Privacy Policy

1. Introduction

StudySpark ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use StudySpark ("Service"). By using StudySpark, you agree to the practices described in this policy.

Questions? Contact us at contactinfo21342@gmail.com

2. Information We Collect

Information you provide directly:

• Name and email address when creating an account
• Profile photo (optional)
• Study content you generate (subject, topic, grade level, answers)
• Files you upload (notes, PDFs, images) — processed immediately and never permanently stored
• Payment information (processed by Stripe — we never see your card details)

Information collected automatically:

• Usage data (pages visited, features used, session history)
• Device type, browser, and operating system
• IP address and general location
• Cookies and similar tracking technologies (see Section 6)

3. How We Use Your Information

• To provide, operate, and improve the Service
• To generate personalized study materials using AI
• To process payments and manage subscriptions
• To send account-related emails (confirmations, password resets)
• To display advertisements to free-tier users (see Section 7)
• To analyze usage patterns and improve the Service
• To enforce our Terms of Service and prevent abuse

We do not sell your personal information. We do not use your data to train AI models.

4. Children's Privacy (COPPA)

StudySpark is designed for students of all ages, including children under 13. We comply with the Children's Online Privacy Protection Act (COPPA).

For users under 13: We require verifiable parental consent before collecting personal information. During registration, users under 13 are directed through a parental consent flow. Parents may review, modify, or request deletion of their child's data at any time by contacting contactinfo21342@gmail.com.

We collect the minimum information necessary from all users. We do not show behaviorally targeted advertising to users under 13. Any ads shown to users under 13 are contextual only (based on page content, not personal data).

5. Data Sharing

We share your data only with the following service providers to operate the Service:

• Supabase — database and authentication (supabase.com)
• Vercel — hosting and infrastructure (vercel.com)
• OpenAI — AI content generation. Your study topics and uploaded notes are sent to OpenAI to generate content. OpenAI's privacy policy governs this data (openai.com/privacy)
• Stripe — payment processing. Stripe's privacy policy governs payment data (stripe.com/privacy)
• Google AdSense — advertising for free-tier users. Google may use cookies to serve relevant ads. See Section 7 for details and opt-out options (google.com/privacy)

We do not share data with data brokers, advertisers for targeting purposes beyond AdSense, or any other third parties.

6. Cookies

We use the following types of cookies:

• Essential cookies — required to keep you logged in and use the Service. Cannot be disabled.
• Analytics cookies — help us understand how users use the Service (anonymous, aggregated data).
• Advertising cookies — used by Google AdSense to show relevant ads to free-tier users. These may track your activity across websites. Premium users do not see ads and are not subject to advertising cookies.

You can opt out of Google advertising cookies at adssettings.google.com or by upgrading to Premium.

7. Advertising

Free-tier users see advertisements served by Google AdSense. These ads help us keep the free tier available.

• Ads are displayed in sidebars, between questions, and on the loading screen
• Google AdSense may use cookies and your browsing data to show personalized ads
• We do not control which specific ads are shown
• Users under 13 see contextual ads only — no behavioral targeting
• Premium subscribers see no ads whatsoever

To opt out of personalized ads: adssettings.google.com or optout.aboutads.info

8. Data Retention

We retain your account data as long as your account is active. When you delete your account, we delete your personal information within 30 days, except where required by law (e.g., payment records retained 7 years for tax purposes).

Uploaded files are processed in memory and never permanently stored on our servers.

9. Your Rights

• Access — request a copy of your data
• Correction — update your information in account settings
• Deletion — delete your account via Settings → Danger Zone, or email us
• Opt-out of ads — upgrade to Premium or use Google's opt-out tools
• Portability — request your data in a portable format

California residents (CCPA): you have the right to know what personal information we collect, the right to delete it, and the right to non-discrimination for exercising privacy rights.

To exercise any right: contactinfo21342@gmail.com

10. Security

We implement industry-standard security including HTTPS encryption, hashed passwords via Supabase Auth, and row-level database security so users can only access their own data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy at any time. We will notify you of significant changes by email or in-app notice. Continued use after changes take effect constitutes acceptance of the revised policy.

12. Contact

StudySpark
Email: contactinfo21342@gmail.com