Privacy Policy

1. Introduction

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (encrypted), profile picture, and username when you create an account.
• Profile Information: Education level, preferred language, date of birth (optional), and learning preferences.
• Uploaded Content: Images of educational materials you scan, including textbook pages, handwritten notes, diagrams, and problems.
• Communication Data: Messages you send through follow-up questions, feedback, and support requests.
• Payment Information: Billing address and payment method details (processed securely by Stripe; we do not store full card numbers).

2.2 Information Collected Automatically

• Usage Data: Features used, scans performed, time spent, learning streaks, and interaction patterns.
• Device Information: Browser type, operating system, device type, screen resolution, and unique device identifiers.
• Log Data: IP address, access times, pages viewed, and referring URLs.
• Location Data: Approximate location based on IP address (country/region level only).

2.3 Information from Third Parties

• OAuth Providers: If you sign in with Google, we receive your name, email, and profile picture from Google.
• Payment Processors: Stripe provides us with transaction status and billing information (not full card details).

3. How We Use Your Information

We use your information for the following purposes:

4. Data Sharing & Third Parties

We do not sell your personal information. We share data only in the following circumstances:

We may also share information:

• With your consent or at your direction
• To comply with legal obligations or court orders
• To protect our rights, property, or safety
• In connection with a merger, acquisition, or sale of assets (with notice to you)

5. Data Storage & Security

5.1 Data Retention

• Account Data: Retained until you delete your account
• Scan History: Based on your plan (7 days for free, unlimited for premium)
• Uploaded Images: Automatically deleted after 30 days (unless bookmarked)
• Usage Logs: Retained for 90 days
• Payment Records: Retained for 7 years (legal requirement)

5.2 Security Measures

We implement industry-standard security measures:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Secure password hashing using bcrypt
• Regular security audits and penetration testing
• Role-based access controls for our team
• Automatic session expiry and secure token handling

6. Your Rights & Choices

Depending on your location, you may have the following rights:

To exercise these rights, please contact us at privacy@studylens.app. We will respond within 30 days.

Account Controls

• Profile Settings: Update your information in Settings → Profile
• Notification Preferences: Manage emails in Settings → Notifications
• Delete Account: Settings → Account → Delete Account
• Export Data: Settings → Privacy → Download My Data

7. Cookies & Tracking

We use cookies and similar technologies for:

You can manage cookies through your browser settings. Note that disabling essential cookies may affect functionality.

8. Children's Privacy

StudyLens is designed for students of all ages. However, we take special care with younger users:

• Under 13 (COPPA): Children under 13 should use StudyLens with parental consent. We do not knowingly collect personal information from children under 13 without parental consent.
• Under 16 (GDPR): In the EU, children under 16 require parental consent to create an account.
• Student Data: We do not sell student data or use it for behavioral advertising.

If you believe we have collected information from a child without proper consent, please contact us immediately at privacy@studylens.app.

9. International Data Transfers

StudyLens operates globally. Your data may be processed in:

• United States (Vercel, Stripe, Google)
• European Union (some infrastructure)

We use Standard Contractual Clauses and other safeguards to protect data transferred outside your country. For EU users, we comply with GDPR requirements for international transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes:

• We will update the "Last Updated" date
• We will notify you via email or in-app notification
• For material changes, we may ask for your consent again

11. Contact Us

If you have questions about this Privacy Policy or our data practices: