Privacy Policy

1. Introduction

StemyAI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered educational platform ("Service"). We comply with applicable data protection regulations including GDPR and CCPA where applicable.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and authentication credentials. If you use Google Sign-In, we receive your name, email, and profile picture from Google.

Profile Information: During onboarding, you may provide your education level, subjects of study, learning goals, and weekly study time.

Educational Content: Assignments, rubrics, teacher feedback, and other materials you upload for analysis.

Usage Data: We collect information about how you use the Service, including features accessed, study session duration, AI interactions, and timestamps.

Device Information: Browser type, IP address (for security and rate limiting only), and general location (country level).

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Personalize your learning experience based on your profile and study patterns
• Generate AI-powered analysis, lessons, and recommendations
• Track your learning progress and generate reports
• Send you notifications and email digests (based on your settings)
• Ensure security, prevent abuse, and enforce our Terms of Service
• Respond to your inquiries and support requests

4. Third-Party Services

We use the following third-party services to operate the platform:

• Firebase (Google): Authentication and database storage. Subject to Google's Privacy Policy.
• OpenAI: AI processing for tutoring, analysis, and content generation. Your prompts are sent to OpenAI for processing. Subject to OpenAI's Privacy Policy. We do not opt into OpenAI using your data for model training.
• Cloudinary: File storage for uploaded documents.

We do not sell your personal information to any third party. We do not use your data for advertising.

5. Data Storage and Security

Your data is stored in Firebase (Google Cloud) with encryption at rest and in transit. We implement security measures including:

• Authentication via Firebase Auth with email verification
• All API requests require valid authentication tokens
• Rate limiting to prevent abuse
• Security headers on all responses
• Request size limits to prevent denial-of-service
• CORS restrictions to authorized domains only

While we take reasonable measures to protect your data, no system is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law. Anonymized, aggregated data may be retained indefinitely for analytics purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Data Portability: Export your data in a machine-readable format (available in Settings)
• Opt-Out: Disable email notifications and anonymous statistics in Settings
• Withdraw Consent: You may withdraw consent at any time by deleting your account

To exercise these rights, contact us at support@stemyai.com.

8. Children's Privacy

The Service is designed for students of all ages, including minors. If you are under 13, you must have parental consent to use the Service. We do not knowingly collect personal information from children under 13 without parental consent. If we become aware that we have collected data from a child under 13 without parental consent, we will delete it promptly.

9. Cookies and Local Storage

We use browser local storage and session storage to maintain your authentication state and preferences. We do not use tracking cookies or third-party advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top of this page indicates the most recent revision.

11. Contact

For privacy-related inquiries, contact us at support@stemyai.com or through our Contact page.