Learnora privacy notice

Effective September 4, 2026. This notice explains, in plain English, what information Learnora collects, why, who it's shared with, and the rights you have over it. Questions go to support@learnora.app.

What we collect

Account information (name, email, date of birth for the age check, and a hashed password — we never see it in plain text); the study content you create or upload (tasks, exams, notes, materials, flashcards, quizzes, and quiz answers); and service data needed to keep the app secure and working (session logs, timer presets, sign-in timestamps, and basic technical data like IP address and browser type).

AI providers we use

Learnora's AI features — the study assistant, flashcard and quiz generation, study sessions and forecasting — are powered by third-party AI models. Most requests are answered by Google (Gemini) and Anthropic (Claude). When those are unavailable or out of capacity, a request may instead be answered by one of these backup providers: Groq, Cloudflare (Workers AI), GitHub (Microsoft) Models, OpenRouter, NVIDIA, Radox AI and OpenAI. Radox AI is a gateway: it forwards each request to the company that hosts the model, which it does not name in its policy. It says it does not store prompt or reply content or use it for training, though a fragment of a failed request can appear in its error logs. Its terms require users to be 16 or older, so Learnora does not send requests to Radox for anyone under 16. Learnora only ever sends requests to the providers listed here, and nothing is sent unless you actively use an AI feature.

Learnora does not use your data to train AI models and does not sell it. Each provider processes requests under its own API terms, which govern how long it keeps a request and whether it may use it to improve its services. Avoid pasting sensitive personal information unrelated to your studies into AI prompts or uploads, since it's transmitted the same as any other prompt content.

How we use your information

To create and secure your account, provide the features you ask for, respond to support requests, detect and prevent abuse (like rate-limiting AI requests), and keep the service reliable. We do not sell your study content, notes, or personal information to advertisers or data brokers.

Data retention

We keep your account and study data while your account is active, so it's there the next time you sign in. We don't delete data for inactivity alone — if you want it gone, delete your account (below). We use Sentry for error monitoring; error reports are scrubbed of tokens and credentials before they're sent, and are retained separately from your study content under Sentry's own limits.

Account deletion

You can permanently delete your account and all associated data at any time from Settings → Danger Zone. Your live data is deleted immediately once the request completes. Copies that exist in routine database backups or server logs are automatically purged within 30 days. This is the right to erasure under GDPR Article 17, and it applies to every account, not only EU or UK residents. Deletion is permanent and cannot be undone.

Cookies & local storage

We use your browser's local storage to keep you signed in and remember preferences like your theme. We don't use third-party advertising cookies or cross-site tracking.

Data security

Your data is stored with Supabase using row-level security, so only you (and, for narrow features like AI tools, code acting on your explicit request) can read your own data. Passwords are hashed, and traffic between your browser and our servers is encrypted in transit.

Your rights (GDPR — EU/UK users)

If you're in the European Economic Area or the United Kingdom, GDPR (and UK GDPR) gives you the right to access, correct, delete, and receive a portable copy of your personal data, to restrict or object to certain processing, and to withdraw consent you've given us (for example, the AI-provider consent you give at sign-up or the first time you use an AI feature) at any time — in Settings ▸ Privacy, or by contacting us. Email support@learnora.app and we'll respond within one month.

Your rights (CCPA — California users)

If you're a California resident, the CCPA (as amended by the CPRA) gives you the right to know what personal information we collect and disclose, to request its deletion or correction, and to not be discriminated against for exercising these rights. We don't sell or share personal information, so there's nothing to opt out of. Email support@learnora.app to exercise these rights.

Children's privacy

Learnora requires users to be at least 13 years old (see our terms of service). We do not knowingly collect personal information from children under 13; if you believe a child under 13 has created an account, contact us and we will delete it.

Changes to this notice

We may update this notice as the product changes. The current version is always published at this address, with its effective date at the top. The terms of service provide additional information about acceptable use, user content, and the limits of the service.