1. Introduction
Welcome to Scholium. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, web application, and related services (collectively, the “Service”).
By using Scholium, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the Service.
2. Information We Collect
We collect several types of information to provide and improve our Service:
Account Information
When you create an account, we collect your name, email address, and password. If you sign up using a third-party service (such as Google), we receive your name and email address from that service.
Uploaded Content
We collect and store the study materials you upload to Scholium, including documents, notes, PDFs, and other files. This content is necessary to provide our core services—generating flashcards, quizzes, and personalized learning paths.
Usage Data
We automatically collect information about how you interact with the Service, including:
- Features you use and actions you take
- Study session duration and frequency
- Quiz and flashcard performance
- Time spent on different activities
Device Information
We collect information about the device you use to access the Service, including device type, operating system, browser type, and IP address.
3. How We Use Your Information
We use the information we collect for the following purposes:
Providing and Improving the Service
- Process and store your study materials
- Generate personalized flashcards, quizzes, and curricula
- Track your learning progress and optimize spaced repetition schedules
- Improve our algorithms and features based on aggregate usage patterns
Communication
- Send you study reminders and progress updates (with your consent)
- Respond to your support requests and questions
- Notify you about important changes to the Service or this policy
Analytics and Research
- Analyze usage patterns to improve the Service
- Conduct research on learning effectiveness (using anonymized data)
- Monitor and prevent fraud, abuse, and security issues
4. Data Storage and Security
We take the security of your data seriously and implement industry-standard measures to protect it:
Encryption
- In Transit: All data transmitted between your device and our servers is encrypted using TLS 1.3.
- At Rest: Your data is encrypted at rest using AES-256 encryption.
Infrastructure
Your data is stored on secure servers provided by Supabase (PostgreSQL database) and Vercel (hosting), both of which maintain SOC 2 Type II compliance and implement robust security measures.
Access Controls
Access to user data is strictly limited to authorized personnel who need it to operate and improve the Service. We conduct regular security audits and maintain detailed access logs.
5. Third-Party Services
We use the following third-party services to operate Scholium:
Infrastructure Providers
- Supabase: Database hosting and authentication
- Vercel: Website and application hosting
AI Services
We use AI services to process your study materials and generate learning content. Your content may be sent to these services for processing, but we do not permit them to use your data for training their models without your explicit consent.
Analytics
We use analytics services to understand how the Service is used. These services collect anonymized usage data and do not have access to your personal study materials.
6. Your Rights
You have the following rights regarding your personal information. You can exercise these rights from your account settings or by contacting us:
Access
You can access and view all the personal information we hold about you through your account dashboard.
Export
You can export all your data, including uploaded materials, flashcards, and progress history, in standard formats at any time.
Deletion
You can delete your account and all associated data at any time. Upon deletion, your data will be permanently removed from our systems within 30 days.
GDPR and CCPA Compliance
If you are a resident of the European Union or California, you have additional rights under the GDPR and CCPA respectively, including the right to know what data we collect, request correction of inaccurate data, and opt out of the sale of personal information (we do not sell your data).
7. Cookies
We use cookies and similar technologies for the following purposes:
Essential Cookies
These cookies are necessary for the Service to function properly. They enable core features like authentication, session management, and security. You cannot opt out of essential cookies.
Analytics Cookies
We use analytics cookies to understand how visitors interact with the Service. These cookies are optional, and you can disable them in your browser settings or through our cookie preferences.
What We Don't Do
We do not use third-party advertising cookies. We do not track you across other websites. We do not sell your browsing data to advertisers.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.
For material changes, we will notify you by email or through a prominent notice on the Service before the changes take effect. We encourage you to review this page periodically to stay informed about how we protect your information.
The “Last updated” date at the top of this policy indicates when it was last revised.
9. Contact Us
If you have any questions about this Privacy Policy, your personal data, or how we handle your information, please contact us:
- Email: privacy@scholium.app
- General inquiries: hello@scholium.app
We will respond to your inquiry within 30 days.