Privacy Policy

1. Information we collect

Account & profile information

• Name, email address, and a hashed (never plaintext) password, or your Google account identifier if you sign in with Google.
• Your role (student, educator, or parent), and — if you provide them — education level, grade, school name, learning goals, and study preferences.

Content you create

• Documents you upload, and the study guides, flashcards, quizzes, and practice problems generated from them.
• Classroom, assignment, and group data if you use classroom features as an educator or student.

Learning & usage data

• Quiz and flashcard attempts, mastery/progress records, and study session activity — this is what powers personalization and progress tracking.

Payment information

• Subscription payments are processed by Stripe. We do not receive or store your full card number — only a subscription/plan status and the billing identifiers Stripe gives us.

Optional connected services

• If you choose to connect Google Classroom or Canvas, we access only the class and coursework information needed to import your classes and assignments (read-only), and only after you explicitly confirm what to import. You can disconnect at any time from Settings.

2. How we use information

• To provide the core product: generating study materials, tracking progress, and running classroom features.
• To personalize study plans and difficulty based on your goals and performance.
• To send account, billing, and classroom-related notifications (see Section 5, Cookies & communications).
• To maintain the security and integrity of the service, including preventing abuse.

3. How we share information

We do not sell your personal information. We share information only with the service providers that help us run StudyForge, each acting under its own privacy and security obligations:

• OpenAI — processes document/topic content to generate study guides, quizzes, flashcards, and explanations.
• Stripe — processes subscription payments.
• Resend — delivers transactional and notification email.
• Cloudflare R2 — stores uploaded documents and files.
• Google Classroom / Canvas — only if you connect them yourself, to sync classes and assignments.

We may also disclose information if required by law, or to protect the rights, safety, or property of StudyForge or our users.

4. Cookies & communications

We use a small number of cookies that are necessary for the site to function: a session cookie that keeps you signed in, and (if you arrived via a referral link) a short-lived cookie that attributes the referral. We do not use third-party advertising or cross-site tracking cookies. Your dark/light theme and color preferences are stored locally in your browser, not in a cookie.

Account, billing, and classroom notifications are sent by email as part of the service. Contact us (below) if you'd like to stop receiving a specific type of notification.

5. Data retention & deletion

You can export a full copy of your data at any time from Settings. Deleting your account from Settings permanently erases your personal data — profile, uploads, study materials, progress history — and signs you out everywhere; this can't be undone. If you own a classroom, we can't auto-delete your account without also destroying your students' assignment and progress history, so deleting instead deactivates your account and clears your personal data; email us (below) to fully close out an owned classroom.

6. Your rights & choices

• Access and export your data at any time from Settings.
• Correct your profile information at any time from Settings.
• Delete your account and data at any time from Settings (see Section 5 for the classroom-owner exception).
• Opt out of notification emails at any time from Settings, or via the unsubscribe link in any notification email.
• Disconnect any connected integration (Google Classroom, Canvas) at any time from Settings.

7. Security

Passwords are hashed, never stored in plain text. Credentials for connected integrations (like a Classroom refresh token or Canvas access token) are encrypted at rest. All traffic to StudyForge is encrypted in transit. No system is perfectly secure, and we can't guarantee absolute security.

8. Children's privacy

StudyForge is not directed at, and does not knowingly collect personal information from, children under 13 who register on their own. Creating an account requires confirming you are 13 or older, or that a parent, guardian, or teacher is setting up and supervising the account on a younger student's behalf. If we learn that a child under 13 has provided us personal information without appropriate consent, we will delete it. Parents or guardians who believe their child has provided us information without consent should contact us (below).

9. Changes to this policy

We may update this policy as StudyForge changes. We'll update the "Last updated" date above when we do, and post material changes here.

10. Contact us

Questions about this policy, or requests about your data, can be sent to landon.talley17@gmail.com.