Privacy Policy

Last updated 13 October 2026.

What we collect

• Account details. Your email address, and — if you choose — a name and a securely hashed password (never stored in plain text). If you sign in with Google, we receive your Google account's email address, name and profile picture URL from Google.
• Community profile. Your public username, the date you confirmed you are 18 or older, the date and version of the community guidelines you accepted, and whether you opted in to update emails.
• Sign-in records. Each time you sign in we record the time, the method (Google, email code or password), your browser's user-agent string, and a one-way keyed hash of your IP address. We do not store your IP address itself. These records protect accounts and help us stop abuse. You can see your recent sign-ins on your account page.
• Sign-in codes. When you ask for an email code we store a one-way hash of the code (never the code itself), when it expires, how many wrong attempts were made, and a hashed IP address for rate limiting.
• What you post and do. Study-wall posts, “helpful” reactions and reports you send; study progress, practice attempts, bookmarks and comments. When a post is rejected by our automatic checks we keep the first 200 characters and the reason, so moderators can spot repeated abuse. With each post we also store the study hours you add (if any) and the result of the AI check (allow, review or reject, the category and a short reason), which only moderators can see.

How we use it

To run your account, show your progress back to you, publish what you choose to post, keep the community safe (automatic checks, moderation and rate limits), and — only if you opted in — send occasional updates. We do not sell your personal data.

Who else processes it

• Our hosting and database providers, which store the data for us.
• Our email provider, which delivers sign-in codes to your inbox.
• Google, if you choose to sign in with Google.
• Anthropic, if AI review is enabled. The text of each study-wall post (and nothing else — not your email, username or account details) is sent to Anthropic's Claude model to check it against the community guidelines. Under Anthropic's commercial terms, this data is not used to train its models by default.
• Cloudflare Turnstile, if enabled, which checks that sign-in requests come from a person rather than a bot.
• Vercel Web Analytics, which measures page views without cookies.

Cookies

We use a session cookie to keep you signed in. We do not use third-party advertising trackers.

How long we keep it

Your account data stays until you delete your account. Used or expired sign-in codes are only needed for a short time and are periodically deleted. Moderation records are kept while the related account exists.

Your choices and rights

• Delete any of your study-wall posts or comments at any time.
• Turn update emails on or off on your account page.
• Delete your account — and with it your posts, reactions, reports, progress, comments and sign-in records — from your account page. You can also ask us to correct your data via the contact page.

The community is for people aged 18 and over. We process personal data in line with India's Digital Personal Data Protection Act, 2023.