Last Updated: August 27, 2025
1. Introduction
Neuroleaf ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered flashcard platform.
2. Information We Collect
2.1 Account Information
- Email address and name (for account creation and communication)
- Profile picture (if you choose to upload one)
- Authentication data (securely managed through Supabase)
2.2 Content Data
- Flashcards you create (questions, answers, tags, difficulty levels)
- Decks and their organization
- Files you upload (PDFs, DOCX, TXT) for content extraction
- Test responses and performance data
2.3 Usage Analytics
- Study session data (time spent, cards reviewed, accuracy rates)
- Feature usage patterns
- Performance metrics and learning progress
- AI generation usage and quotas
2.4 Technical Data
- IP address and device information
- Browser type and version
- Usage logs and error reports
- Cookies and similar tracking technologies
3. How We Use Your Information
3.1 Service Provision
- Creating and managing your account
- Storing and organizing your flashcards and decks
- Processing uploaded files for content extraction
- Tracking your learning progress and performance
3.2 AI Features
- Sending your content to Google's Gemini API for flashcard generation
- Generating AI-powered test questions and grading
- Analyzing content for optimal learning recommendations
- Providing personalized feedback and insights
3.3 Service Improvement
- Analyzing usage patterns to improve features
- Troubleshooting technical issues
- Developing new learning tools and capabilities
3.4 Communication
- Sending account-related notifications
- Providing customer support
- Notifying you of important service updates
4. Information Sharing and Disclosure
4.1 Third-Party Services
- Supabase: Database hosting and authentication (your data is encrypted and secured)
- Google Gemini API: AI content processing (content is processed but not stored by Google)
- Stripe: Payment processing for subscriptions (financial data handled securely)
4.2 Legal Requirements
We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction, with appropriate notice provided.
5. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit and at rest
- Secure authentication through Supabase
- Regular security updates and monitoring
- Limited access to personal data on a need-to-know basis
- Secure file upload and processing procedures
6. Data Retention
We retain your information for as long as necessary to provide our services:
- Account data: Until you delete your account
- Content data: Until you delete specific content or your account
- Usage analytics: Aggregated data may be retained indefinitely
- Technical logs: Typically deleted after 12 months
7. Your Rights and Choices
7.1 Access and Control
- View and edit your account information
- Download your flashcard data
- Delete specific content or your entire account
- Control cookie preferences through your browser
7.2 Communication Preferences
- Opt out of non-essential communications
- Manage notification settings within the app
7.3 Data Portability
You can export your flashcard data in standard formats for use with other services.
8. International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information during such transfers.
9. Children's Privacy
Neuroleaf is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through prominent notice on our service.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us through the contact information provided on our website or within the application.