Privacy Policy

Draft: this document needs legal review, and the bracketed details need filling in, before launch.

This policy explains what [Company legal name] collects when you use The Learnin’ Guru, why, who it is shared with, and the choices you have. The Learnin’ Guru is for adults aged 18 and over; we do not knowingly collect data from anyone younger.

1. What we collect

• Account: your email, a hashed password (we never store it in plain text), your name if you give one, and your time zone.
• Study profile: your exam and exam date, interests, daily study minutes, reminder time and study preferences.
• Study activity: sessions, quiz answers and scores, skill levels, your ratings of sessions, and flags you send.
• Uploads: the files and text you upload, and the study material made from them.
• Engagement signals, only if you agree: time per answer, answer changes, switching away from the tab, and idle time. We never track mouse movement.
• Payments: Square handles your card. We receive the plan, payment status and dates, not your full card number.
• Technical: a session cookie that keeps you signed in, and error reports when something breaks. Error reports never include the text of your uploads.

2. How we use it

• To run your account, build your study plan and choose what to study next.
• To measure which study methods you score best after, so suggestions improve over time.
• To send the emails you expect: confirmation, password reset, plans and notices.
• To take payments, prevent abuse and fix problems.

3. Your choices

You choose these when you sign up, and can change them any time in Settings:

• Engagement tracking: lets us use the signals above when judging which methods work for you. With it off, we use only scores and your ratings.
• Helping similar learners: lets us use your study patterns, without your identity, to suggest methods to learners with a similar profile. Only learners who agree are included, and no one sees who they were matched with.

Turning a choice off stops new collection. Signals already collected are kept until you delete your account.

4. AI processing

We use Anthropic’s Claude models to draft study material, explain answers, and read your uploads (including text in photos). Your content is sent to Anthropic only to do this. Under our agreement, Anthropic does not use it to train its models.

5. Who we share it with

We do not sell your personal information. We share it only with providers that run the service for us:

• Railway (hosting)
• Supabase (database and file storage)
• Anthropic (AI processing)
• Resend (email)
• Square (payments)
• Sentry (error reports)

We may also disclose information when the law requires it. Some providers are in the United States; where data moves across borders we rely on appropriate safeguards such as standard contractual clauses.

6. How long we keep it

• While your account is open, we keep your data so the service works.
• Deleted uploads and sessions can be restored for 30 days, then are permanently deleted.
• If you close your account, it is permanently deleted after 30 days, including your rows in any totals used to help similar learners.
• We keep private database backups for up to 14 days, so deleted data can stay in a backup for up to 14 more days before it is removed.
• Payment records are kept as long as tax and accounting law requires.

7. Your rights

Depending on where you live (for example under the GDPR, or US state laws such as California’s), you can ask to access, correct, download or delete your data, object to or restrict some uses, and withdraw consent at any time. Email [privacy email address]. We will not treat you differently for using these rights. You can also complain to your local data protection authority.

8. Security

Data is encrypted in transit, uploads are kept in private storage with short-lived links, and passwords are hashed. No system is perfectly secure; we will tell you without undue delay if a breach affects you.

9. Changes and contact

If we change this policy in a meaningful way we will tell you first. Questions: [privacy email address], [Company legal name], [Company postal address]. See also our Terms of Service.