Privacy

• Your email address, from the one-time sign-in link, or from Google if you use “Continue with Google” (we receive your email address and basic profile, nothing else).
• The course files you upload, PDFs, Word documents, and photos of notes.
• The text extracted from those files, so we can generate study material from the pages you choose.
• The flashcards and quiz questions generated for you, and your study activity, which cards you marked known or again, which answers were right or wrong.
• Billing identifiers if you subscribe, your Stripe customer and subscription ids, the plan you are on, and your renewal date. We never see or store your card number.

We record five things you do, in our own database, so we can tell whether the product works: when you start a study session, when you finish one, when you reach a plan limit, when you open checkout, and when you upgrade. Each is a timestamp and a couple of numbers, never the contents of your files or your answers.

One thing does leave: this site runs the Meta Pixel. It tells Meta which pages you opened here, so we can tell whether our ads are working. It never receives your files, your answers, your study sets, or anything you typed into the product — only which page was viewed. Everything else stays in the same database that already holds your account, and nothing is sold.

To run the service you asked for: keeping you signed in, storing your files, generating study material from them, remembering your progress, and billing you if you choose a paid plan. That is the whole list.

StudySmart is built on a small number of services. Each one only receives what it needs:

• Supabase, sign-in, database, and file storage. Your files and data live in the European Union (Ireland).
• OpenAI, when you press Generate, the text from the pages you selected is sent to OpenAI to write your cards and questions. If you upload a photo, the image is sent so the text in it can be read. Only what you scope is sent, and it is used to answer that one request.
• Stripe, payments and subscription management. Your card details go straight to Stripe and never touch our servers.
• Vercel, hosting and serving the site.
• Google, only if you choose to sign in with Google.

Some of these providers operate outside the European Union and process data under the standard contractual clauses published by the European Commission.

Your files stay in your study set until you remove them. Pressing Remove deletes the file from storage and its record from the database, it is gone, not hidden.

There is no self-service account deletion button yet. Email adamboubdi1@gmail.com from your account address and everything, files, generated material, study history, and the account itself, is deleted within 30 days.

Two kinds: the ones that keep you signed in, and the one the Meta Pixel sets (_fbp) so Meta can recognise a returning visitor for advertising. The product events described above are tied to your account rather than to a cookie, and they are deleted with it. Any content blocker or your browser’s tracking protection will stop the pixel, and the product works exactly the same without it.

Under the GDPR you can ask for a copy of your data, correct it, have it deleted, take it elsewhere, or object to how it is handled. Email adamboubdi1@gmail.com and you will get an answer within a month. If you are unhappy with the response, you can complain to your national data protection authority, in France, the CNIL.

StudySmart is not intended for anyone under 16. If you believe a child has created an account, email us and we will delete it.

If this page changes in a way that affects you, the date at the top changes and, for anything significant, you get an email. Old versions are not quietly swapped out.