Privacy Policy

Data Collection & Storage

StudyCraft is a local-first application that prioritizes your privacy.

What We Collect

User-Created Content (Local Storage Only):

  • Your notes, study guides, and practice tests are stored exclusively in your browser using IndexedDB
  • No user content is transmitted to our servers or stored in any database
  • You maintain complete control over your data

AI Feature Usage:

  • When you use AI-powered features (study guide generation, concept explanations, practice test generation), only the specific content you request to be processed is sent to our AI provider
  • We use Vercel AI Gateway with OpenAI models (gpt-5-nano)
  • No personally identifiable information (PII) is sent to AI services
  • AI-generated content is stored locally in your browser, not on our servers

Data Retention

  • All user data persists in your browser's IndexedDB until you manually delete it
  • Clearing your browser data will remove all your notes and study materials
  • We recommend regular backups of important content using our export features

Third-Party Services

AI Provider (Vercel AI Gateway / OpenAI):

  • Purpose: Generate study guides, explanations, and practice questions
  • Data Sent: Only note content you explicitly request to process
  • Data Not Sent: Personal information, browsing history, usage patterns
  • Processing: Transient processing only, no long-term storage by AI provider

Analytics (Ahrefs Web Analytics):

  • Purpose: Understand site usage and improve user experience
  • Data Collected: Page views, referrer information, general geographic location
  • No Personal Data: We do not track individual users or collect PII

Your Rights

  • Access: All your data is in your browser - use browser DevTools to inspect IndexedDB
  • Deletion: Clear your browser data or use our in-app deletion features
  • Export: Use our export features to download your content
  • Portability: Export data in standard formats (PDF, Markdown, JSON)

Security

  • All data storage is local to your device
  • HTTPS encryption for all network communications
  • No user accounts or authentication system
  • No server-side database of user content

Last Updated: November 3, 2025