Privacy Policy

LearnVerse AI ("we", "us", "our") provides an AI-powered study platform that lets students upload documents, chat with an AI assistant, generate notes, flashcards, and quizzes, and plan study sessions. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

By creating an account or using LearnVerse AI, you agree to the practices described here. If you do not agree, please do not use the service.

Account information

Name, email address, password hash, profile picture, and preferences you provide during sign-up or in Settings.

Uploaded documents

PDFs, images, and text you upload for AI processing, along with derived metadata such as titles, tags, and page counts.

AI chat history

Messages you send to the AI assistant, the AI's responses, and the documents each chat is anchored to.

Payment information

If you subscribe to a paid plan, our payment processors collect billing details. We store only non-sensitive metadata such as plan, status, and invoice IDs — never full card numbers.

Device information

Browser type, operating system, device type, IP address, and language preferences.

Usage analytics

Pages viewed, features used, session length, and error diagnostics — used to improve reliability and the product.

• Provide the core product: authentication, document storage, AI chat, notes, flashcards, quizzes, and study planning.
• Personalize your experience, including recommendations and study reminders.
• Process payments and manage subscriptions.
• Communicate service updates, security notices, and (with consent) marketing.
• Detect abuse, fraud, and violations of our Terms.
• Comply with legal obligations.

When you upload a document or send a chat message, the content is transmitted to our AI providers to generate a response. Providers process the content transiently to produce output and are contractually prohibited from using your content to train their public models.

Documents remain in your account until you delete them. You control which documents are indexed for AI features.

We use strictly necessary cookies for authentication and session management, and optional cookies for analytics and preferences. You can control cookies through your browser settings. Blocking essential cookies will prevent you from signing in.

We rely on trusted vendors to operate the service. Each is bound by its own privacy policy and data-processing terms.

• Supabase — database, authentication, and file storage.
• OpenAI-compatible AI providers — natural-language processing for chat, summaries, and generation.
• Razorpay & Lemon Squeezy — subscription billing and card processing.
• Google Authentication — optional single sign-on.
• GitHub Authentication — optional single sign-on.
• GitLab Authentication — optional single sign-on.

Data is stored on managed infrastructure with encryption at rest and TLS in transit. Access is limited to authorized personnel and enforced through row-level security policies. No system is 100% secure, but we work continuously to protect your data.

Pulse messages (direct chats and group chats) are protected with end-to-end encryption. Message content is encrypted on your device using AES-GCM (256-bit) with keys exchanged via X25519 ECDH and derived through HKDF-SHA256. Your private key never leaves your device — only your public key is published so friends can encrypt to you.

As a result, we cannot read the contents of your Pulse messages, and neither can our infrastructure providers. We only see ciphertext, message timestamps, sender and recipient IDs, and group membership metadata needed to deliver messages. Because keys live on your device, signing in on a new device or clearing browser storage may make older messages undecryptable. Reported messages remain encrypted; only the reporter's copy is shared with moderators.

We retain account data for as long as your account is active. Documents and AI chat history are retained until you delete them or your account. Backups are purged on a rolling basis. Billing records are retained as required by tax and accounting laws.

• Access the personal data we hold about you.
• Correct inaccurate data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent for optional processing at any time.

You can delete individual documents, notes, flashcards, quizzes, and chat sessions from within the app. To permanently delete your entire account and all associated data, use the Delete Account option under Settings → Security, or contact us. Deletion is irreversible.

LearnVerse AI is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Our infrastructure may store and process data in countries outside your own. Where required, we rely on standard contractual clauses and equivalent safeguards to transfer data lawfully.

We may update this Privacy Policy from time to time. Material changes will be announced in the app or by email. The "Last Updated" date at the top of this page always reflects the current version.