Privacy Policy

Summary

Smart Study Platform stores the minimum required to deliver the service: your account identity (through Clerk) and the study sessions you create. We do not sell data, we do not run third-party advertising trackers, and we share your content only with the AI provider required to generate study materials.

What we collect

• Account data via Clerk: email, first name (if you provide one), and an opaque user id.
• Study input: the text you paste into the generator and the options you toggle.
• Generated content: summaries, flashcards, and practice questions produced from your input.
• Operational logs: request ids, timestamps, and error traces, retained up to 30 days.

How we use it

• To authenticate you and scope sessions to your account.
• To send your input text to Google Gemini and return its response to you.
• To debug failures and prevent abuse (for example, per-user rate limits).

Who we share it with

• Clerk — authentication.
• MongoDB Atlas — database hosting.
• Google (Gemini API) — AI generation.
• Vercel — application hosting and delivery.

Each provider has its own privacy policy. We do not share your data with advertisers.

Retention

Study sessions remain until you delete them. You can delete any session from the session detail page. Deleting your account via Clerk removes your authentication record; database content linked to your user id is removed within 30 days.

Your rights

You can request a copy of your data, corrections, or deletion by emailing the address on our GitHub page.

Security

We enforce HTTPS with HSTS, sandbox third-party frames, rate-limit AI generation per user, and scope every database read by user id at the repository layer. See SECURITY.md to report a vulnerability.

Changes

Material changes are posted to this page and announced via the project's GitHub releases. The "Last updated" date above always reflects the latest revision.