Privacy Policy

1. Introduction

GeniusPal ("we", "us", "our") provides an AI-powered study tool that turns the notes, PDFs, and documents you upload into practice questions you can study as a quiz, as flashcards, or as written active recall. This Privacy Policy explains what we collect, why, and the choices you have. The service is operated by GeniusPal.

2. Information we collect

Account information: your email address, and (if you sign in with Google) the name and basic profile details Google shares with us.

Content you upload: the files you submit, including any past exam or practice paper you upload as an exam style, and the study sets we generate from them.

Usage and device data: pages viewed, features used, approximate location derived from your IP address, and browser and device type, collected through product analytics.

Payment information: if you subscribe, our payment processor collects your billing details. We never see or store full card numbers.

3. How we use your information

To provide the service, including generating study sets from the content you upload.

To process payments and manage your subscription.

To measure and improve the product through analytics.

To communicate with you about your account, security, and important updates.

To keep the service secure and prevent abuse.

4. How we handle the content you upload

The content you upload is stored securely and used only to generate your study sets. It stays private to your account. We do not use your content to train any model, and we do not share it with other users. Please do not upload content you are not permitted to share.

If you upload a past exam or practice paper as an exam style, we read it for its shape: the topics it returns to, the kinds of question it asks, how demanding they are, and the command words it uses. We keep that summary and use it to steer the questions we generate for you. Nothing from the paper itself is copied into your study sets, and the summary is never a statement about what your own exam will ask. Deleting an exam style deletes the summary and the paper you uploaded for it.

5. How we share your information

We do not sell your personal information. We share data with the service providers ("subprocessors") listed below, who process it only to deliver their part of the service. We may also disclose information where required to comply with the law or to protect our rights and users.

Service providers we use

• AI processing provider: Generates study sets from the content you upload, and reads any past paper you upload as an exam style.
• Stripe: Payment processing for paid plans.
• PostHog: Product analytics.
• Cloudflare R2: Stores the files you upload.
• Google: Optional sign-in (OAuth).
• Resend: Sends login codes and account emails.
• Neon: Database hosting.

6. Cookies and analytics

We use strictly necessary cookies to keep you signed in, and product analytics to understand how the service is used. You can control non-essential cookies through your browser settings; where the law requires it, we ask for your consent first.

7. Data retention

We keep your account and content for as long as your account is active. You can delete study sets and exam styles at any time, and deleting an exam style also deletes the past paper you uploaded for it. Deleting your account removes your personal data within a reasonable period, except where we must retain records to meet legal or accounting obligations.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing (for example under the GDPR or the CCPA). To exercise these rights, email us at shannon@geniuspal.app.

9. Children's privacy

GeniusPal is not directed to children under 13, and you must be old enough to consent to this policy in your country (16 across much of the EU). If you believe a child has provided us personal data without appropriate consent, contact us and we will delete it.

10. Data security

We use industry-standard measures (encryption in transit, access controls, and reputable infrastructure providers) to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. International transfers

We and our providers may process your data in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you.

13. Contact us

Questions about this policy or your data? Email us at shannon@geniuspal.app.