Privacy Policy

1. Introduction

Welcome to Learning Clarity ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application — available on the web, Android, and iOS — and related services (collectively, the "Service"). Please read this policy carefully. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account and complete onboarding, we collect:

• Email address — used for authentication, communication, and account recovery.
• Password — securely hashed; we never store or have access to your plaintext password.
• Full name — used for personalization and display within the Service.
• Date of birth — used to determine your age for eligibility verification, theme personalization, and content adaptation.
• Gender — collected during onboarding; you may select "prefer not to say."
• Preferred language — selected during onboarding to localize the interface and AI-generated content.

2.2 Learning Data

As you use the Service, we collect data generated through your learning activities:

• Topics and courses you create, including uploaded educational materials (e.g., PDFs) and text descriptions.
• Sub-topic selections and learning progress.
• Quiz attempts, scores, and performance data.
• Explain Mode progress and knowledge check responses.
• Learning streaks and last-activity timestamps.
• Content shared with other users via the Sharing feature.

2.3 Support Inquiries

When you contact us via the in-app Contact Us form, we collect:

• Full name and email address — to identify you and respond to your inquiry.
• Subject category — the nature of your request (e.g., account support, billing, privacy).
• Message content — the details of your inquiry.

Support communications are forwarded to our support team and are retained solely for resolving your inquiry.

2.4 Payment Information

Credit purchases are processed through Stripe, our third-party payment processor. We do not store your credit card number, CVV, or full payment card details. We retain transaction records including purchase amounts, credit quantities, currency, and Stripe transaction identifiers for accounting and support purposes.

2.5 Technical and Usage Data

• Cookies: We use a single functional cookie to persist your sidebar layout preference. Advertising measurement services (TikTok Pixel and Google Ads) may also set cookies when you consent to analytics.
• Local storage: Your cookie-consent preference is stored in your browser's local storage.
• Session storage: Temporary data such as OAuth authentication state and quiz session tokens are stored in your browser's session storage and automatically cleared when you close your browser.
• Advertising events: With your consent, we send conversion events (e.g., registration, purchases) to TikTok and Google Ads. These events may include a hashed representation of your email address for attribution purposes.

2.6 Third-Party Authentication Data

If you sign in using Google or Microsoft, we receive basic profile information (such as your email address and name) from these providers. We do not receive or store your passwords from these services.

2.7 Device Permissions (Mobile App)

The mobile version of Learning Clarity may request the following device permission:

• Camera: Used to capture documents or images for upload as learning materials. We do not access your camera without your explicit action (e.g., tapping a "Take Photo" button), and captured images are processed solely to generate your learning content.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Personalize your experience, including age-adaptive theming based on your date of birth and language localization.
• Generate AI-powered educational content tailored to your topics and uploaded materials.
• Process credit purchases and manage your credit balance.
• Track your learning progress and display quiz history, performance analytics, and learning streaks.
• Enable the Supervision feature, allowing authorized supervisors to view your learning progress.
• Facilitate content sharing between users via the Sharing feature.
• Respond to your support inquiries submitted via the Contact Us form.
• Communicate with you about your account, including password resets and email confirmations.
• Measure advertising campaign effectiveness (with your consent) using TikTok Pixel and Google Ads conversion tracking.
• Protect against unauthorized access and abuse.

4. Third-Party Services

We rely on the following third-party services to operate the platform:

• Supabase — provides authentication, database storage, file storage, and serverless functions for our backend infrastructure.
• OpenAI — powers AI-generated educational content. When you create topics or use learning features, your uploaded materials and text descriptions are sent to OpenAI's API for processing. OpenAI's use of this data is governed by their own privacy policy.
• Stripe — handles payment processing for credit purchases. Stripe's handling of your payment data is governed by the Stripe Privacy Policy.
• Google and Microsoft — provide OAuth authentication services. Only basic profile data (email, name) is shared with us during sign-in.
• TikTok — we use TikTok Pixel and TikTok Events API to measure advertising effectiveness. With your consent, TikTok may receive conversion events and a hashed version of your email address. TikTok's data practices are governed by the TikTok Privacy Policy.
• Google Ads — we use Google Ads conversion tracking (via Google Tag / gtag.js) to measure the effectiveness of our advertising campaigns. With your consent, Google may receive conversion events from us. Google's data practices are governed by the Google Privacy Policy.

Visualization libraries (DevExtreme, Recharts, Mafs) used within the Service run entirely in your browser and do not transmit your data to external servers.

5. Data Storage and Security

We implement industry-standard security measures to protect your data:

• All data is stored in our Supabase-hosted infrastructure with Row-Level Security (RLS) enabled on all database tables, ensuring users can only access their own data.
• API communications are secured with JWT (JSON Web Token) authentication.
• Payment webhook events are verified using Stripe signature verification to prevent tampering.
• All data in transit is encrypted via HTTPS/TLS.
• Passwords are cryptographically hashed and never stored in plaintext.
• Uploaded files are stored in access-controlled Supabase Storage buckets and are not publicly accessible.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Cookies, Local Storage, and Tracking

• Functional cookie: A single cookie that remembers whether your sidebar is open or closed. This is essential to the user experience and does not track you.
• Consent preference (local storage): Your choice to accept or decline analytics cookies is saved in your browser's local storage under the key cookieConsent. No advertising scripts are loaded if you decline.
• Session storage: Temporary authentication state data and quiz session tokens are stored in session storage and cleared when you close your browser.
• TikTok Pixel (advertising, consent-gated): With your consent, TikTok Pixel and TikTok Events API measure the effectiveness of our advertising. You can opt out via TikTok's Privacy Settings.
• Google Ads (advertising, consent-gated): With your consent, Google Ads conversion tags (gtag.js) fire when you complete key actions such as account registration or a credit purchase. No Google Ads scripts are loaded if you decline.

7. Children's Privacy

Learning Clarity is not intended for children under 15. We collect date of birth during onboarding to verify eligibility for the Service and to provide age-appropriate content presentation and visual theming for eligible users.

We do not knowingly collect personal information from children under 15. If we learn that a child under 15 has created an account or provided personal information to us, we will delete the account and associated personal data, subject to any legal obligations that require temporary retention.

The Supervision feature allows parents, guardians, or educators to monitor a learner's progress, quiz scores, and activity for eligible users where such access has been properly authorized.

If you believe a child under 15 has created an account or submitted personal information through the Service, please contact us immediately at privacy@learningclarity.com so we can remove the account and associated data.

8. Data Retention

• Account and profile data is retained for as long as your account is active.
• Learning data (topics, quiz results, progress, streaks) is retained to provide continuous progress tracking.
• Payment and transaction records are retained as required by applicable tax and accounting laws.
• Support inquiry data is retained for a reasonable period after resolution to maintain a support history.
• Upon account deletion, your personal data will be permanently removed from our systems, subject to legal retention obligations (e.g., financial records).

9. Your Rights

Depending on your jurisdiction (including rights under GDPR for European Economic Area residents and CCPA for California residents), you may have the following rights regarding your personal data:

• Access: View your personal information through your Profile screen within the Service. To request a full copy of all data we hold about you, contact us at privacy@learningclarity.com.
• Correction: Update your name, gender, language preference, and other profile information at any time via your Profile screen.
• Deletion: You can permanently delete your account and all associated personal data directly from within the app via Profile → Delete Account. Deletion is immediate and irreversible — all your personal data, learning content, and uploaded materials are permanently removed from our systems upon confirmation, subject to legal retention obligations (e.g., financial records). You may also request deletion by contacting us at privacy@learningclarity.com.
• Data portability: Request a machine-readable copy of your personal data by contacting us.
• Withdraw consent: You may withdraw your consent to advertising cookies at any time by declining via the cookie consent banner. No advertising scripts will load after withdrawal.
• Opt out of sale (CCPA): We do not sell your personal data to third parties.

To exercise any of these rights, contact us at privacy@learningclarity.com. We will respond within 30 days of receiving your request.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by in-app notification or email. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, our data practices, or to exercise your data rights, please contact us:

Learning Clarity
Email: privacy@learningclarity.com

You may also reach us via the Contact Us form within the app and select the "Privacy & Data" category.