Privacy Policy

Last updated: 15 September 2026

1. Who we are

The ScienceTLDR app and the sciencetldr.com website (the "Service") are provided by Norsight Oy, a limited company registered in Finland (Business ID 3650992-5), registered office in Espoo, Finland — the data controller for any processing described here.
Contact: contact@norsight.io or support@sciencetldr.com.

2. Data that stays on your device

The app stores your personal usage data only on your device, in the app's local storage: papers you save, reading and listening progress, text passages you highlight, playback settings, followed topics, reading-activity dates and goals. This data is never transmitted to us or to anyone else.

You are in control of it: the app lets you export it as a file, import it on another device, and reset it. Deleting the app deletes this data.

3. Data processed to deliver the Service

When the app or website loads content (summaries, audio, video), your device connects to our web infrastructure. Like essentially all internet services, the servers involved process your IP address and technical request metadata transiently to deliver the content and protect the Service against abuse. Our infrastructure is provided by Cloudflare, Inc. (content delivery and hosting), acting as our processor. We do not use this information to identify you, we build no profiles from it, and we run no analytics on it.

Legal basis: our legitimate interest in operating and securing the Service (GDPR Art. 6(1)(f)).

4. Searching and reading

Search in the app runs on your device against the already-downloaded library — your search queries never leave your device. What you read, save or highlight is likewise not transmitted.

5. Purchases

If you buy a subscription, the purchase is made through Apple's App Store and processed entirely by Apple under Apple's privacy policy. We never see your payment details. Apple provides us with aggregated sales reports that do not identify individual customers.

6. If you contact us

If you email support, we process your email address and the content of your message in order to respond, and keep the correspondence as long as needed to handle the matter and reasonable follow-ups. Legal basis: our legitimate interest in providing support (GDPR Art. 6(1)(f)).

7. Data about paper authors

The Service displays bibliographic information from public publication records — authors' names, paper titles, journals and publication identifiers (DOIs) — as part of summarizing published research. This information originates from the public scientific record, and every summary links to the original publication. Legal basis: legitimate interest in accurate attribution of published research (GDPR Art. 6(1)(f), with data obtained from public sources under Art. 14(5)(b)).

8. International transfers

Cloudflare and Apple are US-headquartered providers and may process the technical data described above outside the EEA. Such transfers rely on the safeguards these providers maintain, including the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses.

9. Your rights

Under the GDPR you have the right to access, rectify and erase personal data concerning you, to restrict or object to its processing, and to data portability. Because we hold essentially no personal data about app users (your usage data is on your device, not with us), most requests concern support correspondence. To exercise any right, email contact@norsight.io. You also have the right to lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi).

10. Children

The Service is intended for a general audience, has no accounts, and does not knowingly collect personal data from anyone, including children.

11. Changes to this policy

If the Service's data practices change — for example, if new features require processing we don't do today — we will update this policy first and mark the new date above. The current version is always at sciencetldr.com/privacy.