Privacy Policy

Last updated: June 25, 2026  ·  Effective: June 25, 2026

StudyEdge AI ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, who we share it with, and your rights as a user. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), the European Union General Data Protection Regulation (GDPR) where applicable, and the California Consumer Privacy Act (CCPA) where applicable.

1. What We Collect

We collect the following categories of information when you use StudyEdge AI:

• Account information: your email address and password (stored securely via Supabase authentication). If you sign in with Google, we receive your name and email from Google.
• Study data: courses, schedules, assignments, exam dates, session notes, and study plans you create inside the app.
• AI interaction data: the content of prompts you send to StudyEdge AI's AI features (flashcards, session blueprints, study coach, quizzes, AI tutor). This content is processed by Anthropic's API and is not used to train Anthropic's models under the current API terms.
• Usage and analytics data: how you interact with the app, session frequency, features used, page visits, click events, and general performance metrics. This data is collected via PostHog and Vercel Analytics. Your email address and name are associated with your PostHog analytics profile.
• AI interaction traces: the full input and output of AI feature calls (your prompts and the AI's responses) are logged to Langfuse for quality monitoring and debugging. This includes any course content, notes, or questions you submit to AI features.
• Error and session data: application errors and, for approximately 5% of sessions, a session replay are sent to Sentry for debugging. Text on screen is masked in session replays.
• Payment information: if you subscribe to a paid plan, payment is processed by Stripe, who acts as the payment processor. We receive confirmation of your subscription status but do not store or see your full credit card number.
• Calendar data: if you connect Google Calendar, we read your existing events to avoid scheduling conflicts and optionally write study sessions to your calendar. We do not store your raw calendar event data beyond what is needed to generate and display your schedule, and we do not share it with third parties for any other purpose.
• Phone number (optional): if you opt in to SMS study reminders, we collect your mobile phone number. Providing this is entirely voluntary. Message and data rates may apply. You can opt out at any time from your account settings.
• Communications data: if you contact us by email, we retain the contents of that communication to respond and resolve your inquiry.

2. How We Use Your Information

• To provide and operate the StudyEdge AI service.
• To generate your study schedule, session plans, flashcards, and other AI-powered features.
• To send transactional emails (account verification, password reset, subscription receipts) via Resend.
• To send product updates and announcements via Loops.so, where you have given consent under CASL. You can opt out at any time using the unsubscribe link in any marketing email or at getstudyedge.com/unsubscribe.
• To send SMS study reminders, if you have opted in. You can opt out at any time by replying STOP to any message or from your account settings.
• To improve the product through aggregate and anonymized usage analysis via PostHog.
• To process your subscription and manage billing events via Stripe.
• To comply with legal obligations and enforce these policies.

3. Third-Party Services

StudyEdge AI uses the following third-party services to operate. Each has its own privacy practices and we encourage you to review them:

• Supabase: database and authentication. Your account, study data, and subscription state are stored in a secure PostgreSQL database hosted by Supabase. See Supabase's Privacy Policy.
• Anthropic: powers all AI features (AI tutor, study coach, session blueprints, flashcards, quizzes, cheat sheets). Content you submit to AI features — including course names, study notes, and uploaded syllabi — is processed by Anthropic's API. Anthropic does not use API inputs and outputs to train its models by default. See Anthropic's Privacy Policy.
• Stripe: subscription billing and payment processing. Stripe is our payment processor and handles all credit card data. We receive confirmation of your subscription status but do not store or see your card number. See Stripe's Privacy Policy.
• PostHog: product analytics. PostHog collects behavioral usage data (page views, clicks, feature interactions) to help us understand how the product is used. We associate your email address and name with your PostHog analytics profile so we can understand usage at the individual account level and improve the product. PostHog analytics requests are proxied through our own domain to ensure reliable data collection. PostHog may use cookies and similar tracking technologies. See PostHog's Privacy Policy.
• Vercel Analytics: page view and Web Vitals analytics collected by Vercel, the platform that hosts StudyEdge AI. This data is used for performance monitoring and does not include personally identifiable information.
• Sentry: error monitoring and session replay. Sentry captures application errors and, for a small sample of sessions (approximately 5%) and all error sessions, records a replay of your interaction with the app to help us debug problems. Text content visible on screen is masked in these replays. See Sentry's Privacy Policy.
• Resend: transactional email delivery (account confirmations, billing receipts, password resets, and product lifecycle emails). Your email address is shared with Resend solely for the purpose of delivering these messages.
• Loops.so: marketing email automation (study tips, product updates, re-engagement emails). Your email address and first name are shared with Loops.so to enable these communications. See Loops.so's Privacy Policy.
• Axiom: structured server-side logging. Axiom receives server log events associated with your user ID (not your email) to support debugging and operational monitoring. Log data is retained according to Axiom's retention policy.
• Langfuse: AI observability and tracing. When you use AI features, the full input and output of those AI calls — including your prompts and StudyEdge AI's responses — are logged to Langfuse for quality monitoring and debugging. This includes the text of your study notes, course details, and AI tutor conversations submitted during those interactions. See Langfuse's Privacy Policy.
• Deepgram: audio transcription. If you use voice-to-text features, your audio is sent to Deepgram for transcription. The audio is not retained by us after transcription. See Deepgram's Privacy Policy.
• OpenAI: semantic embeddings used for study content matching and recall scoring within the app. Text you provide (such as course topics and study notes) may be sent to OpenAI's embeddings API. See OpenAI's Privacy Policy.
• Wolfram Alpha: mathematical computation. Study-related queries you submit to the AI tutor's math feature may be forwarded to the Wolfram Alpha API to compute answers. See Wolfram Alpha's Privacy Policy.
• YouTube (Google): contextual video suggestions. During study sessions, your study topic and course name may be sent to the YouTube Data API to surface relevant educational videos. See Google's Privacy Policy.
• Firecrawl: web page content extraction. If you use the syllabus URL import feature, the URL you provide is sent to Firecrawl, which fetches and extracts the page content. Only the URL itself and the resulting page text are involved — no personal information beyond your user session is shared with Firecrawl. See Firecrawl's Privacy Policy.
• Twilio: SMS delivery. If you opt in to SMS study reminders, your mobile phone number is shared with Twilio solely to deliver those messages. See Twilio's Privacy Policy.
• Vercel: web hosting and infrastructure. All web traffic passes through Vercel's servers. See Vercel's Privacy Policy.
• Google: optional Google sign-in and Google Calendar integration, used only with your explicit authorization. When you connect Google Calendar, we request access to read your existing calendar events (to avoid scheduling conflicts) and to write study sessions to your calendar. We store a Google refresh token in your account record to maintain this connection. We do not access, store, or share your calendar data beyond these purposes. StudyEdge AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve advertising or sell it to third parties.
• Notion: optional Notion calendar integration, used only with your explicit authorization. When you connect Notion, we store a Notion access token in your account record to read your Notion calendar data for scheduling purposes. We do not share your Notion data with any third parties or use it beyond populating your study schedule.

4. Cookies and Tracking Technologies

StudyEdge AI uses cookies and similar browser storage for the following purposes:

• Authentication cookies: to keep you logged in and maintain your session. These are required for the app to function.
• Analytics cookies (PostHog): PostHog sets cookies to track usage patterns across sessions, such as which features are used and how users navigate the app. This data is used in aggregate to improve the product. It is not used for advertising or sold to third parties.

You can disable cookies in your browser settings. Disabling analytics cookies will not affect app functionality, but disabling authentication cookies will prevent you from staying logged in. We do not use advertising or retargeting cookies.

5. Data Retention

We retain your account and study data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, tax, or financial record-keeping purposes (for example, billing records are retained for up to 7 years as required by applicable law). Aggregated, anonymized analytics data that cannot be linked back to you may be retained indefinitely.

6. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication via Supabase, and row-level security policies so users can only access their own data. No system is 100% secure, and we cannot guarantee absolute security of your personal information.

7. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and applicable regulatory authorities as required by law. Under GDPR, this notification will occur within 72 hours of becoming aware of the breach where feasible.

8. Your Rights Under PIPEDA (Canada)

As a user, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Withdraw consent to the collection or use of your information (subject to legal or contractual restrictions).
• Request deletion of your account and personal data.
• File a complaint with the Office of the Privacy Commissioner of Canada.

9. Your Rights Under GDPR (European Union / EEA)

If you are located in the European Union or European Economic Area, you have the following additional rights under the GDPR:

• Right of access: obtain a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate personal data.
• Right to erasure ("right to be forgotten"): request deletion of your personal data, subject to legal retention obligations.
• Right to restriction of processing: request that we limit how we use your data in certain circumstances.
• Right to data portability: receive your personal data in a structured, machine-readable format.
• Right to object: object to processing of your personal data for direct marketing or based on legitimate interests.
• Right to lodge a complaint: with your local data protection supervisory authority.

Our lawful basis for processing personal data is: (a) performance of a contract, for data necessary to provide the service; (b) legitimate interests, for analytics and product improvement; and (c) consent, for marketing communications and optional SMS reminders.

To exercise any GDPR rights, contact us at support@getstudyedge.com. We will respond within 30 days.

10. Your Rights Under CCPA (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know: request information about the categories and specific pieces of personal information we have collected about you, the sources, our business purpose, and the third parties we share it with.
• Right to delete: request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale or sharing: we do not sell or share your personal information with third parties for advertising purposes. We have no "sale" of personal information to disclose.
• Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA rights.

To exercise your California rights, contact us at support@getstudyedge.com or submit a request through the app. We will verify your identity before processing your request.

11. Children's Privacy

StudyEdge AI is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information without verifiable parental consent, we will delete that information promptly. If you believe a child under 13 has registered, please contact us at support@getstudyedge.com.

12. International Data Transfers

StudyEdge AI operates from Canada and uses third-party services based in the United States and other countries. If you are located in the EU/EEA or elsewhere, your data may be transferred to and processed in countries outside your jurisdiction. We rely on standard contractual clauses and other transfer mechanisms where required by applicable law to ensure your data is protected during such transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will notify you by email at least 14 days before they take effect. Continued use of the Service after the effective date constitutes your acceptance of the updated policy.

14. Contact

Questions about this Privacy Policy or your data? Contact us at support@getstudyedge.com.