Privacy Policy & Disclaimer
Last updated: 15 April 2026
1. Who We Are
The Hive is operated by Norseman Projects Ltd, a company registered in England and Wales, with its registered office in London, United Kingdom.
Website: https://www.norseman-projects.com
For all privacy matters, contact us at: privacy@the-hive.study
2. Scope of This Policy
This Privacy Policy explains how Norseman Projects Ltdcollects, uses, stores, and protects personal data when you use The Hive iOS application and associated services (together, the "Service"). It applies to all users, including users based in the European Economic Area (EEA), the United Kingdom (UK), Norway, and Switzerland.
This policy complies with:
- UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
- EU General Data Protection Regulation (EU GDPR) 2016/679
- Norwegian Personal Data Act (Personopplysningsloven), implementing EU GDPR
- Swiss Federal Act on Data Protection (nFADP), in force 1 September 2023
3. Data We Collect
We collect only what is necessary to provide the Service:
Account & Identity
- Email address (used for authentication and communication)
- Display name (chosen by you)
- University affiliation (optional, self-reported)
Content You Create
- Lecture notes, audio recordings, and uploads you add to the app
- Hive (study group) memberships and shared content
Usage & Technical Data
- App interaction events (feature usage, errors) — used to improve the Service
- Device type, iOS version, and app version
- IP address (logged by our infrastructure for security purposes)
Payment Data
Subscription payments are processed by RevenueCatand Apple. We do not store your payment card details. RevenueCat's privacy policy applies to payment processing.
4. How We Use Your Data
We process your personal data for the following purposes and legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing and operating the Service | Contract performance (Art. 6(1)(b)) |
| Account creation and authentication | Contract performance (Art. 6(1)(b)) |
| AI note synthesis (SuperNote) | Contract performance (Art. 6(1)(b)) |
| Sending transactional emails | Contract performance (Art. 6(1)(b)) |
| Improving the Service via analytics | Legitimate interests (Art. 6(1)(f)) |
| Security, fraud prevention, and abuse detection | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Marketing communications (with consent) | Consent (Art. 6(1)(a)) |
References to "Art." are to the UK GDPR / EU GDPR. The same lawful bases apply under the Swiss nFADP and Norwegian Personopplysningsloven.
5. Third-Party Services
We use the following sub-processors and third-party services. Each has its own privacy policy and, where applicable, acts as a data processor under our instructions:
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, storage | EU (Stockholm, Sweden) |
| Anthropic (Claude API) | AI note synthesis | USA (SCCs apply) |
| ElevenLabs | Text-to-speech audio | USA (SCCs apply) |
| RevenueCat | Subscription management | USA (SCCs apply) |
| Apple (TestFlight / App Store) | App distribution | USA/Global |
Where data is transferred outside the UK or EEA (e.g. to the USA), we rely on Standard Contractual Clauses (SCCs) or an equivalent transfer mechanism to ensure an adequate level of protection. Swiss users: international transfers are governed by the Swiss SCCs or equivalent safeguards under the nFADP.
6. Data Retention
We retain your personal data only as long as necessary:
- Active account data — retained while your account is active.
- Notes and content — deleted within 30 days of account deletion.
- Logs and analytics — retained for up to 12 months, then anonymised or deleted.
- Legal / compliance records — retained for up to 7 years as required by UK law.
7. Your Rights
Depending on your location, you have the following rights regarding your personal data. To exercise any of these rights, email privacy@the-hive.study. We will respond within 30 days.
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Ask us to delete your data ("right to be forgotten"), subject to legal retention obligations.
Right to restriction
Ask us to limit how we process your data in certain circumstances.
Right to data portability
Receive your data in a structured, machine-readable format (EU/UK GDPR users).
Right to object
Object to processing based on legitimate interests, including for direct marketing.
Right to withdraw consent
Withdraw consent at any time where processing is consent-based.
Right to lodge a complaint
You may complain to your local supervisory authority (see Section 9).
Norwegian users: these rights are also guaranteed under the Norwegian Personopplysningsloven. Swiss users: equivalent rights apply under the Swiss nFADP (Articles 25–27).
8. Cookies & Tracking
The Hive iOS app does not use browser cookies. This website (the-hive.study) uses only strictly necessary session data required for the invite link functionality. No third-party advertising or tracking cookies are used on this website.
9. Supervisory Authorities
If you believe we have not handled your data correctly, you have the right to lodge a complaint with a supervisory authority:
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- Norway: Datatilsynet — datatilsynet.no
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch
- Other EEA countries: Your national data protection authority.
10. Disclaimer
Beta Software
The Hive is currently in beta. The app is provided "as is" and may contain bugs or experience downtime. We do not guarantee uninterrupted availability of the Service during the beta period.
AI-Generated Content
Features such as SuperNote use artificial intelligence to synthesise content from your notes. AI-generated summaries may contain errors or omissions. They are intended as a study aid only and must not be relied upon as a substitute for your own lecture notes, textbooks, or professional advice. Norseman Projects Ltd accepts no liability for decisions made based on AI-generated content.
Limitation of Liability
To the maximum extent permitted by applicable law, Norseman Projects Ltd shall not be liable for any indirect, incidental, or consequential loss arising from your use of the Service. Nothing in this disclaimer excludes or limits our liability for death or personal injury caused by our negligence, or for fraud or fraudulent misrepresentation.
Governing Law
This policy and any disputes arising from it are governed by the laws of England and Wales. Users in Norway and EEA member states retain all rights granted under EU GDPR and applicable national law, which take precedence over any conflicting term herein.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.
12. Contact
For questions about this policy or to exercise your rights:
Norseman Projects Ltd
London, United Kingdom
Privacy: privacy@the-hive.study
Support: support@the-hive.study