Privacy Policy

StudyPrime (“we,” “us,” or “our”) operates the website studyprime.ai and the StudyPrime application (collectively, the “Service”). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have regarding your information.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

StudyPrime is a general-purpose AI study tool for learners of every age and level — high school, college, graduate school, and lifelong learners. It is not designed or marketed for children, and use of the Service is intended for people who are at least 13 years old (see Section 5, Age Requirement).

2.1 Account Information

When you register or sign in, we collect:

• Full name and email address (from Google OAuth or direct registration)
• Profile photo URL (from Google, if provided)
• School domain (derived from your email address)
• Account role (Student or Teacher, set during onboarding)

2.2 Content You Create or Upload

• Uploaded documents — PDFs, Word files, Excel files, and other materials you upload for AI analysis. The full text is extracted and stored to power features such as note generation, quizzes, and flashcards.
• Chat messages — questions and messages you send to the AI assistant, stored to maintain conversation history and context across sessions.
• Audio recordings — lecture recordings you submit for transcription.
• AI-generated content — study notes, summaries, flashcards, quizzes, podcasts, and other materials produced from your content.

2.3 Usage and Analytics Data

• Pages visited, features used, and interactions within the Service (via PostHog analytics)
• Study session duration and activity timestamps
• Device type, browser, and general geographic region (IP-based, country/state level only)
• Error logs and performance data

2.4 Payment Information

If you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number, CVV, or full payment details. We receive a Stripe customer ID and subscription status from Stripe. Stripe's privacy policy governs the handling of your payment information.

2.5 Cookies and Local Storage

We use browser localStorage to remember your theme preference (light/dark). Our analytics provider (PostHog) may set cookies to track sessions and identify returning users. We do not use advertising cookies. You can clear cookies and localStorage at any time through your browser settings.

• Providing the Service — to authenticate you, store your documents and conversations, and deliver AI-generated study materials.
• AI processing — content you choose to share (photos of problems you scan, chat messages, uploaded documents, lecture audio, and voice audio during Voice Tutor sessions) is sent to our AI providers — OpenAI, Anthropic, and Google — to generate responses and educational materials. This is the core function of the Service, and in the mobile app it happens only after you review and accept the in-app AI consent notice.
• Improving the Service — aggregated, anonymized usage data helps us understand which features are valuable and where to invest improvement efforts.
• Communications — to send transactional emails (password resets, subscription receipts). We do not send unsolicited marketing emails.
• Safety and integrity — to detect abuse, enforce our Terms of Service, and support academic integrity features (flagged messages visible to teachers).
• Legal compliance — to comply with applicable law, legal process, or governmental requests.

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes. We do not use your content to train AI models.

4.1 Service Providers

We share data with trusted third-party service providers that help us operate the Service:

• Supabase (supabase.com) — cloud database, authentication, and file storage. Your account data, documents, and conversations are stored on Supabase infrastructure hosted in the United States.
• OpenAI (openai.com) — AI language and transcription models. Your chat messages, document text, and audio transcripts are sent to OpenAI for processing. OpenAI's Privacy Policy and API data usage policies apply. OpenAI does not use API inputs to train its models by default.
• Anthropic (anthropic.com) — AI language models (Claude). In the StudyPrime mobile app, photos of problems you scan, chat messages, and documents you attach may be sent to Anthropic to generate answers and explanations. Anthropic's Privacy Policy applies; Anthropic does not use API inputs or outputs to train its models by default, and provides data protections equivalent to those described in this policy.
• Google AI (ai.google.dev) — AI language and voice models (Gemini). In the StudyPrime mobile app, photos of problems you scan, chat messages, generated study materials, and your voice audio during Voice Tutor sessions may be sent to Google to generate answers, study materials, and live voice tutoring. Google's Privacy Policy and the Gemini API terms apply; paid Gemini API usage is not used to train Google's models, and Google provides data protections equivalent to those described in this policy.
• Stripe (stripe.com) — payment processing for paid subscriptions. Stripe handles all payment card data under PCI-DSS compliance.
• Google (google.com) — OAuth sign-in. We receive your name, email, and profile photo when you authenticate with Google.
• YouTube / Google — the YouTube Data API is used to search for and display video metadata when you use the Videos feature.
• Vercel (vercel.com) — website hosting and serverless infrastructure. Request logs may be retained by Vercel for operational purposes.
• PostHog (posthog.com) — product analytics. Anonymized usage events are sent to PostHog to help us understand feature usage.
• Upstash (upstash.com) — Redis-based rate limiting. Minimal request metadata (user ID, timestamp) is stored temporarily.

4.2 Legal Requirements

We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of StudyPrime, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information is transferred and becomes subject to a different privacy policy.

StudyPrime is intended for users who are at least 13 years old. By creating an account or otherwise using the Service, you represent that you meet this age requirement.

We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@studyprime.ai.

We retain your account data, documents, and conversations for as long as your account is active. When you delete your account (available in Settings → Danger Zone), we permanently delete:

• Your profile and account information
• All conversations and messages
• All uploaded files and extracted text
• All generated study materials (notes, flashcards, quizzes)

Deletion is processed immediately in our primary database. Backup copies may persist for up to 30 days before being overwritten. Stripe retains transaction records as required by financial regulations, independent of account deletion.

We implement industry-standard security measures to protect your information:

• All data in transit is encrypted via HTTPS/TLS
• Database access is protected by Row-Level Security (RLS) policies in Supabase, ensuring users can only access their own data
• API routes are authenticated and rate-limited
• Service role keys and API credentials are stored as environment secrets, never exposed in client-side code

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. Please use a strong, unique password and enable two-factor authentication on your Google account.

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — delete your account and all associated data via Settings, or by contacting us
• Portability — request an export of your data in a machine-readable format
• Objection — object to certain processing activities
• Withdrawal of consent — where processing is based on consent, withdraw it at any time (this does not affect processing already performed)

To exercise any of these rights, contact us at support@studyprime.ai. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

Virginia residents have additional rights under the Virginia Consumer Data Protection Act (VCDPA), including the right to appeal a decision we make about your request.

StudyPrime is operated from the United States. If you are accessing the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.

The Service may contain links to third-party websites or services (for example, YouTube videos). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or an in-app notice. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@studyprime.ai
• Website: studyprime.ai
• Location: Woodbridge, Virginia, USA