Privacy-first design. Written in plain language.
Your level and tutor preferences, the conversations you practice, and any explanation you explicitly choose to save. All of this is stored in this device (browser storage) — we do not run user accounts or a document database in this version.
Photos, screenshots and PDFs are opened and read inside your browser. They are never uploaded to our servers, never given a public URL and never placed in a storage bucket. Deleted immediately after processing — once the text has been extracted, the file itself is released and cannot be recovered by us.
Text extraction (OCR for images, text layer for PDFs) runs on your device. The OCR output is held in memory only for the length of your session and is discarded when you clear the screen or leave the page.
Before any text is sent for AI processing, Norsk Buddy scans it for fødselsnummer and D-numbers (with checksum validation), email addresses, phone numbers, addresses and postcodes, bank accounts, card numbers, IBAN, KID, case/customer/reference numbers and likely personal names. Detected values are replaced with placeholders such as [NAME] or [REDACTED]. You review and can edit the protected text before continuing. The same filter is re-applied on the server, so the AI provider cannot receive raw identifiers even if the browser step is bypassed.
The protected text is sent to our AI processing provider (google/gemini-2.5-flash), which generates the explanation and suggested reply. It receives the redacted text, your level and your explicit choices — never your original file. We do not make claims about model training until the processor contract has been verified.
Speech recognition and speech playback use your browser and our text-to-speech provider. Recordings are not stored unless you turn on the optional opt-in in Settings.
Deleted immediately after processing for uploads. Saved explanations and conversations remain until you delete them.
You can download all your data, delete saved explanations, delete conversations, or erase everything from the "You" screen. Because data lives on your device, deletion is immediate and complete.
Server logs contain technical metadata only (status codes, timing). Document text, OCR output and AI prompts containing your content are never logged.
Norsk Buddy explains language. It is not legal, medical, financial or immigration advice, and AI can make mistakes — always check the official source for your own case.
[COMPANY LEGAL NAME], [COMPANY ADDRESS], org. no. [ORG NUMBER]. Privacy questions: REDACTED. Comments and suggestions are welcome at REDACTED.