Privacy Policy

Welcome to Study Starter. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last updated” date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the Application after the date such revised Privacy Policy is posted.

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you register on the Application, express an interest in obtaining information about us or our products and services, when you participate in activities on the Application, or otherwise when you contact us.

The personal information that we collect depends on the context of your interactions with us and the Application, the choices you make, and the products and features you use. The personal information we collect may include:

• Account Information: Name, email address, username, and password
• Profile Information: Educational background, study preferences, and profile picture
• User Content: Study materials, notes, questions, and other content you upload or create
• Communication Data: Information from your communications with us, including support requests
• Payment Information: Credit card details, billing address (processed securely through third-party payment processors)

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Application. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as:

• Device Information: IP address, browser type and version, operating system, device type
• Usage Data: Pages visited, time spent on pages, clickstream data, features used
• Location Data: General geographic location based on IP address
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies
• Analytics Data: Application performance, error logs, and usage patterns

We use personal information collected via our Application for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

• Provide and Maintain Services: To operate and maintain your account, deliver the services you request, and process transactions
• Improve User Experience: To understand how you use our Application and improve features, functionality, and user interface
• AI-Powered Features: To generate study questions, create notes, and provide AI-assisted learning tools using your uploaded materials
• Personalization: To customize content, recommendations, and features based on your preferences and usage patterns
• Communication: To send you administrative information, updates, security alerts, and support messages
• Marketing: To send you promotional materials, newsletters, and other information that may be of interest (with your consent)
• Security and Fraud Prevention: To protect against unauthorized access, detect and prevent fraud, and ensure platform security
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Analytics and Research: To analyze trends, track user behavior, and conduct research to improve our services
• Customer Support: To respond to your inquiries, provide technical support, and resolve issues

We may process or share your data that we hold based on the following legal basis:

• Service Providers: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include: payment processing, data analysis, email delivery, hosting services, customer service, and AI/ML services (such as OpenAI for generating questions and notes).
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
• Vital Interests and Legal Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation.
• With Your Consent: We may disclose your personal information for any other purpose with your consent.

Important Note on AI Services: When you use AI-powered features (such as question generation or note creation), your uploaded content is processed by third-party AI services including OpenAI. This content is sent securely to these services for processing but is not used to train their models or shared with other parties.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Account information and user-generated content are retained for the duration of your account's active status. If you delete your account, your personal information will be removed from our active databases within 30 days, although some information may be retained in backup systems for up to 90 days for security and legal purposes.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

Our security measures include:

• Encryption of data in transit using SSL/TLS protocols
• Encryption of sensitive data at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure password storage using industry-standard hashing
• Regular backup and disaster recovery procedures
• Employee training on data protection and security best practices

Depending on your location, you may have certain rights regarding your personal information. These may include:

• Right to Access: You can request a copy of the personal information we hold about you
• Right to Rectification: You can request that we correct inaccurate or incomplete information
• Right to Erasure: You can request that we delete your personal information in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your information
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
• Right to Object: You can object to our processing of your personal information in certain cases
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority

To exercise these rights, please contact us using the information provided in the “Contact Us” section below. We will respond to your request within 30 days. Please note that we may need to verify your identity before processing your request.

We use cookies and similar tracking technologies to track activity on our Application and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Application. For more detailed information about the cookies we use and your choices regarding cookies, please visit our Cookie Policy.

Our Application may contain links to third-party websites, services, or applications that are not operated by us. We use various third-party services to provide and improve our Application, including:

• OpenAI: For AI-powered question generation and note creation
• Supabase: For database and authentication services
• Payment Processors: For handling subscription payments and transactions
• Analytics Services: For understanding user behavior and improving our services
• Cloud Hosting: For storing and delivering application content

If you click on a third-party link or use a third-party service, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit or service you use. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Our Application is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children under 13 without verification of parental consent, we will take steps to remove that information from our servers. If you are between 13 and 18 years old, you may only use our Application with the consent and supervision of a parent or legal guardian.

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the European Economic Area and choose to provide information to us, please note that we transfer the data, including personal data, to countries that may not have the same data protection laws as your country. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

If you have any questions about this Privacy Policy, please contact us: