. We do not use it for advertising, and we do not share it with advertisers.

5. Watermarking inside your books

You should know this clearly, because it involves your personal data being visible on screen.

Summaries are never sent to your browser as downloadable files. Each page is converted into an image on our server and, before it reaches you, your email address and your student code are stamped onto that page. This means any screenshot or photograph of a page can be traced back to the account that displayed it.

We do this to protect the authors' work. It also means that if you share your screen or your screenshots with someone else, you are showing them your email address.

6. Who we share data with

We share data only with the companies that run our infrastructure, and only so they can provide the service:

Beyond these, we disclose personal data only where the law requires it. Our administrators can see your account details and orders in order to approve purchases and provide support.

7. How long we keep it

• Account details — until you ask us to delete your account
• Orders and receipts — kept while your access lasts, as proof of purchase for both sides
• Highlights and notes — until you delete them or your account is deleted
• Reading activity — kept for a limited period for anti-piracy purposes
• Ban records — kept for as long as the ban is intended to apply

8. Your rights and how to use them

You can ask us to:

• Show you the data we hold about you
• Correct anything wrong, such as a misspelled name or university
• Delete your account and personal data
• Stop using your data for a particular purpose

Message us on WhatsApp or Telegram using the details below, from the account you signed up with, and we will respond within 30 days. There is no charge.

9. How we protect your data

• All traffic between you and Noqta is encrypted with HTTPS
• Summaries are stored encrypted, and are decrypted only briefly on our server to render a page
• The original files are never sent to your browser and cannot be downloaded from the reader
• Only one device can be signed into an account at a time
• Access to the administration area is restricted to accounts we have explicitly given that role

No system is perfectly secure, but if a breach ever affects your personal data we will tell affected users without undue delay.

10. Age of users

Noqta is intended for university students. It is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

11. Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. If the change is significant, we will make it clear on the site rather than relying on you to notice.

12. Contact us