Socratus

Summary

Because Socratus is built around a local-first architecture, most of what you create stays on your device and is not sent to us.

Your notes, files, folders, tables, and the relationships between them are stored locally on your device.

We do not sell your personal information, and we do not use your note content for advertising.

The on-device AI model processes your content locally. Your notes are not sent to us for AI inference when you use it.

If you choose to connect an external AI provider (for example, an OpenAI-style API), the note content you send is transmitted to that provider and handled under their terms, not ours.

We collect a limited set of information to sign you in, manage your license, and keep the Service working.

The sections below explain each point in detail.

Information we collect

Information stored on your device

The following stays on your device and is not transmitted to us as part of normal use:

Note content and files: The text of your notes, imported documents (such as read-only PDF and Word files), tables, charts, and any code you write.

Structure and relationships: Your folder hierarchy, file tree, and the related notes and knowledge graph data Socratus generates from your files.

App settings: Your theme, related-files limit, maximum file size, and other configuration choices.

You control this data. You can edit, export, or delete it at any time using your device's file system or your chosen storage location.

Information we collect to operate the Service

Account and sign-in information: Socratus uses passwordless sign-in. When you sign in, you provide an email address, and we send a secure sign-in link to it. We use this email to authenticate you and to send service-related messages. Because sign-in uses a link rather than a stored password, we do not hold a password for your account.

License and payment information: If you purchase a Professional or Enterprise license, our payment processor handles the transaction. We receive confirmation of your purchase and limited billing metadata (such as your email and license status). We do not store full payment card numbers. The processor handles payment details under its own privacy policy.

Diagnostic and technical information: We may collect limited technical data needed to keep the Service reliable, such as app version, operating system version, device model, and crash or error reports. Where required by law, optional diagnostics are collected only with your consent.

We do not collect special categories of personal data unless you choose to place them inside your own notes, which remain on your device.

AI features and how your content is handled

Socratus offers AI features, and it matters where the processing happens. There are two distinct modes, and they are treated differently.

On-device model (local AI)

When you use the on-device model, your note content is processed locally on your device to generate answers, semantic search results, and related-note suggestions. Content processed this way is not sent to us for inference and can work without an internet connection once the model is set up.

To enable this feature, Socratus downloads the model files once. That download may be retrieved from a third-party content delivery network or model registry. Those download requests are governed by the relevant provider's policies and your network settings. After the download, the model runs locally.

Optional external AI provider

Socratus lets you connect an external large language model provider (for example, through an OpenAI-style API) using credentials you supply.

If you enable this, the note content, questions, and context you submit are sent to that external provider so it can generate a response. Once your content is transmitted to a third-party provider, it is handled under that provider's privacy policy and terms, not this one. We recommend reviewing your chosen provider's data-handling and retention practices before enabling this feature, particularly for sensitive material.

This feature is optional and off unless you set it up. You can disconnect an external provider at any time in the AI settings.

Encryption and cloud storage

Encryption

Socratus supports file-level encryption powered by QEncrypt, letting you encrypt and decrypt individual notes. Encryption keys are managed under your control. If you lose access to a key or passphrase, we may be unable to recover the encrypted content for you.

Cloud storage

You can choose to store your Socratus files in a location such as Dropbox or another cloud service. When you do, that provider's terms and privacy policy govern the storage and transmission of those files. We recommend reviewing those terms before syncing sensitive notes.

How we use information

We use the limited information we collect to:

Authenticate you and provide access to the Service.

Process and manage license purchases and renewals.

Maintain, secure, and improve the reliability of the Service.

Respond to your support requests.

Send service-related notices, such as security or important product updates.

Comply with legal obligations.

Legal Basis for Processing: Where applicable law (such as the GDPR) requires a legal basis, we rely on: performance of our contract with you (to provide the Service and manage your license), your consent (for optional features like the external AI connection or optional diagnostics), our legitimate interests (to keep the Service secure and reliable), and legal obligation (to comply with applicable laws).

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share limited information only in these cases:

Service providers: Vendors who help us operate the Service, such as our email/sign-in provider and payment processor. They are permitted to use the information only to provide services to us.

External AI provider: Only the content you submit through the optional external AI connection you set up, as described above.

Legal and safety: When required by applicable law or legal process or to protect the rights, safety, or security of users or the public.

Business transfers: In connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.

Data retention

Content on your device: Retained for as long as you keep it. You control deletion.

Account and license data: Retained while your account or license is active and for as long as needed to meet legal, tax, and accounting obligations.

Diagnostic data: Retained for a limited period sufficient to diagnose and fix issues.

When information is no longer needed, we delete or anonymize it.

Security & children

Security Measures

We use reasonable technical and organizational measures to protect the information we hold, including encryption in transit for data we transmit and access controls on our systems. Socratus also offers optional file-level encryption for content on your device. No method of storage or transmission can be guaranteed to be fully secure, so we cannot promise absolute security, but we work to protect your information and to address vulnerabilities responsibly.

Children's Privacy

Socratus is not directed to children and is intended for users aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can address it.

Your rights and choices

Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, or export it, and to object to or restrict certain processing.

For content stored on your device, you can view, edit, export, and delete it directly in the app or your file system at any time.

For account or license information we hold, contact us at privacy@socratus.app to make a request. We will respond within the timeframe required by applicable law.

California residents (CCPA/CPRA)

We do not sell or share your personal information for cross-context behavioral advertising. You may request access to, deletion of, or correction of the limited personal information we hold, and you will not be discriminated against for exercising these rights.

EEA, UK, and Switzerland (GDPR/UK GDPR)

You have the rights listed above and may lodge a complaint with your local data protection authority. Where we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses where required.

Changes to this policy & contact

Changes to this Policy

We may update this Privacy Policy to reflect changes to the Service or legal requirements. We will post the updated version here and revise the 'Last updated' date. If changes are material, we will provide additional notice in the app or by email. Continued use of the Service after the effective date means you accept the updated policy.

Contact us

If you have questions or requests regarding this Privacy Policy, contact:

Email: Contact@Socratus.app

FiveRivers Technologies privacy statement (Socratus)

Your privacy is core to Socratus.|