Privacy Policy

Using NerdBot as a Guest

If you continue as a Guest, none of your data is sent to our servers. Your name, bots, chats, flashcards, grades, and every other piece of study content are stored only in your browser's local storage. Clearing your browser data or switching devices erases it, and we have no copy of it.

Information we collect when you sign in

Signing in with Google creates a real account, backed up on our servers so it syncs across devices. We collect:

• Account info — your name, email address, and (if you set one) a profile photo, from Google or uploaded by you.
• Study content— the names of your class workspaces ("bots"), and everything you create inside them: chat messages, uploaded documents and photos, flashcards, quizzes, practice exams, grades, assignments, and similar study data.
• Subscription status— whether you're on the Free or Premium plan. If you subscribe to Premium, payment is handled entirely by Apple through In-App Purchase — we never see or store your card details.
• Basic technical data — your IP address, used only transiently to prevent abuse of our AI features (rate limiting), not stored long-term or tied to your identity.

How we use it

To run the product: sync your bots and study content across your devices, generate AI responses and study materials, remember what you've covered in each class so the AI can personalize its answers, process Premium subscription payments, and keep the app secure and working (error monitoring, abuse prevention). We don't sell your data, and we don't use your study content, chats, or account info to target ads at you.

Advertising

Free-plan users may see ads served by Google AdMob; Premium has no ads. These ads are non-personalized— we don't use your study content, chats, or account info to target them, and we request non-personalized ads directly from Google (no ad tracking identifier is used for interest-based targeting). Google may still process technical data (like a general/coarse ad request) needed to serve and measure the ad itself, per Google's advertising privacy policy.

Who we share it with

We use a small number of service providers to run NerdBot:

• Supabase — hosts our database, handles sign-in, and stores uploaded profile photos.
• Anthropic— powers the AI. Your questions, uploaded documents/photos, and relevant study context are sent to Anthropic's API to generate a response, per Anthropic's privacy policy.
• Google — provides sign-in, and (Free plan only) serves non-personalized ads via AdMob, as described above.
• Apple — provides Sign in with Apple, and processes Premium subscription payments via In-App Purchase. We never receive or store your card number.
• RevenueCat — manages Premium subscription status on our behalf, based on your purchase receipt from Apple.
• Vercel— hosts NerdBot's servers and website.
• Sentry — error monitoring, so we can find and fix bugs. Sentry may receive limited technical data about an error (like what happened and roughly when), not your study content.

We don't sell your personal information, and we don't share it with anyone else beyond the providers above, except where required by law (for example, to comply with a valid legal request) or to protect our rights, users, or the public from harm.

Data retention

We keep your account data for as long as your account exists. If you delete your account, we delete your profile, bots, and study content from our servers — this happens promptly, though residual copies may briefly persist in backups before being overwritten in the normal course of our backup rotation. Guest data lives only on your device and is under your control at all times; we never receive a copy of it unless you sign in.

Security

We use industry-standard measures to protect your data — encrypted connections (HTTPS/TLS) between your device and our servers, access controls on our database, and secrets/credentials that are never exposed to the app itself. No method of storing or transmitting data is 100% secure, but we work to protect your information and will notify affected users if we become aware of a breach involving your personal information, as required by law.

Cookies and local storage

We use local storage and similar technologies to keep you signed in, remember your preferences (like light/dark mode), and store Guest data on your device. We don't use third-party advertising or tracking cookies of our own. Some of the providers listed above (like Google, for sign-in and ads) may set their own cookies or identifiers as part of providing their service to us.

Your controls and privacy rights

From Settings, you can update your name and photo, sign out (which only clears your session, not your data), or permanently delete your account — which removes your profile, bots, and all study content inside them from our servers. This can't be undone.

Depending on where you live, you may have additional rights over your personal information — including the right to know what we've collected, request a copy of it, correct inaccurate data, and delete it. We don't sell or share personal information for cross-context behavioral advertising, so there's no "opt-out of sale" needed — but you can exercise any of these rights, or ask us any question about your data, by emailing support@nerdbotai.com. We won't discriminate against you (for example, by denying service or charging a different price) for exercising these rights.

Where your data is processed

Our service providers process data primarily in the United States. If you use NerdBot from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your country.

Children's privacy

NerdBot is intended for students in high school and above (age 13+) and is not directed at children under 13. We don't knowingly collect personal information from children under 13, and accounts require Google sign-in, which has its own age-eligibility requirements. If you're a parent or guardian and believe your child under 13 has provided us personal information, contact us at support@nerdbotai.com and we'll promptly delete it.

Changes to this policy

If we make material changes, we'll update the date at the top of this page. We encourage you to check back occasionally.