Privacy Notice

1. Who we are

Edvanta is operated by Bruce Myers (Texas, USA), who is the data controller for the personal data described in this notice. This notice is maintained by Edvanta and explains what we collect, why, who we share it with and how long we keep it.

2. What we collect and why

• Account data — your username, password (stored hashed), and an email address only if you choose to add one. Used to create and secure your account. Legal basis: performance of our contract with you.
• Profile and onboarding data — grade, gender (optional, including 'prefer not to say'), favourite subject, hobbies and your answers to the learning diagnostic. Used to personalise difficulty, tone and study suggestions. Legal basis: performance of our contract with you.
• Study material you upload — photos of notes and homework, audio recordings, typed text, project and unit names, teacher profiles you write, and the AI-generated podcasts, PDFs, tests and plans derived from them. Used to provide the service. Legal basis: performance of our contract with you.
• Usage data — study sessions, streaks, focus timer activity, test attempts and skill results. Used to run streaks, progress tracking and adaptive difficulty. Legal basis: performance of our contract with you.
• Technical data — device identifiers, browser type, IP address and error logs. Used for security, fraud prevention, and diagnosing faults. Legal basis: our legitimate interest in keeping the service secure and working.
• Support messages — anything you send us. Used to answer you. Legal basis: legitimate interest in supporting our users.
• Subscription status — your plan, billing period and whether it is active. Used to unlock paid features. Legal basis: performance of our contract with you.

We do not sell your personal data, and we do not use your uploaded study material to train our own models.

3. AI processing

To generate transcriptions, podcasts, flashcards, tests, predictions and plans, the content you upload is sent to third-party AI model providers acting as our processors. They process it to return a result to you. Do not upload material you are not comfortable processing this way, and avoid uploading other people's sensitive personal information.

4. Who we share data with

• Hosting, database, storage and authentication providers that run the service on our behalf.
• AI model providers that process your uploads to generate study material.
• Stripe, our payment processor, for the sale of subscriptions, subscription management, payments and invoicing. Stripe collects your payment details directly — we never see or store your card number.
• Professional advisers such as legal and accounting, where needed.
• Authorities, where we are required to disclose by law.

5. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

6. Retention

We keep your account, study material and progress data for as long as your account is active. If you delete an item it is removed from the service. If you ask us to delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep records to meet legal, tax or accounting obligations. Inactive accounts and their material may be removed automatically.

7. Your rights

Depending on where you live, you have rights to access, correct, delete, restrict or object to our processing of your personal data, to receive a portable copy, and to withdraw consent where we rely on it. If you are in the UK or EEA you can also complain to your local supervisory authority. We respond to requests within one month.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit, per-user access rules on the database and private file storage, so that you can only reach your own material. No system is perfectly secure, so please use a strong, unique password.

9. Children

Edvanta is built for students aged 13 and older. Children under 13 may not create an account. If you are 13 to 17, you may use Edvanta only with a parent or guardian's permission, and a parent or guardian must make any purchase. If we learn we hold data for a child without appropriate consent, we will delete it.

10. Cookies and local storage

We use essential cookies and browser local storage only — to keep you signed in and remember preferences such as your light or dark theme. We do not use advertising cookies. You can clear this data in your browser settings, but you will be signed out.

11. Contact

To exercise your rights or ask about this notice, contact Edvanta through the support channel in the app. For billing or payment data handled by Stripe, see Stripe's privacy notice.