Privacy Policy

1. Introduction

This Privacy Policy describes how ResearchStack ("we," "our," or "the App") handles your information. ResearchStack is committed to protecting your privacy and ensuring that your research data remains completely private and secure.

2. Information We Do NOT Collect

ResearchStack does not collect, transmit, or store any of the following:

• Personal information (name, email, phone number, etc.)
• Research data (projects, publications, notes, etc.)
• Usage analytics or telemetry
• Device information or identifiers
• Location data
• Cookies or tracking technologies
• Any other personally identifiable information

3. Data Storage and Sync

3.1 Local Storage

All your research data is stored locally on your device using Apple's SwiftData framework. This data includes:

• Research projects and their details
• Publications and works
• Funding sources and transactions
• Milestones and deadlines
• Notes, images, and voice recordings
• Collaborator information
• Calendar preferences

3.2 iCloud Sync

If you enable iCloud sync, your data is synchronized across your devices using Apple's iCloud service. This synchronization:

• Uses your personal iCloud account
• Is encrypted in transit and at rest
• Is only accessible by you through your Apple ID
• Does not pass through our servers
• Can be disabled at any time in the app settings

We do not have access to your iCloud data. All sync operations are handled directly between your devices and Apple's iCloud servers.

4. On-Device AI Processing (RSi)

ResearchStack includes an AI assistant called RSi (Research Stack Intelligence). Important privacy features:

• 100% On-Device: All AI processing happens locally on your device
• No Cloud AI: Your queries and data are never sent to external AI services
• No Training: Your data is never used to train AI models
• Private by Design: RSi only has access to data you've entered in the app

5. Calendar Integration

ResearchStack can integrate with your device's calendar app. When you grant calendar access:

• The app reads calendar events to display upcoming deadlines
• You can create calendar events from within the app
• All calendar data remains on your device
• You can revoke calendar access at any time in iOS Settings
• We do not sync or backup calendar data separately

6. Notifications

ResearchStack can send local notifications for:

• Upcoming milestones and deadlines
• Budget alerts and low balance warnings
• Check-in reminders

All notifications are generated locally on your device. No notification data is sent to external servers.

7. Third-Party Services

ResearchStack does not integrate with any third-party analytics, advertising, or tracking services. The only third-party service used is:

• Apple iCloud: For optional data synchronization (covered in Section 3.2)

8. In-App Purchases

ResearchStack offers a Premium upgrade via Apple's In-App Purchase system. When you make a purchase:

• The transaction is processed entirely by Apple
• We receive only a purchase receipt validation
• We do not collect or store payment information
• Your purchase history is managed by Apple

9. Data Export and Deletion

9.1 Export Your Data

You can export your research data at any time:

• Generate reports in PDF, Markdown, or text format
• Export includes all your research data
• Exports are saved to your device or shared via iOS share sheet

9.2 Delete Your Data

You have complete control over your data:

• Delete individual items (projects, notes, etc.) within the app
• Archive projects to hide them without deletion
• Uninstall the app to remove all local data
• Disable iCloud sync and delete iCloud data through iOS Settings

10. Children's Privacy

ResearchStack is not directed to children under the age of 13. We do not knowingly collect information from children. The app is designed for researchers, scientists, and academics.

11. Security

We implement security best practices:

• Data is stored using Apple's secure frameworks (SwiftData, iCloud)
• iCloud data is encrypted in transit and at rest
• No data is transmitted to third-party servers
• The app uses iOS security features (Keychain, sandboxing, etc.)

12. International Users

ResearchStack is available worldwide. Since all data is stored locally or in your personal iCloud account, data residency is determined by:

• Your device's physical location (for local storage)
• Your iCloud account settings (for iCloud sync)

We do not transfer data internationally because we do not collect or access your data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• The "Last Updated" date will be revised
• Significant changes will be communicated via app update notes
• Continued use of the app constitutes acceptance of changes

14. Your Rights

Because we do not collect your data, traditional data rights (access, correction, deletion requests) are not applicable. You have complete control over your data:

• Access: All your data is accessible within the app
• Correction: Edit any information directly in the app
• Deletion: Delete items or uninstall the app
• Portability: Export your data in multiple formats

15. California Privacy Rights

Under the California Consumer Privacy Act (CCPA), California residents have specific rights. However, since ResearchStack does not collect personal information, these rights are not applicable. We do not:

• Sell personal information
• Share personal information for cross-context behavioral advertising
• Collect sensitive personal information

16. GDPR Compliance

For users in the European Economic Area (EEA), ResearchStack complies with GDPR principles:

• Data Minimization: We collect no personal data
• Purpose Limitation: Not applicable (no data collection)
• Storage Limitation: You control all data retention
• Integrity and Confidentiality: Data secured via iOS and iCloud

17. Open Source and Transparency

We believe in transparency. While ResearchStack is not open source, we are committed to:

• Clear communication about privacy practices
• No hidden data collection
• Regular updates to this privacy policy

18. Disclaimer and Limitation of Liability

ResearchStack is provided "as is" and "as available" without warranties of any kind, either express or implied. By using this app, you acknowledge and agree to the following:

18.1 No Warranty

• The app is provided without warranty of merchantability, fitness for a particular purpose, or non-infringement
• We do not guarantee that the app will be error-free, uninterrupted, or free from bugs
• We do not warrant the accuracy, completeness, or reliability of any data or features

18.2 Data Responsibility

• Backup Your Data: You are solely responsible for maintaining backups of your research data
• Data Loss: We are not liable for any data loss, corruption, or deletion that may occur
• Critical Data: Do not rely on this app as your only storage method for critical research data
• iCloud Sync: While we use Apple's iCloud for sync, we cannot guarantee sync reliability

18.3 Research Outcomes

• We are not responsible for any research outcomes, decisions, or actions based on data managed in this app
• The app is a tool for organization and management only
• You are responsible for the accuracy and integrity of your research data
• We are not liable for missed deadlines, budget overruns, or other research-related issues

18.4 Limitation of Liability

To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses resulting from:

• Your use or inability to use the app
• Any unauthorized access to or use of your data
• Any bugs, viruses, or other harmful code
• Any errors or omissions in the app's functionality

18.5 User Responsibility

By using ResearchStack, you agree that:

• You will maintain independent backups of important research data
• You will verify the accuracy of data entered and managed in the app
• You will not rely solely on the app for critical research deadlines or funding management
• You understand that software may contain bugs and will report issues promptly

19. Summary