Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and profile picture (via Google or GitHub OAuth)
• Uploaded Content: PDFs, YouTube URLs, and text you submit for processing
• Generated Content: Notes, flashcards, quizzes, documents, and chat messages created through the Service
• Usage Data: AI processing metrics (tokens used, processing duration, feature usage) for billing and optimization
• Analytics: Page views, feature interactions, and session data (via PostHog)

2. How We Use Your Information

• To provide and maintain the Service, including AI content generation
• To process your uploaded content and generate study materials
• To track usage for fair use enforcement and billing
• To improve the Service based on usage patterns and feedback
• To communicate with you about your account, billing, and service updates
• To detect and prevent fraud, abuse, or security incidents

3. AI Processing

Your uploaded content is processed using Google's Gemini AI models to generate study materials. Content is sent to Google's API for processing and is subject to Google's data handling policies. We do not use your content to train AI models.

All AI processing is logged in our usage tracking system, which records the model used, tokens consumed, processing duration, and associated feature — but not the actual content of your documents.

4. Data Storage

Your data is stored securely using the following services:

• Supabase: Database (PostgreSQL with Row Level Security) and file storage for uploaded/generated content
• Vercel: Application hosting with edge caching
• PostHog: Analytics data (anonymized usage patterns)

All data is encrypted in transit (TLS 1.3) and at rest. Row Level Security ensures that users can only access their own data.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Google (Gemini API): Your uploaded content is sent for AI processing
• Supabase: Infrastructure provider for database and storage
• Lemon Squeezy: Payment processing for subscriptions
• PostHog: Analytics (no personal content is shared)
• Sentry: Error monitoring (no personal content is shared)

6. Cookies & Tracking

We use essential cookies for authentication (NextAuth session tokens) and analytics cookies (PostHog) to understand usage patterns. You can disable non-essential cookies in your browser settings, though this may affect some features.

7. Data Retention

Your uploaded content and generated study materials are retained as long as your account is active. You can delete individual documents or your entire account at any time. Upon account deletion, your data will be permanently removed within 30 days. AI usage logs are retained for billing purposes for up to 12 months after account deletion.

8. Your Rights

You have the right to:

• Access your personal data and uploaded content
• Delete your account and all associated data
• Export your generated study materials
• Opt out of non-essential analytics tracking
• Request correction of inaccurate personal information

9. Children's Privacy

QuixMe is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last updated" date. Your continued use of the Service constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries, contact us at privacy@quixme.com.