Privacy

How the current MVP handles study materials

Last updated: September 1, 2026

Student pausing beside a private study folder

Data the product processes

The current implementation processes uploaded file metadata, original course files, extracted source text, generated Study Guides, Quick Check questions, selected answers, and Quick Check results.

How it is used

Uploaded content is parsed and sent through configured model services to create and verify the Study Guide and optional Quick Check. The product is designed to use uploaded-course evidence rather than silently adding open-web content.

Storage and access

Original files are uploaded to a private Supabase Storage bucket. Session records and generated artifacts are stored in Supabase Postgres. Anonymous browser access uses a high-entropy token in an HttpOnly, SameSite=Lax cookie; only its hash is stored. If you create an account, Supabase Auth becomes the owner of claimed and newly created study data.

Retention status

Anonymous access expires after 7 days by default. Account-owned study data does not use that anonymous expiry. Deleting a Guide makes its aggregate unavailable immediately and marks it eligible for permanent cleanup after 30 days. A daily protected cleanup removes eligible private files before their database records. You can permanently delete your account from Profile; this removes your Study Guides, source files, Quick Checks, and account access. Paddle may retain billing records where required for its legal and audit obligations. Do not upload sensitive personal information.

Analytics and advertising

The current code does not include GA4, advertising pixels, behavioral session recording, or marketing trackers. If analytics is added for production, this page must be updated before collection begins.

Support and data requests

For support and privacy requests, email yumao3623@gmail.com. Do not send sensitive course materials or payment-card details by email.