Privacy Policy
1. Introduction
Carpeta is designed with privacy and data minimization as core principles. The app allows students to organize their schoolwork, create notes, manage binders, and use optional AI-powered study tools without requiring them to provide personal information to Carpeta.
This Privacy Policy explains what information Carpeta does and does not collect, how student-created content is handled, and how information is processed when a user chooses to use an AI-powered feature.
2. Account Not Required
Carpeta does not require any student to create an account or profile of any kind. The app has been purposely designed to function without requiring personal information from the user.
Carpeta does not ask a student to provide their name, email address, telephone number, home address, school name, date of birth, or similar personal profile information in order to use the app.
Because Carpeta does not collect this information, there is no student identity profile maintained by Carpeta and no account database that associates a student's notes or schoolwork with their real-world identity.
3. Student-Created Content
Carpeta allows users to create their own educational content, including binders, notes, handwritten notes, drawings, and other free-form content. The app does not require users to include personal information in this content.
Because these areas are free-form, a student may voluntarily type or write personal or identifying information into a note, binder name, or other field. For example, a student may choose to write their own name or the name of their school in a note even though Carpeta does not request that information.
Carpeta does not extract voluntarily entered personal information for the purpose of creating a student profile, identifying the student, advertising to the student, or associating the content with the student's real-world identity.
4. AI-Powered Study Features
Carpeta includes optional AI-powered study features that may be used for purposes such as explaining concepts, summarizing notes, generating practice questions, creating flash cards, providing tutoring assistance, and producing other educational content.
AI processing takes place only when a user chooses to use one of these features. When an AI feature is requested, only the content required to complete that request is securely transmitted to Carpeta's backend infrastructure hosted on Amazon Web Services (AWS).
Carpeta does not attach a student's name, email address, school name, or student profile to an AI request because the app does not collect those fields.
If a student has voluntarily included personal information in content that they choose to submit to an AI feature, that information may necessarily be included in the content transmitted for processing. Users are therefore encouraged not to include unnecessary personal or sensitive information in content submitted to AI features.
5. AI Content Processing and Retention
Student content submitted for an AI request is used only to complete the requested AI operation. Carpeta does not store, archive, or retain copies of student notes or AI request content in its application database after the request has been processed.
Carpeta's Amazon Bedrock environment is configured to use Zero Data Retention for AI inference. Under this configuration, AWS does not write AI request or response data to durable storage or share that content with the model provider.
Amazon Bedrock model invocation logging is disabled in Carpeta's production environment. As a result, Carpeta does not configure Amazon Bedrock to copy student prompts or AI responses into Amazon CloudWatch Logs or Amazon S3 through model invocation logging.
AWS states that inputs and outputs processed through Amazon Bedrock are not used to train Amazon Bedrock models, including Amazon Nova. Carpeta also does not use student notes or AI-generated responses to train its own AI models.
AI-generated content is returned to the app. If a student chooses to save that content, it becomes part of the student's locally managed application content.
6. Subscription Validation and AI Usage
Some Carpeta AI features require an active subscription. To provide those features, Carpeta's backend retains only the minimum technical information necessary to validate access, enforce applicable AI usage limits, prevent abuse, and operate and secure the service.
This information is not used to create a student identity profile, determine the student's real-world identity, or advertise to the student.
7. Purchases and Subscriptions
Purchases and subscriptions made through the Apple App Store are processed by Apple. Carpeta does not receive or store a user's full payment card information.
Carpeta may receive or process technical entitlement information necessary to determine whether a purchase or subscription is active and whether the user is entitled to access paid functionality. Apple's handling of Apple ID, payment, purchase, and account information is governed by Apple's own privacy practices.
8. Amazon Web Services and Amazon Nova
Carpeta uses Amazon Web Services, including Amazon Bedrock and Amazon Nova models, to provide backend and AI-processing infrastructure.
Carpeta's production AI environment uses Amazon Bedrock Zero Data Retention. This means that request and response content processed under that configuration is not written to durable storage by AWS or shared with the model provider.
Carpeta has also disabled Amazon Bedrock model invocation logging in production so that model inputs and outputs are not intentionally copied to CloudWatch Logs or Amazon S3 through that feature.
AWS may process technical service information necessary to operate, secure, meter, monitor, and troubleshoot its infrastructure. Services such as AWS CloudTrail and Amazon CloudWatch may be used for operational and security purposes without Carpeta intentionally logging the contents of student notes through Bedrock model invocation logging.
AWS states that it does not use inputs or outputs generated through Amazon Bedrock to train Amazon Bedrock models, including Amazon Nova.
9. Data Retention
Carpeta follows a data-minimization approach and does not maintain a server-side database of student identities or student notes.
Student notes and educational content submitted for AI processing are not retained in Carpeta's application database after processing. AI inference is configured to use Amazon Bedrock Zero Data Retention.
The app does not collect student names, email addresses, school names, dates of birth, home addresses, telephone numbers, or similar student profile information.
Limited technical information related to subscriptions, entitlement validation, AI usage, security, and abuse prevention may be retained for as long as reasonably necessary to provide and protect the service.
10. Advertising, Tracking, and Sale of Information
Carpeta does not sell student notes or student personal information. Carpeta does not use student notes for targeted advertising, provide student notes to data brokers, create advertising profiles based on student content, or attempt to determine a student's real-world identity from their educational content.
11. Children and Students
Carpeta is designed for educational use, including use by secondary-school and post-secondary students. Its privacy model is intentionally designed so that the app does not need to collect a student's identity in order to function.
No student account is required, and the application does not request the student's name, email address, school, date of birth, address, telephone number, or other personal profile information.
Parents or guardians who have questions about Carpeta's privacy practices may contact us using the information provided below.
12. Security
Carpeta uses reasonable administrative, technical, and organizational safeguards designed to protect information transmitted through its services. Communications between the app and Carpeta's backend services are encrypted in transit using industry-standard secure communication protocols.
Carpeta's architecture further reduces privacy risk by minimizing the information its servers receive and retain and by using Zero Data Retention for Amazon Bedrock AI inference. However, no electronic transmission or processing environment can be guaranteed to be completely secure.
13. Ownership of Student Content
Students retain ownership of the content they create in Carpeta. Using an AI-powered feature does not transfer ownership of a student's notes, drawings, or educational content to Carpeta.
Content submitted for AI processing is processed only as necessary to provide the requested functionality, operate and secure the service, and comply with applicable legal obligations.
14. International Processing
AWS may operate infrastructure in different geographic regions. Depending on the infrastructure used to process a request, information may be processed outside the user's province, state, or country and may therefore be subject to the laws applicable in those jurisdictions.
Carpeta's Zero Data Retention configuration governs durable storage of AI inference request and response content within Amazon Bedrock.
15. Legal Requirements
Carpeta may disclose information if required to do so by applicable law, regulation, legal process, or an enforceable governmental request.
Because Carpeta is intentionally designed not to maintain student identity profiles or server-side copies of student notes as part of normal operation, the information available to Carpeta in response to such a request may be limited.
16. Changes to This Privacy Policy
Carpeta may update this Privacy Policy as the app, its features, service providers, or applicable legal requirements change.
If material changes are made to the way student content or information is handled, this Privacy Policy will be updated and the "Last Updated" date will be revised. Where appropriate, notice may also be provided within the app.
17. Contact Us
If you have questions or concerns about this Privacy Policy or Carpeta's privacy practices, please contact:
[Developer / Company Name] [Privacy Contact Email] [Website URL]