Privacy Policy

AugStudy is for people 13 years of age or older. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you are under 18, you must have a parent or guardian’s permission to use AugStudy. Where the law where you live sets a higher age for agreeing to online services on your own (for example 14 in Quebec, or up to 16 in parts of the European Union), a parent or guardian must agree on your behalf. If you believe a child has given us personal information without that permission, contact us and we will delete it.

We collect what the app needs to work, and nothing more:

• Account and identity: your email address and a password (or, if you sign in with Google or Apple, the basic profile they share), plus your username, display name, chosen avatar, and time zone.
• Study content you create: the decks, flashcards and notes you type, the PDFs, text files and photos you add, and voice notes you record. Voice notes are transcribed to text and the recording itself is not stored.
• Study progress: quiz and flashcard results, spaced-repetition schedules, weak questions, XP, levels, streaks, gems, hearts, pets, badges, quests, and seasonal event progress.
• Social features: your friends, study groups, classrooms, public decks you share, reactions, battle results, and leaderboard standing.
• Notifications: in-app notifications, and, if you allow push, a device token so we can deliver reminders.
• Membership: whether you have AugSuper and when it ends. Payment details never reach us (see “Who processes your data”).
• Safety and abuse prevention: reports you send and reports about you, blocks, and, at sign-up, the automated bot check’s browser signals and IP address.
• Technical data: authentication logs at our database provider and short-lived request logs at our hosting provider.
• Error reports: when something breaks, the error type, stack trace, app version, and your user ID. Never your study content.

We do not collect your contacts, precise location, or advertising identifiers, and we use no third-party advertising or cross-app tracking.

A teacher with a teacher account can make a class. You join one only with its code, and you can leave whenever you like.

• What your teacher sees: your display name (or just “Student” and a number, with no name and no username, if you hide your name in that class), which assignments you finished and when, your quiz scores on the decks of that class, whether you got each question of those quizzes right (the question and its topic, never what you typed), and when you were last active. Your teacher does not see your friends, messages, gems, pets or decks outside the class.
• What your classmates see: your name, picture and XP on the class ranks, unless you hide your name in that class. A classmate who hides their name is left out of that list altogether. Joining a Live Battle shows the name on your profile to everyone in that room, whoever opened it.
• How long it is kept: question-by-question quiz results are kept for 180 days at most. They are deleted sooner when you leave the class, your teacher removes you or deletes the class, or you delete your account.
• Rewards for class assignments are paid by AugStudy, never by a teacher, and count toward the same daily XP and gem limits as all other study.
• A teacher who deletes their account deletes their classes with it.

• To run the app you signed up for: saving decks, tracking progress, streaks, pets, quests and events, and the social features you opt into. Legal basis: performing our agreement with you.
• To generate the AI study material you ask for (see “AI features”). Legal basis: performing our agreement with you.
• To send reminders and activity notifications, which you can turn off at any time. Legal basis: your consent.
• To keep the service secure and prevent abuse: the sign-up bot check, rate limits, reports, blocks and bans. Legal basis: our legitimate interest in a safe service.
• To keep records the law requires, such as payment records. Legal basis: legal obligation.

We do not sell your personal information, and we do not use your study content to show you ads.

Some features send content to third-party AI providers to produce a result: the notes or deck you choose to process, the photo you scan, the message you type in chat, or the voice note you record. The providers, and what each one handles:

• Anthropic (Claude models): quiz questions, Live Battle questions, study plans, slideshows, reading text out of photos, and checking public names and titles against our rules.
• OpenRouter (Llama models run by its hosting partners): flashcards, summaries, study chat, and the wording of reminders.
• Cloudflare (Workers AI, Llama models): the same features, only when OpenRouter is unavailable.
• Groq: transcribing voice notes with Whisper, and a last-resort fallback for the text features.

Llama models are published by Meta but run by the providers above; Meta receives nothing from us. We only use provider tiers and settings under which your content is not used to train their models; it is processed to produce your result and handled under their terms as our service providers. If you never use the AI features, none of your content is sent to them.

AI output can be wrong. It is a study aid, and you should check anything that matters.

We share data only with the providers that run the service, and only what each one needs:

• Supabase: our database, sign-in, and file storage. Your account, study content, progress and social data live here.
• Vercel: hosts the website and runs the server. Request logs are kept for a short time.
• Cloudflare: the bot check at sign-up (browser signals and IP address), and a fallback AI provider as described above.
• Anthropic, OpenRouter, Cloudflare and Groq: the AI providers described above.
• Google Firebase Cloud Messaging: delivers push notifications. It receives your device token and the text of each notification.
• Sentry: receives error reports with your user ID so we can fix bugs. It never receives your study content.
• Resend (on Amazon Web Services): sends our email, such as verification codes and account notices.
• Stripe: bills AugSuper subscriptions bought on the website. Your card details go to Stripe, never to us; we receive your membership status and a customer reference.
• Apple, with RevenueCat: bills AugSuper subscriptions bought in the iPhone app. We receive your subscription status and an anonymous app user ID.
• Google and Apple sign-in: if you choose them, they confirm who you are and share your basic profile.
• Your device: for offline use, decks and progress are cached on your device. That cache stays on the device and is cleared when you sign out or delete the app.

We may also disclose information when the law requires it, or to protect someone’s safety.

The website uses a sign-in cookie so you stay logged in, and your browser’s local storage for preferences, offline copies of your decks, and the last day’s progress. The sign-up page loads Cloudflare’s bot check, which sets its own cookie. We use no advertising or analytics cookies, and nothing tracks you across other sites.

The app can send study reminders and activity alerts. You decide whether to grant notification permission, and you can turn notifications off at any time in your device settings. In-app notifications are managed from your inbox.

Everything travels over HTTPS, and our providers encrypt stored data. Each account can only read its own rows in the database; other people’s data reaches you only through the limited public profile the app shows. The keys that can bypass those rules live only on the server. If a security incident affects your personal data, we will tell you without undue delay, and notify regulators where the law requires it.

• Access and correct your profile and content in the app.
• Delete your account at any time from Settings → Delete Account. This is immediate and permanent.
• Delete without the app: use augstudy.ca/data-deletion, or email support@augstudy.ca from the email address on your account. We verify that the request comes from the account holder before acting on it.
• Get a copy of your data: email us and we will send your decks, progress and profile in a machine-readable format.
• Withdraw consent for notifications at any time in your device settings.

We answer requests within 30 days. If you are in the European Economic Area or the United Kingdom, you also have the rights to object to or restrict certain processing and to data portability, and you can complain to your local data protection authority. In Canada, you can complain to the Office of the Privacy Commissioner. If you are a California resident, you have the rights of access and deletion under the CCPA/CPRA; we do not sell personal information.

Deleting your account removes, right away:

• your login and profile (email, username, display name, avatar);
• your decks, cards, notes and uploaded files, including decks you shared to a group or classroom;
• your progress: XP, streaks, gems, hearts, pets, badges, quests and event progress;
• your social data: friends, group and classroom memberships, reactions, reports, and your place on leaderboards;
• your class results: which assignments you finished and your question-by-question quiz results in classes, and, if you are a teacher, your classes with their assignments and the results kept for them;
• your notifications, study plans and device tokens.

Two things stay, because they are not yours alone:

• Copies of your public decks that other students made before you left stay with them, without your name on them.
• Payment records stay with Stripe or Apple for as long as tax and accounting law requires. We keep nothing that identifies you.

We keep your data while your account exists. When you delete your account, your data is removed from the live database immediately. Copies in our database provider’s backups expire within 30 days. Error reports at Sentry, which carry your user ID and no content, expire within 90 days. Email delivery logs at our email provider expire within a few days. Payment records are kept only as described above.

AugStudy is operated from Canada and used around the world. The providers named above store and process data mainly in the United States, and in some cases in Canada or other countries. Wherever your data goes, each provider is bound by a written agreement to protect it and to use it only to provide its service to us; for transfers out of the EEA and UK these agreements include standard contractual clauses.

If we make a material change, we will tell you in the app and by email at least 14 days before it takes effect, and update the date at the top. Smaller clarifications take effect when posted. If you keep using AugStudy after a change takes effect, the updated policy applies; if you do not agree with it, you can delete your account at any time.

Questions or requests about your data: support@augstudy.ca.