Privacy Policy
Effective date: July 29, 2026
This Privacy Policy explains how Smart Study Lab ("Smart Study Lab," "we," "us," or "our") collects, uses, discloses, and protects information when you use our website and related services (collectively, the "Service"). By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
1. Information We Collect
1.1 Information you provide directly
- Account information: name, email address, and password (if you sign up with email), or basic profile information (name, email, profile picture) provided by a third-party sign-in provider such as Google.
- Content you upload or create: documents, notes, text, flashcards, study guides, quiz responses, and other materials you submit to generate AI-assisted study content ("User Content").
- Communications: messages you send us for support, feedback, or other inquiries.
1.2 Information collected automatically
- Usage data: pages visited, features used, study activity, session duration, and interaction patterns within the Service.
- Device and log data: IP address, browser type, operating system, device identifiers, and access timestamps.
- Cookies and similar technologies: used to maintain your session, remember preferences, and understand aggregate usage (see Section 7).
1.3 Information from third parties
If you choose to sign in using a third-party authentication provider (e.g., Google via Supabase Authentication), we receive basic profile information from that provider — typically your name, email address, and profile picture — as permitted by your settings with that provider.
2. How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the Service, including creating and securing your account;
- Generate AI-assisted study materials (flashcards, quizzes, summaries) from the content you upload;
- Personalize your experience, including spaced-repetition scheduling and progress analytics;
- Communicate with you about your account, updates, security alerts, and support requests;
- Monitor, analyze, and improve the performance, security, and functionality of the Service;
- Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity;
- Comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information. We do not use your uploaded study content to train third-party foundation models beyond what is strictly necessary to generate the outputs you request.
3. AI Processing of Your Content
To generate flashcards, quizzes, study guides, and related materials, User Content you upload is transmitted to third-party AI providers (such as Google's Gemini API) for processing. This processing is performed solely to generate the outputs you request. We encourage you not to upload content containing sensitive personal information you would not want processed by a third-party AI system (e.g., government identification numbers, health records, or financial account details).
4. How We Share Information
We may share information with:
- Service providers who perform functions on our behalf, including hosting (e.g., Vercel), authentication and database services (e.g., Supabase), and AI processing (e.g., Google Gemini API), each bound by contractual obligations to protect your information;
- Legal and safety purposes, where we believe disclosure is necessary to comply with a legal obligation, protect the rights, property, or safety of Smart Study Lab, our users, or the public, or investigate potential violations of our Terms of Service;
- Business transfers, where information may be transferred in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality obligations;
- With your direction, such as when you use a feature (e.g., our community or sharing features) that intentionally makes certain content visible to other users or the public.
We do not sell or rent your personal information to third parties for their own marketing purposes.
5. Data Retention
We retain your account information and User Content for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within a commercially reasonable period, except where retention is required to comply with legal obligations, resolve disputes, prevent fraud or abuse, or enforce our agreements.
6. Your Rights and Choices
Depending on your location, you may have the right to:
- Access, correct, or delete the personal information we hold about you;
- Export a copy of your User Content;
- Withdraw consent for optional processing (e.g., marketing communications);
- Object to or restrict certain processing of your information.
You can access and update most of your account information directly within your account settings. To make a data access, correction, deletion, or export request, contact us using the details in Section 11. We will respond within a reasonable timeframe and in accordance with applicable law.
7. Cookies and Tracking Technologies
We use cookies and similar technologies that are strictly necessary to operate the Service (such as maintaining your login session) and, where applicable, analytics cookies that help us understand aggregate usage patterns. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent parts of the Service, including sign-in, from functioning correctly.
8. Children's Privacy
The Service is intended for users aged 13 and older. If you are between 13 and 18 years old, you represent that you have your parent or legal guardian's permission to use the Service. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us using the details in Section 11.
9. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your information, including encrypted data transmission (HTTPS/TLS) and access controls on our infrastructure providers. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
10. International Users
The Service is operated from the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate, which may have data protection laws different from those of your jurisdiction.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at privacy@smartstudylab.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Effective date" above and, where appropriate, through additional notice (such as an in-app notification or email). Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.