Privacy Policy

1. Data we collect

• Account data: your name, email address, and — if you sign in with Google or GitHub — the identifier those providers return to us.
• Content you upload: the PDFs you upload, the text we extract from them, and the courses, lessons, and quizzes generated from them.
• Usage data: study progress, quiz attempts, credits consumed, streaks and points, and the notifications generated for your account.
• Billing data: subscription status and customer references handled by our payment provider. We never receive or store your full card details.

2. How we use your data

We use the data above to operate the Service (extracting text, generating and rendering your courses), to maintain your account and progress, to bill subscriptions, to send transactional emails (verification, password reset, welcome and login alerts), and to improve the Service. We do not sell your personal data.

3. AI processing

To generate lessons and quizzes, the extracted text of your PDFs (or page-level excerpts) is sent to our AI provider’s API. It is used only to produce your requested content and is not used to train third-party models. AI output may be imperfect — see the Terms for limitations.

4. Processors we rely on

• Database & storage: our self-hosted PocketBase backend stores your account, documents, and generated content.
• AI provider: processes document text to generate lessons and quizzes.
• Payments: our payment provider handles checkout, subscriptions, and receipts.
• Email delivery: our mailer sends verification, password-reset, and account-alert emails.

6. Data retention

Your documents and generated content are kept until you delete them or close your account. Deleting your account removes your profile and associated content from our production systems, except where we must retain records for billing or legal reasons.

7. Your rights

Depending on where you live, you may have the right to access, export, correct, or delete your personal data, and to object to certain processing. You can export and delete most of your data directly from your account settings; for anything else, email [email protected] and we will respond within 30 days.

8. Security

We protect accounts with hashed passwords, session tokens, and transport encryption. No system is perfectly secure, so please use a unique password and tell us right away if you suspect unauthorized access.

9. Changes to this policy

We may update this Privacy Policy as the Service evolves. Material changes will be announced in the app, and the “last updated” date above will always reflect the current version.

10. Contact

Privacy questions or requests? Email [email protected].