Privacy Policy

1. Information we collect

• Account data: name, email address, and the institution, program, level and learning style you enter during onboarding.
• Study data: courses, assignments, exams, planned sessions, flashcards, quizzes, notes and progress.
• Uploaded files: PDF, DOCX, PPTX and TXT documents you choose to upload, plus text extracted from them.
• Subscription data: plan tier, status, renewal date and trial status received from Stripe.
• Technical data: basic log and device information needed to keep the Service secure and working.

2. How we use your information

We do not sell your personal data, and we do not use your study content for advertising.

• To provide the features you ask for: planning, tracking, flashcards, quizzes, summaries and coaching.
• To enforce plan limits and process subscriptions.
• To keep accounts secure and prevent abuse.
• To respond to support requests.
• To improve reliability and fix errors.

3. How files are stored

Uploads are stored in a private storage bucket that is scoped to your account. Database rules (row-level security) mean other users cannot read your rows or files. Files are encrypted in transit and at rest by our hosting provider.

4. AI processing of your documents

When you ask for a summary, section highlights, flashcards, quiz questions or coaching, the relevant text is sent to our AI provider to generate that result. Only the text needed for the request is sent, it is processed to return your result, and it is not used to train third-party models.

You can use the app without AI features; they only run when you trigger them.

5. Cookies and analytics

We use essential cookies and local storage to keep you signed in and remember preferences such as your theme. Any non-essential analytics cookies are off unless you opt in. See the Cookie Policy to manage your choices.

6. Payment information

Payments are handled by Stripe. Card details are entered directly into Stripe's secure checkout and are never stored on our servers. We receive only non-sensitive details such as plan, status, renewal date and the last four digits where applicable.

7. Third-party services

• Hosting, database, authentication and file storage (Supabase infrastructure via Lovable Cloud).
• AI processing for generated summaries, flashcards, quizzes and coaching replies.
• Stripe for payments and subscription management.
• Transactional email delivery for account emails such as sign-up confirmation and password resets.

8. Data retention

We keep your study data for as long as your account is active. Deleted items are removed from the live database immediately and may persist up to 30 days in encrypted backups before backups roll over. Invoices and payment records are kept up to 7 years, where tax and accounting law requires it.

9. Deleting your data

• Delete individual documents, notes, flashcards, quizzes, courses and assignments from within the app.
• Delete your entire account from Account and Subscription — this permanently removes your profile, study data and uploaded files.
• Some records (such as payment and fraud-prevention records) may be retained where law requires.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a data-protection authority. Contact hello@northauracollection.com and we will respond within 30 days.

11. Security practices

No service can promise perfect security, but we work to protect your data and will notify affected users about incidents that pose a risk to them.

• Encryption in transit (HTTPS) and at rest.
• Row-level security so data is only readable by its owner.
• Server-side authorization checks for every AI and subscription feature.
• Password hashing and secure session handling by our authentication provider.

12. Children's privacy

The Service is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has created an account, contact us and we will delete it.

13. International users

Your data may be processed on servers outside your country, including in Canada, the United States and the European Union. We rely on appropriate safeguards, such as standard contractual clauses, where required.

14. Changes and contact

We will post updates to this policy here and note the effective date. Questions or privacy requests: hello@northauracollection.com.