StudyGrainOpen StudyGrain ↗

Your data, explained

Privacy Policy

Last updated: September 14, 2026

This policy explains how StudyGrain handles information when you use studygrain.com and its study workspace. For privacy questions, contact supaext@gmail.com.

1. Account and sign-in information

When you sign in with Google, we receive your Google account identifier, email address, name and profile picture, where available. We use this information to create and authenticate your StudyGrain account and display your profile. Google sign-in does not give StudyGrain access to your Gmail, Drive files, contacts or calendar. We do not receive your Google password.

You can also register with an email and password. Authentication and session management are provided by Supabase. Browser storage keeps your session and preferences between visits.

2. Notes, transcripts and AI features

We store the notes, extracted transcripts, folders, study sets, learning progress and chat messages you choose to save to your account. A guest or demo workspace may also keep information locally in your browser.

Original source documents, images, lecture recordings and videos are not kept as a file library in StudyGrain. Document text extraction and supported scan recognition take place in your browser. We retain the resulting transcript and study materials rather than the original source files. If you use voice transcription, the audio is processed to produce text; it is not saved as a lecture recording in your account.

When you request a summary, flashcards, a quiz or a chat response, relevant note text, transcript text and your instructions are sent through OpenRouter to the selected AI provider. Voice features may send audio to a transcription provider. Processing by these providers is subject to their own data-handling terms; we do not promise that every provider has the same retention or training policy. Avoid submitting sensitive information that is not needed for studying.

Google profile information is used for account functions, not as study material sent to AI. StudyGrain does not sell personal information or use Google account data for advertising.

3. Sharing and feedback

Exporting or sharing a note discloses the content you choose to share. Where link sharing is available, anyone with an active link can see its preview; signed-in recipients can read the shared note and may keep a copy. Revoking a link does not remove copies already saved or downloaded by recipients. Notes are not made public simply because you create them.

If you send feedback, we store your message with your account identifier and any image you deliberately attach. Feedback attachments are separate from the original study files described above. Include only information you want support to review.

4. Providers and operational data

We use service providers to deliver the features you request:

Hosting and authentication systems may process IP addresses, request times, errors and similar technical records for delivery, reliability and abuse prevention. Providers may process information in countries other than yours. We may disclose information when required by law or when necessary to investigate misuse and protect the service.

5. Analytics and browser storage

PostHog measures visits, landing-page scroll depth, button clicks and selected app events such as registration, note creation and study-set use. Landing analytics also records referring domains and campaign labels (UTM source, medium and campaign). Landing visits and signed-in application sessions include device type and approximate country supplied by our hosting provider. We do not request GPS location or add city or coordinates to these events. VPNs and browser privacy settings can affect this information. Analytics uses a browser identifier and, for signed-in users, an internal account identifier. Our event payloads exclude note and transcript text, chat messages, form contents and email addresses. Session replay and automatic capture of page content are disabled.

We respect supported Do Not Track and Global Privacy Control signals. You can also disable this analytics in the current browser. Essential authentication storage is separate and remains necessary to keep you signed in.

6. Retention, access and deletion

Saved account information is retained while it is needed to provide your workspace, manage support requests or meet applicable legal and security obligations. Local demo data remains in your browser until you clear it. Operational backups and security records may remain for their applicable retention periods after data is removed from the active service.

You can edit your notes and export available content. For account deletion, a copy of your personal data, corrections or other privacy requests, email supaext@gmail.com from the address associated with your account. We may need to verify that the request is yours. Depending on your location, you may also have rights to object, restrict processing, withdraw consent or complain to a data-protection authority. We handle requests under the requirements that apply to them.

You can revoke Google access in your Google Account connections. Revoking Google access alone does not delete your saved StudyGrain workspace; contact us if you also want it deleted.

7. Security and younger users

We use HTTPS and account-based access controls to protect information. No online service can guarantee complete security. Keep your login private and tell us if you suspect unauthorized access.

StudyGrain is not intended for children under 13 or below the minimum age for independent use in their location. If you believe a child has supplied personal information without the required permission, contact us so we can investigate and remove it where appropriate.

8. Policy updates

We will update this page when our practices change and revise the date above. Material changes will be communicated through the service or another appropriate channel. Questions about this policy can be sent to supaext@gmail.com.