Privacy Policy

• We collect your account details and the academic information you put in — syllabi, courses, grades, tasks, notes and study sessions.
• We do not use advertising or analytics trackers. There are no third-party pixels, no ad networks, and no cross-site tracking on this service.
• We do not sell or share your personal information for money or for cross-context behavioural advertising.
• AI features send a trimmed, derived summary of your academic situation to our AI provider so a model can answer. It is not used to train third-party models.
• You can export everything yourself, and ask to delete it — deletion runs after a 30-day window you can cancel in.

StudentOS AI is operated by [TODO: Legal entity name] (“we”, “us”). We are the controller of the personal information described in this policy.

Postal address: [TODO: Street, City, State ZIP, USA]. Privacy enquiries: [TODO: [email protected]].

Almost everything here is information you enter or upload yourself. We do not buy personal information from data brokers.

• To run the service. Building your gradebook, projecting grades, ranking tasks, scheduling study time, measuring topic mastery and rendering every screen.
• To power AI features. Parsing a syllabus you upload, answering tutor and coach questions, and generating practice quizzes.
• To keep the service secure and to detect and investigate abuse, fraud or technical faults.
• To account for usage against workspace quotas, and to bill any paid plan you choose in future.
• To contact you about your account, security matters, and material changes to these policies. In particular we email you when a deletion of your account is requested, cancelled, about to happen, and once it is done — the first of those is a security notice, and is how you would find out if someone else asked to delete your account.

We do not use your academic content to build advertising profiles, and we do not make automated decisions about you that produce legal or similarly significant effects.

AI requests are sent from our servers to OpenRouter, which routes them to the underlying model provider. Your browser never talks to a model provider directly and never holds an API key.

• What is sent. For coaching, a trimmed summary of derived conclusions — grades as percentages and letters, priorities, risk flags, stated availability and preferences — rather than your raw records. For syllabus parsing, the text extracted from the document you uploaded. For tutoring and quizzes, the relevant course’s topics and reference material, plus your question.
• What is not sent. Your password, your email address, and documents from courses other than the one you are working in.
• Training. Every request we send carries an explicit instruction restricting it to providers that do not collect user data, so your work is not routed to a provider that may train on it. That restriction is set in our code on every call, not left to an account setting. Providers may still retain requests briefly for abuse monitoring; their own policies govern that, and we cannot extend guarantees on their behalf.
• Institutional workspaces may supply their own provider key, in which case requests are billed to and visible within that organisation’s provider account.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We disclose it only to the service providers below, each of which processes it on our instructions.

We may also disclose information where we are legally required to, to enforce our Terms, or to protect the rights and safety of our users or the public. If the business is acquired or merged, your information may transfer as part of that transaction; we will give notice before it becomes subject to a materially different policy.

• Account and academic data: for as long as your account is open.
• When you ask to delete your account: we schedule it for 30 days out and change nothing in the meantime. You can cancel from Settings at any point in those 30 days, and the account carries on exactly as before. On the scheduled date your uploaded files are removed, then your account, and every record attached to it goes with it — permanently, with no soft-deleted copy.
• Why the delay: it protects the two things an instant delete cannot — changing your mind, and someone else getting into your account and deleting it.
• Deleting a conversation is a real delete. Removing an AI thread removes its messages. There is no hidden soft-delete copy.
• Server logs: retained for a limited period for security and debugging, then discarded.
• Backups: deleted records may persist in encrypted backups for a short rolling window before those backups expire.

Traffic is encrypted in transit. Every table carries both a workspace identifier and a user identifier, and database row-level security checks both on every query, so one account cannot read another’s records even if a workspace identifier were compromised. Uploaded syllabi are restricted to the uploading account’s own folder.

No system is perfectly secure. Use a strong, unique password, and tell us promptly at [TODO: [email protected]] if you believe your account has been accessed without your permission.

Depending on where you live, you may have some or all of the following rights. We extend the core ones to every user regardless of location.

• Access and portability — get a copy of the personal information we hold about you.
• Correction — fix anything inaccurate. Most of it you can edit directly in the app.
• Deletion — delete your account and its contents.
• Opt out of sale or sharing — there is nothing to opt out of, because we do neither.
• Non-discrimination — we will not degrade your service for exercising any of these rights.

Export and deletion are self-serve. Both are in Settings, under “Your data” — you do not need to ask us. Export is immediate; deletion is scheduled 30 days ahead and is cancellable from the same screen for the whole of that period.

For anything else, email [TODO: [email protected]] from the address on your account. We respond within 45 days and will tell you if we need longer. An authorised agent may act for you with written proof.

StudentOS AI is built for college and university students and is not directed at children under 13. We do not knowingly collect personal information from anyone under 13.

Some students — dual-enrolment and first-year students in particular — are under 18. If you are under 18, you may use StudentOS AI only with the agreement of a parent or guardian, who is bound by our Terms on your behalf. If you believe a child under 13 has given us personal information, contact [TODO: [email protected]] and we will delete it.

You enter your own grades; we do not receive them from your institution. StudentOS AI is a tool you use as a student, not a system of record for your school, and nothing here is an official transcript.

If your institution licenses StudentOS AI for you, we act as its service provider for the data it directs us to process, that agreement governs, and we handle any applicable education-records obligations under it.

We operate from the United States and your information is processed there. Our AI provider may route a request to a model provider operating in another country. If you are outside the United States, you are consenting to that transfer by using the service.

We set only the cookies needed to keep you signed in, and we use no analytics or advertising trackers. The Cookie Policy lists every one and explains why there is no consent banner.

We will update the “Last updated” date above whenever this policy changes, and will give you notice in the app or by email before a material change takes effect. Continuing to use StudentOS AI after that means you accept the revised policy.

Privacy questions and data-rights requests: [TODO: [email protected]]. Anything else: our contact page.