Your privacy matters to us

1. Introduction

Savvo AI ("Savvo," "we," "us," or "our") operates the Savvo AI web application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your email address, name, and username.
• Study Materials: Documents, images, text, and URLs you upload or paste into the Service for AI processing.
• User-Generated Content: Answers to practice questions, chat messages, teach-back responses, and other content you create while using the Service.
• Payment Information: If you subscribe to a paid plan, our payment processor (Stripe) collects your payment details. We do not store your full credit card number on our servers.
• Communications: Feedback, support requests, and other messages you send to us.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, session duration, practice performance, and study activity patterns.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Cookies: We use essential cookies for authentication and session management. See Section 7 for details.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your study materials with AI to extract concepts, generate practice questions, and create personalized study plans
• Track your learning progress and adapt content to your knowledge level
• Process payments and manage subscriptions
• Send you important updates about the Service (e.g., security alerts, policy changes)
• Respond to your feedback and support requests
• Monitor and analyze usage patterns to improve our product
• Detect, prevent, and address technical issues and abuse

4. AI Processing & Third-Party Services

We use third-party AI services to power core features of Savvo. Here is how your data is handled:

4.1 OpenAI

Your study materials and user-generated content may be sent to OpenAI's API for processing (e.g., concept extraction, question generation, grading, and explanations). OpenAI processes this data according to their API data usage policy. As of the date of this policy, OpenAI does not use data submitted via their API to train their models.

4.2 Supabase

We use Supabase for authentication, database storage, and file storage. Your account data, study materials, and learning progress are stored in Supabase's infrastructure. Supabase processes data in accordance with their privacy policy.

4.3 Stripe

Payment processing is handled by Stripe. When you subscribe to a paid plan, Stripe collects and processes your payment information directly. We receive only a limited set of information from Stripe (e.g., last four digits of your card, subscription status). Stripe's handling of your data is governed by their privacy policy.

4.4 Vercel

The Service is hosted on Vercel. Vercel may collect standard server logs including IP addresses and request metadata. Vercel processes data in accordance with their privacy policy.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With the third-party services described in Section 4, solely to provide the Service.
• Legal Requirements: If required by law, regulation, legal process, or governmental request.
• Safety: To protect the rights, property, or safety of Savvo, our users, or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: When you explicitly choose to share content or information with other users or third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Row-level security policies in our database to ensure users can only access their own data
• Secure authentication via Supabase Auth
• Regular security reviews of our codebase and dependencies

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

7. Cookies

We use cookies strictly for essential purposes:

• Authentication cookies: To keep you logged in and maintain your session securely.
• Preference cookies: To remember your settings (e.g., light/dark mode preference).

We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

Uploaded study materials and AI-generated content (concepts, questions, etc.) are deleted when you delete the associated course or your account.

For accounts that become inactive (no login or activity for 24 consecutive months), we may send a notice to your registered email address. If the account remains inactive for an additional 30 days after notice, we reserve the right to delete the account and its associated data. We will make reasonable efforts to notify you before any such deletion.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information.
• Portability: Request a copy of your data in a portable format.
• Objection: Object to the processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us at the email address provided in Section 12.

10. Children's & Minors' Privacy

10.1 Children Under 13

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.

10.2 Minors Aged 13–17

Users between the ages of 13 and 17 may use the Service with the consent of a parent or legal guardian. If you are a minor, please review this Privacy Policy with your parent or guardian to make sure you both understand it. Parents or guardians who believe their minor child has provided personal information without their consent may contact us to request deletion.

If you are a California resident under 18, you have the right to request removal of content or information you have publicly posted on the Service. To make such a request, please contact us at the email address in Section 12.

10.3 Educational Use & FERPA

Savvo is designed for individual student use. We do not contract with schools or educational institutions, and we do not act as a "school official" under the Family Educational Rights and Privacy Act (FERPA). If you are a teacher or school administrator considering Savvo for classroom use, please be aware that any student data uploaded to the Service is governed by this Privacy Policy — not by a FERPA-compliant agreement. If your institution requires FERPA compliance, please contact us before using the Service in an educational setting so we can discuss appropriate arrangements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please reach out through our contact form.