Legal

Privacy Policy

Last updated: [MONTH DAY, YEAR]

This Privacy Policy explains how Roast2Learn ("Roast2Learn", "we", "us") collects, uses, and shares information when you use our website and app (the "Service"). Roast2Learn is operated by an individual. If you have questions, contact us at [YOUR CONTACT EMAIL].

By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

1. Information we collect

We collect the following:

  • Account information: your email address and display name when you sign up.
  • Content you upload: the PDFs, images, and notes you upload, and the text extracted from them.
  • Generated study material: summaries, flashcards, quizzes, quiz scores, cheat sheets, diagnoses, predictions, and tutor chat messages tied to your account.
  • Payment information: if you subscribe, payments are processed by Stripe. We do not store your full card number — we store a Stripe customer ID and subscription status.
  • Usage data: counts of features used, timestamps, study streak, and similar activity needed to run the Service and enforce limits.
  • Optional communications: if you join a waitlist or contact support, we keep the email address and message you provide.
  • Essential cookies: a session cookie used to keep you logged in (see our Cookie Policy).

2. How we use your information

  • To provide the Service and generate AI study material from your uploads.
  • To create and secure your account and authenticate you.
  • To process subscriptions and manage billing through Stripe.
  • To enforce free-tier limits and prevent abuse.
  • To respond to your messages and improve the Service.

3. How AI processing works

To power features like summaries, flashcards, quizzes, the tutor chat, and problem solving, the content you upload (and text extracted from it) is sent to our AI provider, OpenAI, to generate outputs. This processing happens only to deliver the feature you requested. We do not sell your content, and we do not use it to publicly train our own models.

4. Third-party services we use

We rely on trusted providers who process data on our behalf:

  • Supabase — database, authentication, and file storage.
  • OpenAI — AI text and vision processing of your content.
  • Stripe — payment processing for subscriptions.
  • Vercel — hosting and content delivery.

Each provider has its own privacy practices. We encourage you to review their policies.

5. How we share information

We do not sell your personal information. We share it only with the processors listed above to run the Service, or where required by law, or to protect the rights, safety, and security of our users and the Service. If the Service is ever transferred to another operator, your information may be transferred as part of that transaction, subject to this Policy.

6. Data retention

We keep your information for as long as your account is active. When you delete a note, its associated generated material is removed. When you delete your account, we delete or anonymize your personal data, except where we must retain limited records (for example, billing records) to comply with legal obligations.

7. Your rights and choices

  • You can access and update your account information from within the app.
  • You can delete individual notes and their generated material at any time.
  • You can request deletion of your account and associated data by contacting [YOUR CONTACT EMAIL].
  • Depending on where you live, you may have additional rights (such as access, correction, deletion, or portability). Contact us to exercise them.

8. Security

We use reasonable safeguards, including row-level security on our database, access controls, and encryption in transit, to protect your information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

9. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you are between 13 and 18, you should use the Service only with the involvement of a parent or guardian. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

10. International users

We and our providers may process and store your information in countries other than your own, including the United States. By using the Service, you consent to this processing.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the Service after changes means you accept the updated Policy.

12. Contact

Questions about this Policy? Email [YOUR CONTACT EMAIL].