Privacy Policy

Last updated: August 2026

1. Overview

Gradelys ("we", "us", "our") provides an AI-powered learning workspace. This policy explains what data we collect, how we use it, and the choices you have. By using Gradelys, you agree to the practices described here.

2. Information we collect

• Account data — name, email address, and authentication credentials.
• Content you create — chat messages, notes, flashcards, uploaded documents and images, and generated study materials.
• Usage data — feature usage, session activity, and device/browser information, used to improve the product and enforce plan limits.
• Payment data — subscription and billing details are processed by our payment partner (Whop); we do not store full card numbers.

3. How we use your information

We use your data to provide and improve Gradelys, personalize your study experience, process payments, send transactional and (opt-in) product emails, and maintain the security of our service. Content you submit to AI features is sent to our AI provider (Google Gemini) solely to generate your requested output — it is not used to train third-party models beyond their standard API terms.

4. Data sharing

We do not sell your personal data. We share data only with service providers that power Gradelys (Supabase for database and authentication, Google for AI generation, Whop for payments, Resend for email) under contracts that require them to protect your data, or when required by law.

5. Data retention & deletion

We retain your data for as long as your account is active. You can delete individual items (notes, chats, flashcards, scans) at any time from within the app, or request full account deletion from Settings → Security. Deleted data is permanently removed from our production database.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. You can exercise these rights directly in Settings, or by contacting us at privacy@gradelys.app.

7. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, row-level security on all database tables, and rate limiting on sensitive endpoints. No method of transmission or storage is 100% secure, and we encourage you to use a strong, unique password.

8. Children's privacy

Gradelys is intended for students aged 13 and older. If you believe a child under 13 has provided us with personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. We'll notify you of material changes by email or in-app notice.

10. Contact

Questions? Reach us at privacy@gradelys.app.