Privacy Policy

What we collect

When you create an account we store your email address and an encrypted password. As you use the app we store the sources, citations, projects and categories you create, so we can show them back to you across devices.

When you paste a URL or DOI, that link is sent to our servers so we can fetch the page's metadata and generate a citation. We do not sell or share this data.

How we use it

Your data is used solely to operate the service: to authenticate you, store your sources, generate citations and reference lists, and enforce free-plan limits. We do not use your content for advertising.

Third-party services

We rely on a small number of trusted providers to run CitApp: Supabase for authentication and database storage, Vercel for hosting, and Google Gemini for AI-assisted metadata extraction and summaries. Each processes data only as needed to provide their part of the service.

Cookies

We use essential cookies to keep you signed in. We do not use third-party advertising or tracking cookies.

Your rights

You can access, correct or delete your data at any time. Deleting your account removes your sources and projects from our database. To request deletion or a copy of your data, contact us via the contact page.

Data retention

We keep your data for as long as your account is active. If you delete your account, your personal data is removed from our active systems.

Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.