Privacy Policy

The data controller responsible for processing your personal information within the meaning of the GDPR is Classmate. If you have any formal legal inquiries, structural data verification requests, or require assistance exercising your data control options, you can immediately contact us via our secure channels at legal@yourclassmate.ai.

Classmate is deliberately designed for students aged 13 and older, including students in the upper grades of elementary school (for example, grades 7 and 8), high school and college. In strict accordance with GDPR Article 8, if you are under 16 years of age (or the specific age of digital consent established in your unique European Union member state, which fluctuates legally between 13 and 16 years old), you must secure explicit permission and verifiable authorization from your parent or legal guardian before activating a profile or engaging with our service. We enforce a strict baseline threshold of 13 years old (aligned with the United States Children's Online Privacy Protection Act baseline) and do not knowingly collect or hold data on individuals below 13. If we discover records belonging to anyone under 13 without verifiable oversight, they will be hard-deleted from our storage environments immediately.

Under the GDPR framework, we operate under explicit legal grounds to process your information. These primarily consist of the Performance of a Contract (necessary to deliver app features you explicitly request) and your explicit, verifiable Consent (for product analytics). All tracking items are mapped below:

• Account, Identity & Authentication Data: We process your direct signup details, including your email address entered at registration, structural display name (composed of your first and last name or email fallback). This data is handled strictly under the legal basis of Performance of a Contract to secure your student portal, manage your application authorization tokens, and keep your workspace available. We do not copy your profile photo URL directly into our storage, and we never see, handle, or store your passwords—all raw credential validation is managed securely by our sub-processor Clerk. If you choose to sign in with Google or Apple, that provider confirms your identity and shares your name, email address and a unique account identifier with us through Clerk.
• Onboarding Profile & Study Settings: We collect detailed parameters concerning your current education tier (primary school, high school, vocational school, or university), current grade status (integers 1-12), core learning styles (visual, auditory, reading, or kinesthetic text configurations), preferred operating language codes, specific interests, study goals, self-reported strong subjects, and designated weak subjects. This profile information is utilized solely under the Performance of a Contract to structurally initialize your personalized learning space and pass relevant behavioral parameters to our AI processors so your study materials match your real-world educational situation.
• User Content Creation & Structural Uploads: We process user-uploaded text images and electronic documents (JPEG, PNG, and PDF formats—strictly excluding video or audio formats), written study notes, custom spatial mind maps, user-configured calendar events (including event titles, descriptions, test dates, hex colors, and completeness states). This is processed under the legal basis of Performance of a Contract to generate learning modules and compile interactive study tasks.
• Quiz Performance & Academic Tracking Metrics: We log comprehensive statistics covering generated quizzes (including full questions, correct response and explanations), explicit quiz attempts, along with AI-generated feedback reports.
• App Diagnostics, Engine Logs & Telemetry: We maintain real-time application error reports, performance traces, and platform CPU usage profiles. In production environments, when unexpected system failures occur, our infrastructure logs secure your IP address and active authenticated user identification parameters to troubleshoot the system. This processing is justified under our Legitimate Interest to safeguard platform security, optimize stability, and fix functional bugs. To personalize your learning, we also record your study activity in our own systems: when you start and end a study session, which parts of a lecture you open and leave, when you ask our AI assistant a question, how you answer in-lecture challenge prompts, and when you complete calendar items. This learning activity is needed to adapt your review schedule and study plan, so it is processed under the Performance of a Contract and is not sent to analytics providers. Separately, and only if you give your explicit consent via the consent banner on our website or the consent prompt in the App, we send product analytics to PostHog: the screens and pages you open, the features you use, when the App is opened or moved to the background, and short session recordings in which all input fields are masked (in the App, all text and images are hidden). You can withdraw this consent at any time in the settings of the website or the App, after which no further product analytics are collected. We explicitly do not log mouse trajectories, scroll depth, typing cadence speed, click rage-patterns, or hardware device fingerprints.
• Mobile Device, Notification & Purchase Data: When you use the App, we process: (a) a push notification token, created only if you allow notifications, so that we can send you study reminders and important account messages; (b) basic device information, such as device model, operating system version, App version and language, used to deliver App updates and to diagnose crashes and performance problems; (c) subscription and purchase records (product, purchase date, renewal and expiry status, and the store transaction identifier) that we receive from Google Play or the Apple App Store through RevenueCat. We never receive your card or other payment details, which are handled by Google or Apple; and (d) the photos, scans and files you choose to upload. The App asks for camera access only when you choose to scan or photograph a document, and accesses your photos or files only when you choose them. Push tokens and device information are processed under the Performance of a Contract and our Legitimate Interest in keeping the App stable and secure; purchase records are processed under the Performance of a Contract and to comply with our legal (tax and accounting) obligations.
• Support Messages: When you contact us through Contact support in your settings, we process your message together with your name, account email address and user ID, the page you sent it from, your language setting and your browser type, so that we can answer you and solve the problem. Your message is delivered to our support inbox by email, and we reply to your account email address. If you write to us by email directly, we process your email address and the contents of your message. This is processed under our Legitimate Interest in helping our users and fixing problems with the Service.

We use information that we collect about you or that you provide to us, including for the following purposes:

• To provide, operate, maintain and improve the App;
• To register you as a user and verify your identity;
• To facilitate your use of features in the App (for example login, profile, content access);
• To send you administrative information (such as updates, security alerts);
• To send you push notifications, such as study reminders, if you allow them;
• To monitor and analyse usage and trends, and to improve your experience;
• To detect, investigate and prevent fraudulent or illegal activity and protect the rights and property of Classmate;
• To comply with our legal obligations and enforce our agreements.

On the website, Classmate utilizes browser storage mechanisms strictly to enable primary core features and handle analytical telemetry. We do not host or cooperate with any commercial advertising networks, cross-site promotional targets, or third-party marketing trackers. Your storage items are split into specific technical segments. For core user sessions, our provider Clerk sets strictly necessary session and client cookies (such as _session and _client_uat) which roll on a 7-day active basis and refresh automatically upon activity to verify your identity; these do not contain personally identifiable information by default. For internal preference settings, our app utilizes your local browser storage to save your analytical preference selections via a functional entry named classmate.analytics.consent. For app telemetry, if and only if you explicitly choose to click 'Accept' on our privacy consent banner, our analytics partner PostHog deploys tracking cookies and persistent browser-storage elements for up to 365 days to securely evaluate site traffic, capture masked visual session simulations (with all text input fields redacted by default), and map platform bugs.

The App does not use cookies. Instead, it stores the following on your device: your sign-in session, kept in the device’s encrypted secure storage and managed by Clerk; a local copy of your study content so that the App opens quickly and works offline; your App settings (such as sound and language preferences); and your analytics choice. If you consent to analytics, PostHog also stores a random identifier on your device. Your session and cached study content are removed when you sign out, and all of this data is removed when you uninstall the App.

The central intelligence of Classmate relies on deep API integrations with Large Language Models to deliver automated study plans and instant feedback. Every individual AI sub-routine is logged in PostHog as an analytical metadata block containing token counts, latency data, provider tracking strings, and model identifiers, while the raw prompt content remains strictly private and unlogged. We route requested lecture assets, onboarding styles, written weak/strong subject logs, and conversational questions to our AI provider, Anthropic, whose Claude models generate your summaries, quizzes, study plans and answers. To find related material across your lectures, short passages of your study content are also converted into numerical representations (embeddings) by Voyage AI; these embeddings are stored with your account and deleted with it. We enforce strict data separation standards: the only identity detail we share with an AI processor is your first name, used so that greetings and study plan tasks can address you personally. We never send your last name, registered email address, or internal identity keys to any AI processor. Anthropic does not use the data we send through its API to train its models, and it automatically deletes it within 30 days, unless its automated safety systems flag content as violating its usage policy, in which case it may keep that content for up to 2 years. We do not use your uploaded study documents, personal notes, or evaluation profiles to train AI models. Classmate's tutor, explanations, and messages are generated by artificial intelligence, not written by a human, and can contain mistakes.

To deliver reliable, high-performance features, Classmate partners with specialized external tech vendors (Sub-processors). Because some of these companies maintain server clusters outside the European Union, your data may cross international borders. We ensure all cross-border transfers are legally protected by enforcing Standard Contractual Clauses (SCCs) and validating that partners adhere to the formal EU-US Data Privacy Framework (DPF) to ensure strict GDPR compliance. Our current roster of sub-processors includes:

• Clerk: Acts as our core user directory and access manager. They capture, verify, and store account credentials and profile metadata in the United States under the legally compliant EU-US Data Privacy Framework. Clerk also handles optional sign-in with Google and Apple. https://clerk.com/legal/privacy
• DigitalOcean: Operates as our core physical compute host. The active servers processing your app requests are hosted in Frankfurt, Germany (EU). https://www.digitalocean.com/
• Aiven: Hosts our cloud production database cluster. All primary tables and student data fields are stored in Amsterdam, Netherlands (EU). https://aiven.io/
• Vercel: Serves our public web server files and application frontend. The cloud deployment infrastructure operates out of Frankfurt, Germany (EU). https://vercel.com/
• Cloudflare: Provides high-speed object storage (R2 buckets) located in Eastern Europe (EU). They temporarily store your raw uploaded study images and PDFs under randomized keys. These documents are permanently deleted immediately after the AI finishes its analysis. https://www.cloudflare.com/privacypolicy/
• Anthropic: Provides the Claude AI models that power our text interpretation, quiz building, answers and automated study schedules. Requests are processed in the United States. Anthropic does not train its models on this data and deletes it within 30 days, except content flagged for usage-policy violations (kept up to 2 years). https://www.anthropic.com/legal/privacy
• Voyage AI: Converts short passages of your study content into embeddings so that Classmate can find related material across your lectures. It receives text excerpts only, without your name, email address or account identifiers. Requests are processed in the United States. https://www.voyageai.com/privacy
• PostHog: Captures product interaction logs, feature clicks, and masked user session replays (in the App, all text and images are hidden in recordings). Tracking only activates if you explicitly accept the privacy banner on our website or the consent prompt in the App. Separately, our servers send PostHog technical usage metrics for each AI request (token counts, latency and model name, linked to your user ID but never containing prompt or response content), under our Legitimate Interest in monitoring the cost and reliability of the service, preventing misuse and providing support. We do not use this data for marketing. https://posthog.com/privacy
• Sentry: Aggregates application code crashes, operational bugs, and system traces. Sentry is explicitly configured to route all data to an EU-region ingestion endpoint. https://sentry.io/privacy/
• Resend: Delivers the messages you send through Contact support to our support inbox. It processes your message, name, email address and user ID, and is configured to process data in its EU region (Ireland). https://resend.com/legal/privacy-policy
• Google Workspace: Hosts our company email, including the support and legal inboxes where your support messages and any emails you send us are received and stored. https://policies.google.com/privacy
• Lemon Squeezy: Processes premium subscription payments made on the website, as Merchant of Record. https://www.lemonsqueezy.com/privacy
• TriggerDev: Manages deep infrastructure task scheduling, background job execution, and AI query orchestration. https://trigger.dev/legal/privacy
• Google Play Billing: Processes payments for subscriptions purchased in the App. All in-app payments are made through Google Play; Google handles your payment details, and we only receive confirmation of the purchase and its status. https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=privacynotice
• RevenueCat: Manages in-app subscriptions and purchases as a backend layer between the App and Google Play Billing. It receives your Classmate user ID, your purchase and subscription records, and basic device information. Data is processed in the United States. https://www.revenuecat.com/privacy
• Firebase Cloud Messaging (Google): Delivers push notifications to Android devices. It receives your device’s push token and the content of the notification. Notifications are only sent if you allow them, and you can turn them off at any time in your device settings. https://firebase.google.com/support/privacy
• Expo (650 Industries, Inc.): Provides the App’s push notification service, which passes notifications from our servers to Firebase Cloud Messaging; delivers App updates; and collects App performance measurements (such as start-up and screen loading times). It receives your push token, notification content, device model, operating system and App version, and IP address. Data is processed in the United States. https://expo.dev/privacy
• Google ML Kit: The App uses the camera only when you choose to scan a document. Document scanning and text recognition are performed on your device by Google ML Kit, and your images are not sent to Google for this purpose; Google Play services may collect limited diagnostic and usage information about these features. https://developers.google.com/ml-kit/terms

We minimize data usage by keeping your information only for as long as it takes to run your account or complete specific system tasks. Our structural retention timelines are defined as follows:

• Behavioral Interaction Events: Maintained for 12 months, after which all detailed entries are permanently purged from database tables.
• AI Recommendation Cache: Automatically cleared out and destroyed on a rolling 24-hour expiration cycle.
• Synced Calendar Schedules: Kept indefinitely until you manually delete them, sever your Google API connection, or close your profile.
• General Profiling, Notes, Mind Maps, and Quiz Records: Retained for the entire active lifespan of your student account profile.
• Push Notification Tokens: Kept while your account exists and deleted together with your account.
• Purchase and Subscription Records: Kept for as long as required by applicable tax and accounting laws.
• Session Recordings: Kept for 30 days, then automatically deleted.
• Support Messages: Kept for up to 24 months after your request is resolved, then deleted. You can ask us to delete them sooner by writing to legal@yourclassmate.ai.

Instant Deletion Cascade & Backup Retention Policies When you initiate a profile deletion request, our backend database triggers an automated hard-delete CASCADE protocol. This command completely and immediately purges your account entry along with all linked records, notes, study histories, and quiz logs from our live production environment. However, to protect our community against catastrophic server failures, preserve system integrity, and enable complete disaster recovery, encrypted snapshots of our database are backed up regularly. If you delete your profile, your information remains inside these isolated, highly secure backups for a transitional window of between 30 and 90 days before it is completely overwritten and permanently destroyed.

As an individual residing inside the European Economic Area, the GDPR grants you robust statutory legal controls over your personal information. These include:

• Right of Access: The absolute right to request comprehensive digital copies of all personal information fields we hold about you.
• Right to Rectification: The right to enforce full corrections of outdated, partial, or inaccurate records across our database tables.
• Right to Erasure: The right to command the total destruction of your personal data profile (subject to our stated backup timelines).
• Right to Restrict Processing: The right to object to specific processing tracks or restrict how we use particular data points.
• Right to Data Portability: The right to request a clean, machine-readable structured download of your personal data for migration.
• Right to Withdraw Consent: Where we process your data based on your consent (such as product analytics), you can withdraw it at any time in the settings of the website or the App. Withdrawing consent does not affect processing carried out before the withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work. In Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs).

Because we prioritize data minimization and do not maintain automated self-service dashboard buttons for partial histories or data exports yet, all GDPR rights requests are handled manually by our support team. If you wish to exercise any of your legal rights, please contact us directly at legal@yourclassmate.ai. We will verify your identity to ensure security and will fulfill your request completely free of charge within 30 days.

For any questions about this Privacy Policy or to exercise your GDPR rights, you can reach us at:

• Solo Proprietorship name: “NIKOLA SREĆKOV PR CLASSMATE”
• Registration number: 68757304, Tax ID 115931079
• D-U-N-S number: 369951395
• Mail address: legal@yourclassmate.ai
• Address: Marsala Tita 35, Zmajevo, Serbia, PAK 398634