How your data is handled

Everything is scoped to your account, shared library, or organization role:

• Uploaded files, photos, links, lecture recordings, and searchable extracted text.
• Questions, answers, study guides, quiz scores, flashcards, folders, review cards, and Pip chats.
• Organization members, cohorts, assigned materials, notes, quizzes, scores, and audit logs.
• Email address and billing status, never full card numbers.

We do not sell data, run ads, or use tracking cookies. Essential cookies keep you signed in and remember appearance preferences. Vercel Web Analytics and Speed Insights collect aggregate traffic and performance measurements so we can monitor reliability.

• Supabase hosts the database, storage, and authentication.
• Vercel hosts the application and performance analytics.
• AI providers process relevant passages transiently to generate answers, guides, quizzes, OCR, transcriptions, embeddings, folder suggestions, and Pip replies.
• Jina AI (r.jina.ai) extracts readable text from web pages you add to your library by URL.
• Stripe / PayFast handle payments.
• Cloudflare Turnstile, Resend, and Sentry support security, email, and error monitoring.

Some providers process data outside South Africa. Where information crosses borders we rely on those providers' contractual and technical safeguards, as POPIA allows.

You can access, correct, export, or delete your personal information. Account - Delete account permanently removes personal uploads, questions, guides, quiz history, and the account itself. For questions or complaints, contact Voterm, our Information Officer, at isaacgumbi@gmail.com. You may also lodge a complaint with the Information Regulator of South Africa.

Shared-library insights are aggregate-only. Organization educators can be scoped to assigned cohorts so they see the learners, materials, quiz attempts, and progress relevant to those cohorts. Per-student private library surveillance is deliberately not built.

Organization data is separate from personal study data. Owners/admins can manage members, roles, cohorts, branding, materials, notes, quizzes, assignments, and organization-scoped progress. Educators are limited by role and cohort assignment where configured.

Study Grounded is a study tool, not a social platform: there is no public profile, no messaging, no ads, and answers come from uploaded or assigned material. Learners under 18 should use it with parent or guardian consent.

Answers cite the exact passages they came from, grounding refuses unsupported questions, and Tutor mode guides learners with hints before revealing answers.

Public crawlers and useful agents may read public pages and public agent metadata. Private study data, ingestion, OCR, quizzes, summaries, guides, and AI answers require authentication plus quota, payment, or API-key checks. Paid bot or agent access is separate from student subscriptions and never overrides user consent.

See Bots, Agents & API for the machine-readable policy and commercial access path.