Privacy Policy

This Privacy Policy explains how edugaa ("edugaa," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website, applications, and related services (the "Service"). It also describes your privacy rights and how to exercise them. By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

1. Who we are

edugaa is the controller of the personal information processed through the Service. If you have questions or wish to exercise your rights, contact us at privacy@edugaa.com.

2. Information we collect

Information you provide

• Account information — your name, email address, and, if you sign in with Google, the basic profile details Google shares (such as name, email, and avatar). If you set a password or use a magic link, we process the information needed to authenticate you.
• Profile & preferences — an avatar you upload, your app and learning language, and settings you choose.
• Learning content — topics you enter, the documents, links, images, and text you upload, the Modules, notes, and quizzes generated for you, your answers, scores, progress, and your conversations with the AI tutor.
• Support & feedback — messages you send us, including feedback and support requests.
• Payment information — when you subscribe, your payment is handled by Stripe. We do not see or store your full card details; we retain a customer identifier, plan and billing status, and limited transaction metadata.

Information collected automatically

• Usage & device data — basic information about how you use the Service, such as pages viewed, actions taken, approximate location derived from your IP address, browser and device type, and timestamps, collected through essential cookies and privacy-friendly analytics.
• Cookies — see our Cookie Policy for details on the cookies and similar technologies we use.

3. How we use your information

• to create and manage your account and authenticate you;
• to provide, personalize, and improve the Service, including generating your Modules, notes, quizzes, and tutor responses and tracking your progress;
• to process payments, trials, and subscriptions;
• to respond to your support requests and feedback;
• to secure the Service, prevent fraud and abuse, and enforce our Terms;
• to send you service-related messages (such as sign-in links, billing notices, and important updates); and
• to comply with legal obligations.

We do not sell your personal information, and we do not use the content of your uploads or tutor conversations to advertise to you.

4. AI processing

edugaa uses Google's Gemini models to generate learning content and power the tutor. The topics, prompts, and content you submit for these features are sent to Google to produce your results, and are processed subject to Google's applicable API terms and privacy commitments. We do not use your personal content to train our own foundation models. For more on how AI is used and its limitations, see our AI Policy.

5. Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:

• Contract — to provide the Service you request and manage your account and subscription;
• Legitimate interests — to secure and improve the Service and prevent abuse, balanced against your rights;
• Consent — where required, for example for certain cookies or optional communications (you may withdraw consent at any time); and
• Legal obligation — to comply with applicable law.

6. How we share information

We share personal information only as described here. Our service providers process data on our behalf and under contract:

• Supabase — authentication and database hosting;
• Google — AI generation (Gemini) and Google sign-in;
• Stripe — payment processing;
• Vercel — application hosting and privacy-friendly analytics;
• Resend — sending transactional emails such as sign-in links and notifications.

We may also share information to comply with the law or valid legal requests, to protect the rights, safety, and security of edugaa and our users, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you of any change in control or use of your personal information).

7. International transfers

Our providers may process and store data in countries other than yours, including the United States. Where we transfer personal information internationally, we rely on appropriate safeguards such as the providers' standard contractual clauses and equivalent mechanisms recognized under applicable law.

8. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete content or your account, we delete the associated personal information from our active systems within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements. Residual copies may remain in backups for a limited time before being overwritten.

9. Your rights & choices

You can access, update, or delete much of your information directly in Settings, including uploading or changing your avatar and deleting your account (which removes your associated content). Depending on where you live, you may also have the right to:

• access a copy of the personal information we hold about you;
• correct inaccurate information;
• delete your information ("right to be forgotten");
• restrict or object to certain processing;
• data portability;
• withdraw consent where processing is based on consent; and
• not receive discriminatory treatment for exercising your rights (CCPA).

To exercise these rights, use the tools in Settings or email privacy@edugaa.com. We will respond within the time required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.

10. Security

We use industry-standard measures to protect your information, including encryption in transit and row-level access controls so that users can only access their own data. No method of transmission or storage is perfectly secure, but we work continually to protect your information and will notify you and the relevant authorities of a data breach where required by law.

11. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, contact us at privacy@edugaa.com and we will delete it. Users who are minors in their jurisdiction should only use the Service with a parent or guardian's involvement.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you and will update the "Last updated" date above. Your continued use of the Service after changes take effect means you accept the updated Policy.

13. Contact us

For any privacy question or request, contact us at privacy@edugaa.com.