Privacy Policy

Last updated: June 2026

1. Who We Are

LearnSage (ABN pending) is an AI-powered study platform operated from Australia. For privacy inquiries, contact us at privacy@learnsage.app.

This policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Data We Collect

• Account information: email address, password (stored as a bcrypt hash — we never store your plain-text password)
• Study documents: PDFs, PPTX, DOCX files you upload to generate study content
• AI-generated study content: lessons, flashcards, quizzes, summaries, and mock exams generated from your documents
• Usage data: features used, API costs, timestamps — used to operate and improve the service
• Payment information: processed by Stripe — we never store card numbers or full payment details on our servers
• Chat history: conversations with the AI tutor, stored to provide continuity between sessions

3. Why We Collect It

• To provide the AI study service — generating content from your documents requires sending document content to our AI provider
• To process your subscription and payments via Stripe
• To send transactional emails (trial reminders, receipts, account notifications)
• To monitor service health and prevent abuse

4. How We Store Your Data

Your data is stored on Railway cloud infrastructure in isolated per-user directories and transmitted securely via TLS encryption. We retain your data for the duration of your active account. Upon receiving a deletion request, we process the removal of your data within 30 days.

5. Third Parties Who Receive Your Data

• Anthropic: Your document content is sent to Anthropic's API to generate AI study content. Anthropic processes this data under their privacy policy. We do not send personally identifiable information to Anthropic beyond what appears in your study documents.
• Stripe: Handles all payment processing. Card numbers and full billing details are stored by Stripe, not by LearnSage.
• Resend: Delivers transactional emails (trial reminders, account notifications). We share only your email address.

We never sell your personal data to third parties. Ever.

6. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your account and all associated data

You can request account deletion by emailing privacy@learnsage.app. We will process your request within 30 days.

7. Cookies & Local Storage

LearnSage uses JWT authentication tokens with a 7-day expiry, stored in your browser's localStorage. An automatic 30-minute inactivity timeout clears your session for added security. We do not use tracking cookies or analytics cookies. No third-party advertising cookies are used.

8. Changes to This Policy

We may update this policy from time to time. We will update the "Last updated" date at the top of this page. For material changes, we will notify you by email. Continued use of LearnSage after notification constitutes acceptance of the updated policy.

9. Contact

For privacy questions, access requests, or complaints: privacy@learnsage.app

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).