Privacy Policy

• We use your information to create personalized learning experiences and help you track your progress.
• If you're under 18, you'll need your parent or guardian's permission to use our platform.
• We use artificial intelligence (through Anthropic's Claude, Google's Gemini, and OpenRouter) to help generate educational content, practice questions, flashcards, and provide AI-powered tutoring.
• You can upload files (PDFs, documents, images) for AI-powered content generation. These are stored securely and deleted when you delete your account.
• Your learning materials and progress are stored securely and remain available as long as your account is active.
• As a Dutch company, we follow strict European privacy laws, but we work with global service providers to deliver our platform.
• You can sign in using Google, Facebook, or TikTok accounts if you prefer.
• We use Google Ads to measure the effectiveness of our advertising campaigns.
• We detect your country from your IP address to provide relevant payment options and improve our services.
• If you use our mobile app and opt in, we may send you push notifications.
• We send transactional emails related to your account and may also send marketing emails, from which you can always unsubscribe.

Information You Share Directly

Information From Your Learning Activities

Technical Information

File Uploads

Location Information

Advertising and Conversion Tracking

Push Notification Tokens

Social Login Information

Google APIs

Educational Platform Features

Account and Service Management

Advertising and Analytics

Platform Improvements

Other Purposes

Contractual Necessity (Art. 6(1)(b) GDPR)

• Account creation and management
• AI-powered content generation (study materials, practice questions, flashcards)
• AI Tutor chatbot functionality
• File uploads and storage
• Subscription management and payment processing
• PDF downloads and content delivery

Legitimate Interest (Art. 6(1)(f) GDPR)

• Platform security and fraud prevention
• Service improvement and analytics (via Plausible)
• Inactive account cleanup (data minimization)
• Technical infrastructure and caching

Consent (Art. 6(1)(a) GDPR)

• Marketing email communications
• Push notifications (mobile app)
• Social login data sharing (Google, Facebook, TikTok)

Legal Obligation (Art. 6(1)(c) GDPR)

• Financial record retention (tax and accounting regulations)
• Responding to lawful requests from authorities

Sharing data

• Service Providers: We may share your personal information with Service Providers to monitor and analyze the use of our service, to contact You.
• Business transfers: We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
• Affiliates: We may share your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
• Business partners: We may share your information with Our business partners to offer You certain products, services or promotions.
• Other users: When you share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside. If You interact with other users or register through a Third-Party Social Media Service, your contacts on the Third-Party Social Media Service may see your name, profile, pictures and description of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with You and view your profile.
• With your consent: We may disclose your personal information for any other purpose with your consent.

Key Service Providers

• Vercel - Platform hosting, IP-based geolocation, and performance monitoring
• Supabase - Database services and file storage
• Paddle - Secure payment processing
• Clerk - Account authentication
• Anthropic - AI-powered educational content (Claude)
• Google - AI-powered educational content and tutoring (Gemini)
• OpenRouter - AI model routing and processing
• Plausible - Privacy-focused usage analytics
• Upstash - Rate limiting and caching services
• Google Ads - Advertising conversion tracking
• Sanity - Blog content management and image delivery
• Web3Forms - Contact form processing

Data Processing Agreements

• EU-U.S. Data Privacy Framework (DPF): Several of our US-based providers (including Google and Vercel) participate in the EU-U.S. Data Privacy Framework, which the European Commission has recognized as providing adequate data protection.
• Standard Contractual Clauses (SCCs): For transfers to providers not covered by an adequacy decision or the DPF, we rely on Standard Contractual Clauses approved by the European Commission.
• Supplementary Measures: Where necessary, we implement additional technical and organizational measures to ensure an adequate level of protection.

• Vercel (United States) - Platform hosting
• Supabase (United States) - Database and file storage
• Anthropic (United States) - AI content generation
• Google (United States) - AI processing, advertising, analytics
• OpenRouter (United States) - AI model routing
• Clerk (United States) - Authentication services
• Paddle (United Kingdom) - Payment processing
• Upstash (may include non-EEA regions) - Caching services

AI-Driven Content Generation

• Your prompts, text input, or uploaded file content is processed securely through our AI providers (Anthropic, Google, and OpenRouter)
• Generated content is stored in your account
• You control sharing permissions for the content

AI Tutor

• Your chat messages, along with relevant study material content (such as learning goals, chapters, and summaries), are sent to AI providers as context to generate educational responses
• Chat conversations (including your messages and AI responses) are stored in our database
• We track token usage per conversation to manage usage limits within your subscription tier
• Saved conversations can be accessed later from your account
• All chat data is permanently deleted when you delete your account

File Uploads and Storage

• Files are stored securely in our cloud storage (Supabase Storage)
• File access is protected by time-limited signed URLs (1-hour expiry)
• Files can be processed in two ways: text extraction (content extracted client-side) or AI Vision (files sent to AI providers for visual analysis)
• Storage limits vary by subscription tier
• All uploaded files are permanently deleted when you delete your account
• An automated daily cleanup process removes any orphaned files from our storage

YouTube Content Processing

• We extract publicly available captions and subtitles from the video
• No authentication data or personal information is sent to YouTube
• The extracted transcript text is then processed through our AI providers to generate educational content
• The YouTube URL is stored with your study material for reference purposes and is deleted when you delete the study material or your account

PDF Downloads

• PDFs are generated server-side from your existing study material content
• No data is shared with external services during PDF generation
• PDF downloads are rate-limited and available based on your subscription tier

Sharing and Visibility

• Study materials and learning environments can be set to private (accessible only to you) or public (visible to all platform users)
• Public content is clearly marked and may be discoverable by other users
• You can change visibility settings for your content at any time
• Learning environments are organizational containers for grouping your study materials — their visibility is controlled independently from the materials they contain

Security Measures

Data Storage and Retention

• Your uploaded files are immediately deleted from our cloud storage
• Your study materials, learning environments, practice questions, flashcards, and chat conversations are permanently deleted
• Your personal information (such as name, email, and profile image) is anonymized
• Your authentication provider records (such as linked Google, Facebook, or TikTok accounts) are deleted
• Financial records (payments, subscriptions, invoices, and one-time payment access records) are retained as required by tax and financial regulations
• Your user record is retained in anonymized form to maintain database integrity for the retained financial records
• An automated daily process cleans up any orphaned files from our cloud storage

Inactive Account Cleanup

Temporary Data and Caching

Managing Your Data

• View and update your personal information
• Control what information is public
• See all your content
• Manage all your content

Cookie Choices

• Cookies or Browser Cookies: A cookie is a small file placed on your device. You can instruct Your browser to refuse all Cookies or to indicate when a cookie is being sent. However, if You do not accept cookies, you may not be able to use some parts of our service. Unless you have adjusted your browser setting so that it will refuse Cookies, our service may use cookies.
• Web Beacons: Some third-party services we integrate with may employ small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) in their operations. Our own analytics solution (Plausible) does not use tracking pixels or web beacons.

Cookie Purposes

• Necessary / Essential Cookies
  • Type: Session Cookies
  • Purpose: These cookies are essential to provide you with services available through the Website and to enable you to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these cookies, the services that you have asked for cannot be provided, and we only use these cookies to provide you with those services.

• Cookies Policy / Notice Acceptance Cookies
  • Type: Persistent Cookies
  • Purpose: These cookies are used to identify if users have accepted the use of cookies on the Website.

• Functionality Cookies
  • Type: Persistent Cookies
  • Purpose: These cookies allow us to remember choices you make when You use the website, such as remembering your login details or language preference. The purpose of these cookies is to provide You with a more personal experience and to avoid you having to re-enter your preferences every time You use the website.

• Advertising Cookies
  • Type: Persistent Cookies
  • Provider: Google Ads
  • Purpose: When you arrive at our platform through a Google advertisement, a Google Click Identifier (GCLID) cookie is stored with a 90-day expiration. This helps us measure the effectiveness of our advertising campaigns by linking ad clicks to subsequent account actions (signup, first content generation, subscription). We also use local storage in your browser as a backup for this identifier. You can opt out of Google Ads personalization through Google's Ad Settings.

• Transactional Emails: Account-related notifications such as signup confirmation, password resets, payment receipts, and subscription changes. These are necessary for providing our services and cannot be opted out of.
• Marketing Emails: We may send product updates, feature announcements, educational tips, and promotional offers. Every marketing email will include an unsubscribe link, allowing you to opt out at any time.

• The same privacy practices described in this policy apply
• If you enable push notifications, we store a device token to deliver notifications to your device
• You can disable push notifications at any time through your device's settings
• The mobile app may access device features only with your explicit permission
• The Apple App Store and Google Play Store terms also apply when downloading our app

Your Rights Under the GDPR

• Right of Access (Art. 15): You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data.
• Right to Rectification (Art. 16): You can request correction of inaccurate personal data or completion of incomplete data.
• Right to Erasure (Art. 17): You can request deletion of your personal data. We will comply unless we have a legal obligation to retain certain records (such as financial data for tax purposes).
• Right to Restrict Processing (Art. 18): You can request that we limit how we use your data in certain circumstances, such as while we verify the accuracy of your data or assess an objection.
• Right to Data Portability (Art. 20): You can request your personal data in a structured, commonly used, machine-readable format for transfer to another service. To make such a request, please contact us.
• Right to Object (Art. 21): You can object to processing based on legitimate interests. We will stop processing unless we demonstrate compelling legitimate grounds. You can always object to direct marketing.
• Right to Withdraw Consent (Art. 7): Where processing is based on consent (such as marketing emails or push notifications), you can withdraw consent at any time without affecting the lawfulness of prior processing.
• Right Not to Be Subject to Automated Decision-Making (Art. 22): You have the right not to be subject to decisions based solely on automated processing that significantly affect you. Our AI features generate educational content and do not make automated decisions about you.
• Right to Lodge a Complaint: You have the right to file a complaint with a supervisory authority. For the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Categories of Personal Information Collected

• Identifiers: Name, email address, IP address, account ID
• Internet or Network Activity: Browsing history on our platform, interaction with our services, AI-generated content usage
• Geolocation Data: Country-level location derived from IP address (not precise location)
• Professional or Education-Related Information: Study materials, learning progress, practice question results
• Inferences: Learning preferences and content recommendations derived from your usage

Your CCPA/CPRA Rights

• Right to Know: You can request the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We share limited data with Google Ads for advertising measurement, which may constitute "sharing" under CCPA. You can opt out by disabling advertising cookies in your browser settings or through Google's Ad Settings.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Children Under 13 (COPPA)

EU/EEA Users Under 16

Get in Touch