Privacy Policy

1. Privacy principles

We try to collect the least personal information we need to run RD Study Lab, secure the product, support users, and process purchases. We also try to avoid keeping identifying information longer than needed.

2. Information we collect

Depending on how you use the service, we may collect:

• Account information such as your email address and account status.
• Study data you create or generate, such as decks, flashcards, study plans, bookmarks, and results.
• Usage summaries such as daily counts of questions answered, cards reviewed, and study time.
• Purchase metadata such as plan tier and Stripe customer, payment, or subscription reference IDs.
• Support or feedback information that you submit to us.
• Limited technical data needed for authentication, security, and abuse prevention.

3. Browser storage, cookies, and local storage

We use authentication cookies through Supabase and a small amount of local storage for product features such as theme preference and in-progress review session state. We do not currently use advertising or remarketing cookies on the site.

See our Cookie Notice for more detail.

4. Payments

Payments are handled by Stripe. We do not store full card numbers, card security codes, or full payment credentials on our servers. We do keep limited billing-related records we need to confirm access, support purchases, prevent fraud, and maintain basic business records.

5. AI features

If you use AI features, the prompts, questions, answers, and related study context needed to generate a response may be sent to our AI provider through OpenRouter. Do not submit sensitive personal health information or other highly sensitive personal information into AI features.

6. How we use information

We use personal information to provide the service, authenticate users, personalize study tools, process purchases, provide support, investigate abuse, improve reliability, and comply with legal obligations.

7. Sharing and service providers

We share information only with providers needed to operate the service, such as hosting and database providers, authentication infrastructure, payment processing, and AI infrastructure when you choose AI features. We do not sell personal information.

8. Retention and minimization

We try to keep identifying operational data short-lived and keep long-term records as limited as possible. For example, study activity is stored in aggregated daily totals rather than raw clickstream logs, and we avoid storing unnecessary identifying metadata in routine feedback capture.

We may keep information while your account is active and for a limited period afterward when needed for security, dispute handling, fraud prevention, bookkeeping, tax, or legal compliance. When we no longer need personal information, we aim to delete it or de-identify it.

9. Security

We use reasonable technical and organizational safeguards designed to protect account access and stored data. No service can promise absolute security, and you should also protect your own device, password, and account credentials.

10. Your choices and requests

You can request account deletion or ask privacy questions through our support page. Some information may be retained where required for legitimate business or legal reasons.

11. Children

RD Study Lab is intended for exam preparation and adult or post-secondary learners. It is not directed to young children.

12. Updates

We may update this Privacy Policy as the product changes. Material updates will be reflected by changing the date at the top of this page.