Privacy Policy — StudyPrompt AI

1. Who We Are

StudyPrompt AI is a mobile and web application operated by TechCom Systems LLC, a Pennsylvania limited liability company ("we," "us," or "our"). The iOS app and the Learning Portal at studypromptai.com are collectively referred to as the "Service."

Questions about this policy may be sent to privacy@studypromptai.com.

2. Information We Collect

We collect only the minimum information necessary to provide the Service:

Google email address — used as your account identifier when you sign in with Google.
Google OAuth access token — used to read and write files in your Google Drive on your behalf. It is carried in an encrypted session cookie and used for the duration of a request. We do not store it in our database, and we never request or keep a refresh token, so access ends when the token expires.
Session identifier — a randomly generated UUID that links your sign-in to your web portal session. Kept in an encrypted, HTTP-only cookie your browser sends back to us; the matching record in our database holds only the identifier, your email, your role and an expiry.
Theme preference — light or dark mode, stored in your browser's localStorage only. Never sent to our servers.

We do not collect your name, phone number, IP address, device identifiers, usage analytics, or any behavioral data.

3. How We Use Your Information

To authenticate you via Google Sign-In.
To sync your Study Packs to your Google Drive account.
To maintain your login session across devices.

We do not use your information for advertising, marketing, or any purpose beyond operating the Service.

4. Google API Services

StudyPrompt AI uses Google APIs to authenticate users and interact with Google Drive. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Scopes we request:

openid — Verify your Google identity.
email — Read your email address for use as an account identifier.
https://www.googleapis.com/auth/drive.file — Create, update, and read the Study Pack files the app itself creates in your Google Drive. Both the iOS app and the Web portal use this scope.

The drive.file scope grants access only to files StudyPrompt AI creates — never to any other content in your Drive. The Web portal reads those files directly from your Drive using your own Google sign-in; we do not keep a list of them, or any of their contents, on our servers. We have no technical ability to see, query, or read anything else in your Drive.

StudyPrompt AI requests Google Drive access solely to sync your Study Pack PDFs to your personal Drive storage and to display them in the Learning Portal. We do not access, read, or modify any files in your Drive that were not created by StudyPrompt AI.

StudyPrompt AI does not allow any humans to read your Google user data unless required to comply with applicable law or for security investigation purposes.

Google user data is not transferred to any third party except as necessary to provide the Service (e.g., storing your session in our database) or as required by law.

5. Data Storage

Neon — A PostgreSQL database hosted by Neon holds your session identifier, your email address, your role and an expiry date. It holds no credentials and no content of yours. Sessions expire automatically.
Your browser — An encrypted, HTTP-only session cookie holds your sign-in and your Google access token; it is cleared when you log out. Your theme preference is kept in localStorage and is never sent to us.
Google Drive — Your course material and Study Packs are stored in your own Google Drive account. StudyPrompt AI does not copy or retain any of that content on our servers.

We use one cookie, and only one: the encrypted session cookie described above, which is strictly necessary to keep you signed in. We use no advertising, tracking or analytics cookies of any kind.

6. Third-Party Services

We use the following third-party services to operate the Service:

Google — OAuth authentication and Google Drive API.
Neon — Database hosting for session management.
Vercel — Web hosting for the Learning Portal and anonymous traffic analytics.
Apple — iOS app distribution and in-app subscription processing.

We do not sell, rent, or share your personal information with any other third party.

7. Analytics

The Learning Portal uses Vercel Analytics to measure anonymous traffic — specifically page views, visitor counts, referrer URLs, approximate country/region, and device type. Vercel Analytics does not use cookies, does not collect personally identifiable information, and does not build behavioral profiles. Data is processed by Vercel Inc. in accordance with their Privacy Policy.

StudyPrompt AI does not use advertising networks, tracking pixels, or behavioral profiling tools of any kind.

8. Data Retention

Session records in our database expire automatically. You may request deletion of your data at any time by emailing privacy@studypromptai.com. We will respond within 30 days. Note that Study Packs stored in your own Google Drive are not controlled by us — you can delete them directly from Drive at any time.

9. Your Rights

GDPR (EU/EEA users): You have the right to access, rectify, erase, or port your personal data, and to object to or restrict processing. Contact us at privacy@studypromptai.com to exercise these rights.

CCPA (California residents): We do not sell personal information. You have the right to know what data we hold and to request its deletion.

10. Children

StudyPrompt AI is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us at privacy@studypromptai.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above and — for material changes — require you to re-accept before continuing to use the Service. We encourage you to review this page periodically.

12. Contact

For privacy-related questions or data deletion requests: privacy@studypromptai.com