Last updated: March 23, 2026
Account Information: When you create an account, we collect your username, email address, and a hashed version of your password. We never store passwords in plain text.
Usage Data: We collect data about your study progress, including mastered terms, flashcard sessions, difficulty ratings, spaced repetition schedules, and study path progress. We also collect study session data, including session start and end timestamps, session duration, and subject studied. This data is used to personalize your learning experience, calculate study time statistics, and determine your anonymous ranking among other users.
Payment Information: Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other payment credentials on our servers. We receive only a subscription status and Stripe customer ID.
AI Interaction Data: When you use AI features (essay grading, question generation, term chat, Ask Lexi), your inputs are sent to Anthropic's API for processing. We log daily usage counts but do not permanently store the content of your AI interactions.
We use the information we collect to: (a) provide and maintain the Service; (b) track your study progress and personalize your experience; (c) process payments and manage subscriptions; (d) send password reset emails when requested; (e) enforce usage limits on AI features; and (f) improve the Service.
Your data is stored in a PostgreSQL database hosted on Neon (cloud database provider). Sessions are managed with encrypted cookies. Passwords are hashed using bcrypt. We use HTTPS for all data transmission. While we implement reasonable security measures, no system is completely secure, and we cannot guarantee absolute security.
We use the following third-party services that may process your data:
We retain your account and progress data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., payment records).
Depending on your jurisdiction, you may have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your data; (d) object to processing of your data; and (e) request data portability. To exercise these rights, contact us at [email protected].
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request its deletion. We do not sell personal information.
We use session cookies for authentication. We also use browser localStorage to persist your study progress, UI preferences (such as view mode and panel states), and feature dismissal states locally for faster access. Google Analytics uses cookies for anonymous usage tracking; no other third-party tracking cookies are used.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance.
For privacy-related questions or requests, contact us at [email protected].