1. Introduction

Welcome to Studify (formerly StudyWise) ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform and AI-powered tutoring services.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address
• Name (optional)
• Profile picture (optional)
• Authentication credentials (passwords are stored hashed; sign-in via Google or GitHub uses your account with that provider)

2.2 Educational Content

We collect and store:

• Chat conversations with our AI tutors
• Questions you ask
• Study materials you generate (study guides, reference sheets, flashcards, etc.)
• Files you upload for educational purposes

2.3 Usage Information

We automatically collect:

• Device information (browser type, operating system)
• IP address and general location
• Pages visited and features used
• Time and date of your visits
• Session duration

2.4 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze usage patterns and improve our services
• Provide personalized learning experiences

3. How We Use Your Information

We use the collected information to:

• Provide Services: Deliver AI-powered tutoring and generate personalized educational content
• Improve Platform: Analyze usage patterns to enhance features and user experience
• Communication: Send important updates about your account and our services
• Security: Protect against unauthorized access and fraudulent activity
• Compliance: Meet legal obligations and enforce our terms of service

4. Third-Party Services

4.1 Authentication

We use Better Auth, running on our own servers, for authentication and session management. If you choose to sign in with Google or GitHub, that provider processes your sign-in according to its own privacy policy and shares your basic profile information (such as your email address and name) with us.

4.2 AI Services

We use the following AI providers to power our tutoring services:

• OpenAI: GPT models for conversational AI tutoring
• Google AI: Gemini models for additional AI capabilities
• Vercel AI: AI infrastructure and tools

Your conversations may be processed by these services to generate responses. We do not share personally identifiable information with AI providers beyond what's necessary for service delivery.

4.3 Hosting and Infrastructure

We use Vercel for hosting and Vercel Postgres on Neon for database services. Your data is stored securely in accordance with industry standards.

4.4 Search Services

We use Exa Search API to provide web search functionality within the platform.

4.5 File Uploads

We use UploadThing for secure file upload and storage functionality.

4.6 Support and Feedback

We use Tawk.to for the Feedback, Roadmap, and Changelog on our Support page, and for our support messenger. Tawk.to loads on most of our pages (all except the pages inside a subject, such as the subject home page, chats, and study materials) for every visitor, signed in or not, so Tawk.to receives technical information such as your IP address, browser, device, and the page you are on. When you are signed in, we share your name, email address, account ID, and profile picture (if you have one) with Tawk.to so it can identify you. Tawk.to also receives the messages you send through the support messenger, and these messages are processed by Margo Page, our AI support bot powered by Tawk.to, to help answer your questions.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• Service Providers: With third-party vendors who help us operate our platform (as listed above)
• Legal Requirements: When required by law, court order, or legal process
• Safety: To protect the rights, property, or safety of our app, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Public Content: Content you mark as "public" may be visible to other users

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Encrypted data storage
• Secure authentication and hashed password storage
• Regular security audits and updates
• Access controls and authentication requirements
• Secure session management

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access: View your personal information and study data
• Correct: Request correction of inaccurate information
• Delete: Request deletion of your account and associated data
• Export: Request a copy of your study materials and conversation history
• Object: Opt out of certain data processing activities

To exercise any of these rights, email us at privacy@studywise.onl from the email address associated with your account.

7.2 What You Can Do Yourself

On your User Profile page you can:

• View your account information (name, email, verification status and sign-up date)
• View and delete your chats, including the study materials generated from them

You can also delete files you have uploaded from within a chat.

7.3 Communication Preferences

We only send emails needed to operate your account, such as sign-in links and important service notices. To stop receiving any other communications, email us at privacy@studywise.onl.

7.4 Account Deletion

Self-service account deletion is not yet available. To delete your account and all associated data, email us at privacy@studywise.onl from the email address associated with your account.

Note: Some data may be retained for legal compliance or legitimate business purposes.

8. Children's Privacy

Our app is designed for educational use and may be used by students of various ages. We comply with applicable laws regarding children's privacy, including COPPA (Children's Online Privacy Protection Act) in the United States.

If you are under 13 years old, you must have parental consent to use our services. Parents can contact us to review, update, or delete their child's information.

We do not knowingly collect personal information from children under 13 without parental consent. If we become aware of such collection, we will take steps to delete the information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our app, you consent to the transfer of your information to our facilities and third-party service providers.

We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of our app after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Privacy requests: privacy@studywise.onl
• Support: support@studywise.onl
• Website: studywise.adarshrkumar.app

13. Regional Specific Rights

13.1 For California Residents (CCPA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information is collected
• Know if your personal information is sold or disclosed
• Opt out of the sale of personal information (we do not sell your data)
• Request deletion of personal information
• Non-discrimination for exercising your rights

13.2 For EU/UK Residents (GDPR)

Under the General Data Protection Regulation, you have additional rights including:

• Right to data portability
• Right to restriction of processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority