1. Introduction

UNDRSTDY ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our study assistant service.

2. Information We Collect

Information You Provide

Account Information: Email address and password when you create an account
Profile Information: School name, year, and study preferences (optional)
Educational Content: Syllabi, notes, and other materials you upload
Payment Information: Processed securely by Stripe; we don't store card details

Information Collected Automatically

Device and browser information
IP address and general location
Usage patterns and feature interactions
Performance and error data

3. How We Use Your Information

We use your information to:

Provide and improve the Service
Process your educational materials (notes, syllabi)
Generate personalized study materials
Process payments and manage subscriptions
Send important service updates
Respond to support requests
Analyze and improve our features

4. Data Processing

Your educational content (notes, syllabi) is processed by AI to provide features like note synthesis, flashcard generation, and practice exams. This processing is:

Done solely to provide the Service to you
Not used to train AI models
Not shared with third parties for their purposes
Encrypted in transit and at rest

5. Data Sharing

We do NOT sell your data. We share data only with:

Service Providers: Hosting, payment processing, and email services that help us operate
Legal Requirements: When required by law or to protect our rights

6. Data Retention

We retain your data for as long as your account is active. When you delete your account:

Your personal information is deleted within 30 days
Your uploaded content is permanently deleted
Anonymized analytics data may be retained

7. Your Rights

You have the right to:

Access: Request a copy of your data
Correction: Update inaccurate information
Deletion: Delete your account and data
Export: Download your content
Opt-out: Unsubscribe from marketing emails

8. Security

We implement industry-standard security measures including:

Encryption of data in transit (TLS) and at rest
Secure authentication practices
Regular security assessments
Limited employee access to user data

9. Children's Privacy

The Service is intended for users 13 years and older. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

10. International Users

Your data may be processed in the United States. By using the Service, you consent to this transfer. We comply with applicable data protection laws including GDPR for EU users.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@undrstdy.com.