Privacy Policy

This Privacy Policy explains what personal data StudyFor collects, why, and how we handle it. It applies to everyone who uses the Service.

1. What we collect

• Account information: your name, email address, and authentication data (including via Google Sign-In, if you choose that option).
• Study content: notes and text you submit, AI tutor conversations, quizzes and cheat sheets you generate, quiz answers, and your progress data (streaks, XP, subject performance).
• Billing information: your subscription plan and billing history. Payment card details are collected and stored by Stripe, our payment processor — we never see or store your full card number.
• Usage and technical data: credit balance, feature usage, and basic technical logs needed to operate and secure the Service.

2. How we use it

• To provide the Service — running your tutor conversations, generating quizzes/cheat sheets/exams, tracking your study progress, and processing payments.
• To enforce usage limits and prevent abuse, including fraud and chargeback protection during a new account's first days.
• To screen submitted content for safety before it's processed by our AI systems.
• To communicate with you about your account, billing, and material changes to our Service or policies.
• To improve the Service — we may review aggregated, de-identified usage patterns, but we do not sell your personal data.

3. Third parties we share data with

We use a small number of service providers to operate StudyFor, each processing only what they need to do their job:

• OpenAI — processes the text you submit to generate tutor responses, quizzes, cheat sheets, exams, and content analysis, and to screen content for policy violations.
• Supabase — hosts our database and handles authentication.
• Stripe — processes subscription payments and stores your payment method securely.

We do not sell your personal data to anyone, including advertisers.

4. Data retention

We keep your account and study data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we're required to retain billing records for legal or tax purposes.

5. Your rights

Depending on where you live — including under the EU/UK GDPR — you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us using the details below. We'll respond within the timeframe required by applicable law.

6. Children's privacy

StudyFor is intended for students aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, contact us and we'll remove it.

7. Data security

We use industry-standard measures — including encrypted connections and access controls — to protect your data. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable steps to protect your information and to limit access to what's operationally necessary.

8. International data transfers

Our service providers may process data outside your home country, including in the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

9. Changes to this policy

We may update this Privacy Policy as the Service evolves. We'll make reasonable efforts to notify you of material changes before they take effect.

10. Contact

Questions about this Privacy Policy or your data? Reach us at [support email — add before launch].