Privacy Policy

StudyPrime (“we,” “us,” or “our”) operates the website studyprime.ai and the StudyPrime application (collectively, the “Service”). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have regarding your information.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

StudyPrime is a general-purpose AI study tool for learners of every age and level — high school, college, graduate school, and lifelong learners. It is not designed or marketed for children, and use of the Service is intended for people who are at least 13 years old (see Section 5, Age Requirement).

2.1 Account Information

When you register or sign in, we collect:

• Full name and email address (from Google OAuth or direct registration)
• Profile photo URL (from Google, if provided)
• School domain (derived from your email address)
• Account role (Student or Teacher, set during onboarding)

2.2 Content You Create or Upload

• Uploaded documents — PDFs, Word files, Excel files, and other materials you upload for AI analysis. The full text is extracted and stored to power features such as note generation, quizzes, and flashcards.
• Chat messages — questions and messages you send to the AI assistant, stored to maintain conversation history and context across sessions.
• Audio recordings — lecture recordings you submit for transcription. In the mobile app, a lecture is recorded in short pieces that are uploaded while you record, so your notes are ready soon after class ends.
• Lecture photos and notes — photos of the board or slides you take during a recorded lecture, and any quick notes you type while recording, used to write your lecture notes.
• AI-generated content — study notes, summaries, flashcards, quizzes, podcasts, and other materials produced from your content.

2.3 Usage and Analytics Data

• Pages visited, features used, and interactions within the Service (via PostHog analytics)
• Anonymous, cookie-free website traffic counts (pages viewed, referring site, country, device type) via Vercel Web Analytics
• Study session duration and activity timestamps
• Device type, browser, and general geographic region (IP-based, country/state level only)
• Error logs and performance data

2.4 Payment Information

If you subscribe on the StudyPrime website, payment is processed by Stripe. If you subscribe in the iOS app, payment is processed by Apple through App Store In-App Purchase; if you subscribe in the Android app, payment is processed by Google through Google Play Billing. RevenueCat helps us receive and manage those subscription events. We do not store your full payment-card number, CVV, or Apple ID or Google account payment credentials. We receive provider identifiers, product information, purchase status, and subscription dates so we can grant and maintain your access across StudyPrime.

2.5 Cookies and Local Storage

We use browser localStorage to remember your theme preference (light/dark). Our analytics provider (PostHog) may set cookies to track sessions and identify returning users. We use advertising cookies in one case only: if you reach StudyPrime by clicking one of our Google ads, we load the Google tag in that browser so we can see whether our ads are working, and we keep a note in localStorage that you came from an ad. Google may set its own cookies to do this. If you did not come from one of our ads, the Google tag is not loaded. You can clear cookies and localStorage at any time through your browser settings.

2.6 StudyPrime for Chrome (the browser extension)

The StudyPrime extension is a study sidebar in Google Chrome that uses your studyprime.ai account. Before it reads or sends anything, it shows a notice explaining the points below and asks you to agree.

• What it reads — the text of the page you are on and any frames inside it, while the sidebar is open, including the text of a Google Doc, Slides or Sheets file you have open, which it gets through Google’s export link with your own Google sign-in; when you ask for help, a picture of what you see on that tab; and on Canvas, your class names and what is due, read in your browser with your own Canvas login. If Reminders are on, the Canvas due list is also checked every 30 minutes while the sidebar is closed. The extension never reads password, payment-card, or one-time-code fields.
• What it sends to us, and when — only when you ask (a question, Help me, Check my writing, Make flashcards, Quiz me, Make slides, or Do it for me): the page's text and address, the picture of the tab, your question or draft, and your class names. We use them only to answer you. Pages you turn into flashcards or a quiz are saved as study sets in your library.
• Do it for me — clicks and types on the tab you are on, and asks you before it submits, pays, posts, sends, or deletes anything. At each step, a description and picture of the page are sent to our AI providers to choose the next step.
• Kept on your computer — the Canvas due list, your class names, your settings, and your agreement to the notice.
• Sign-in — the extension reads your studyprime.ai login in Chrome to sign you in. It never sees your Canvas password or any other password.
• Memory — lasting facts from your chats (such as the classes you take) are saved to fit answers to you, and are shared with the studyprime.ai chat. You can see and delete them in the sidebar under Settings → What StudyPrime remembers. Names, contact details, and health information are never saved as memories.
• Limited Use — StudyPrime's use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell it, use it for advertising, or use it to decide creditworthiness.

• Providing the Service — to authenticate you, store your documents and conversations, and deliver AI-generated study materials.
• AI processing — content you choose to share (photos of problems you scan, chat messages, uploaded documents, lecture audio, voice audio during Voice Tutor sessions, and pages you ask about in the Chrome extension) is sent to our AI providers — OpenAI, Anthropic, Google, and OpenRouter — to generate responses and educational materials. This is the core function of the Service, and in the mobile app and the Chrome extension it happens only after you review and accept the AI consent notice.
• Improving the Service — aggregated, anonymized usage data helps us understand which features are valuable and where to invest improvement efforts.
• Communications — to send transactional emails (password resets, subscription receipts). We do not send unsolicited marketing emails.
• Safety and integrity — to detect abuse, enforce our Terms of Service, and support academic integrity features (flagged messages visible to teachers).
• Legal compliance — to comply with applicable law, legal process, or governmental requests.

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes. We do not use your content to train AI models.

4.1 Service Providers

We share data with trusted third-party service providers that help us operate the Service:

• Supabase (supabase.com) — cloud database, authentication, and file storage. Your account data, documents, and conversations are stored on Supabase infrastructure hosted in the United States.
• OpenAI (openai.com) — AI language and transcription models. Your chat messages, document text, and audio transcripts are sent to OpenAI for processing. OpenAI's Privacy Policy and API data usage policies apply. OpenAI does not use API inputs to train its models by default.
• Anthropic (anthropic.com) — AI language models (Claude). In the StudyPrime mobile app, photos of problems you scan, chat messages, documents you attach, and the transcript and board photos of lectures you record may be sent to Anthropic to generate answers, explanations, and lecture notes. Anthropic's Privacy Policy applies; Anthropic does not use API inputs or outputs to train its models by default, and provides data protections equivalent to those described in this policy.
• Google AI (ai.google.dev) — AI language and voice models (Gemini). In the StudyPrime mobile app, photos of problems you scan, chat messages, generated study materials, your voice audio during Voice Tutor sessions, and the audio of lectures you record may be sent to Google to generate answers, study materials, live voice tutoring, and lecture transcripts. Google may also create illustrations for your lecture notes from a short text description (no audio or personal information is included). Google's Privacy Policy and the Gemini API terms apply; paid Gemini API usage is not used to train Google's models, and Google provides data protections equivalent to those described in this policy.
• Live Teacher — what you type or say to the teacher, and any photo or study set you start a lesson from, is sent through OpenRouter to write the lesson. The teacher's spoken lines are sent through OpenRouter to Google's voice model and to OpenAI to time the words. We save your lessons (what the teacher said and wrote, and what you typed or said as text, never the recording or the photo) so the teacher can remember what you've learned. After a lesson, a short recap of what you got and what tripped you up is written by the same DeepSeek model on United States hosting that keeps nothing, and the next lessons, Ask and practice exams read it. You can delete any lesson from the Teacher page, and deleting your account deletes them all. If you use “Show my working”, the photo of your work is sent through OpenRouter to Google's Gemini model to read it line by line; we don't keep the photo. If you turn the mic on, a small detector runs inside your browser and nothing leaves your computer until you speak. Only the seconds where you're talking are sent, through our servers, to OpenAI to be turned into text. We don't keep the recording.
• OpenRouter (openrouter.ai) — routes requests to AI models. For the Chrome extension's Do it for me, a description and picture of the page you are on are sent through OpenRouter to an open-source AI model made by DeepSeek. To write notes, flashcards and quizzes (on the website and in the iPhone app), suggest follow-up questions, and check a flashcard answer you type, the text of what you upload, paste, import or type is sent the same way. That model runs only on United States hosting companies that do not keep or train on the data. Your information is not sent to DeepSeek's own servers. OpenRouter's Privacy Policy applies.
• Apple (apple.com) — processes iOS App Store subscriptions, including billing, renewals, cancellations, and refund requests, under Apple's terms and privacy policy.
• Google (Google Play) — processes Android app subscriptions through Google Play Billing, including billing, renewals, cancellations, and refund requests, under Google's terms and privacy policy.
• RevenueCat (revenuecat.com) — receives app purchase and subscription events from Apple and Google Play and helps us keep a student's paid access synchronized across StudyPrime. RevenueCat does not receive full payment-card details from us.
• Stripe (stripe.com) — processes subscriptions purchased on the StudyPrime website. Stripe handles payment-card data under PCI-DSS compliance.
• Google (google.com) — OAuth sign-in. We receive your name, email, and profile photo when you authenticate with Google.
• YouTube / Google — the YouTube Data API is used to search for and display video metadata when you use the Videos feature.
• Vercel (vercel.com) — website hosting and serverless infrastructure. Request logs may be retained by Vercel for operational purposes.
• Google Ads (ads.google.com) — measures whether our ads work. The Google tag only loads in a browser that arrived from one of our Google ads, and Google may then receive the pages visited, your IP address and the ad you clicked. You can manage Google's ad settings at myadcenter.google.com.
• PostHog (posthog.com) — product analytics. Anonymized usage events are sent to PostHog to help us understand feature usage.
• Upstash (upstash.com) — Redis-based rate limiting. Minimal request metadata (user ID, timestamp) is stored temporarily.

4.2 Legal Requirements

We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of StudyPrime, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information is transferred and becomes subject to a different privacy policy.

StudyPrime is intended for users who are at least 13 years old. By creating an account or otherwise using the Service, you represent that you meet this age requirement.

We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@studyprime.ai.

We retain your account data, documents, and conversations for as long as your account is active. When you delete your account (available in Settings → Delete account), we permanently delete:

• Your profile and account information
• All conversations and messages
• All uploaded files and extracted text
• All generated study materials (notes, flashcards, quizzes)
• All lecture recordings, board photos, transcripts, and lecture notes

Lecture recordings, board photos, and transcripts are kept privately in your account until you delete that lecture or your account; deleting a lecture removes its audio, photos, and notes. Recordings are never shared publicly.

Deletion is processed immediately in our primary database. Backup copies may persist for up to 30 days before being overwritten. Apple, Google, RevenueCat, and Stripe may retain purchase or transaction records as required by law and their respective policies, independent of account deletion.

We implement industry-standard security measures to protect your information:

• All data in transit is encrypted via HTTPS/TLS
• Database access is protected by Row-Level Security (RLS) policies in Supabase, ensuring users can only access their own data
• API routes are authenticated and rate-limited
• Service role keys and API credentials are stored as environment secrets, never exposed in client-side code

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. Please use a strong, unique password and enable two-factor authentication on your Google account.

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — delete your account and all associated data via Settings, or by contacting us (step-by-step: studyprime.ai/delete-account)
• Portability — request an export of your data in a machine-readable format
• Objection — object to certain processing activities
• Withdrawal of consent — where processing is based on consent, withdraw it at any time (this does not affect processing already performed)

To exercise any of these rights, contact us at support@studyprime.ai. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

Virginia residents have additional rights under the Virginia Consumer Data Protection Act (VCDPA), including the right to appeal a decision we make about your request.

StudyPrime is operated from the United States. If you are accessing the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.

The Service may contain links to third-party websites or services (for example, YouTube videos). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or an in-app notice. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@studyprime.ai
• Website: studyprime.ai
• Location: Woodbridge, Virginia, USA