Privacy Policy

1. Introduction

PharmaStudyAI ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered study companion service.

We encourage you to review this policy to understand how we protect your information and support your learning journey.

2. Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when registering for the Service:

• Email address (for account creation and authentication)
• Encrypted password (for credential-based login)
• Google account information (if using Google Sign-In)
• Profile preferences (exam type, province, study stage)
• Payment information (processed directly by Stripe - we never see your card details)

AI Interaction Data

When you use our AI study companion, we collect:

• Questions you ask the AI
• Study topics you select
• Practice test responses
• Study materials you generate or save
• Interaction patterns and preferences

Automatically Collected Information

We collect minimal technical information to ensure the Service works properly:

• Browser type and version (for compatibility)
• Anonymous usage statistics via Vercel Analytics (page views, feature usage)
• Performance metrics via Vercel Speed Insights (page load times)
• Session information (to keep you logged in)
• Theme preference (light/dark mode)

3. What We DON'T Collect

We believe in transparent data practices. Here's what we don't do:

• We don't use tracking pixels or invasive analytics
• We don't serve ads or use advertising cookies
• We never sell or share your personal data
• We don't track your location
• Voice features only process text transcripts, not recordings
• Your study data remains private to you

4. How We Use Your Information

We use the information we collect to:

• Provide and maintain our AI study companion service
• Personalize your learning experience and study recommendations
• Process your transactions and manage your subscription
• Send you important updates about the Service
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve our Service
• Detect, prevent, and address technical issues
• Comply with legal obligations

5. AI and Data Processing

We implement appropriate technical and organizational measures to ensure your data is processed securely and in accordance with this policy.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following situations:

• Stripe: For payment processing (we never see your card details)
• Vercel: Our hosting provider (anonymous analytics only)
• OpenAI: AI responses are generated via their API (study content only, no personal info)
• Resend: For sending transactional emails (password resets, magic links)
• Legal Requirements: If required by law or valid legal process

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection
• Secure data storage with reputable cloud providers

We continuously monitor and improve our security practices to keep your data safe.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us at privacy@pharmastudyai.com.

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide you with our Service
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain records for business purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, unless we are required to retain it for legal purposes.

10. Cookie Policy

We use cookies and similar tracking technologies to track activity on our Service and store certain information.

Types of Cookies We Use

• NextAuth Session Cookies: Essential for authentication and keeping you logged in (authjs.session-token)
• CSRF Protection Cookies: Security cookies to prevent cross-site request forgery attacks
• Theme Preference Cookie: Remembers your light/dark theme preference
• Vercel Analytics: Anonymous usage data to help us improve the service (no personal data collected)

Managing Cookies

Most browsers allow you to control cookies through their settings. You can delete cookies or block them entirely. However, blocking authentication cookies will prevent you from staying logged in.

11. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

13. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification for significant changes

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: