Privacy Policy
What we collect, how we use it, and how to delete it
A plain-language explanation of how LearnByAi handles the documents, messages, and account data you share with us. No legal boilerplate, no vague commitments.
- Anonymous by default
- TLS encrypted
- Delete on request
Last reviewed July 2026
The short version
If you only read one section, read this one. The rest of this page explains each of these points in detail.
- Anonymous by default: You can upload and analyze documents without creating an account. We generate a session token in your browser so your workspace stays private to your device.
- Your documents, your data: We do not claim ownership of the files or conversations you create. You retain full rights to everything you upload.
- Your data, your control: Your files and chat messages are sent to OpenAI only to answer your questions. OpenAI's API data-handling terms apply to that data.
- Encrypted in transit: Every connection between your browser, our servers, and our storage and AI providers uses TLS encryption.
- Deleted on request: Ask us to delete your data and we remove it from file storage, the vector index, and the database. Most deletions complete immediately.
- Never sold or shared: We do not sell your data and we do not share it with advertisers or data brokers. The only third parties involved are the providers required to run the platform.
What we collect and why
We collect only what is necessary to run the service. Here is a complete list.
Session tokens
When you use LearnByAi without signing in, we generate an anonymous session token stored in your browser. This token ties your documents and chat history to your device without capturing your name, email, or identity.
Uploaded files
The documents you upload (PDF, DOCX, TXT, and other supported formats) along with their extracted text content. We process these files to answer your questions and store them for as long as your session or account is active.
Chat history
The questions you ask and the answers you receive during a session. This history is kept so you can continue a conversation without re-uploading your document.
Account information (if you sign up)
If you create an account, we store your email address, the name you give at sign-up, and a hashed password for email sign-ups. If you sign in with Google, we receive the account details Google shares with us, such as your email address. We do not collect payment card details; card payments are handled by our third-party processor.
WhatsApp (if you use LearnByAi there)
If you message LearnByAi on WhatsApp, we process and store your WhatsApp phone number, the messages and documents you send, and, if you link it, the connection between your number and your LearnByAi account. We use them to route your conversation and answer your questions.
Messages and top-up details
If you use the contact form, we store your name, email address, topic, message and IP address. If you make a manual top-up, we store the payment method, amount, the reference ID you enter and the sender account you provide. If you pay by card, Polar processes the payment and we record the amount and Polar's transaction reference against your wallet.
Usage records
Basic usage counts, such as how many messages you have sent or how many documents you have uploaded, used to enforce tier limits and calculate wallet balances. These records do not contain the content of your documents.
How your information is used
The data we collect is used for three purposes only.
- Answering your questions. Document content and chat history are used to retrieve relevant passages and generate accurate, grounded answers.
- Running the platform. Usage records let us enforce tier limits, calculate wallet balances, and keep the service stable for all users.
- Communicating with you. If you have an account, we may use your email to send transactional messages such as password resets or billing receipts. No marketing email without your consent.
Who else handles your data
Running LearnByAi requires a small number of infrastructure and AI providers. Each one handles a specific part of the pipeline and nothing more.
OpenAI
Generates embeddings and chat responses. Only the passages from your document needed to answer your specific question are sent, not your entire file or conversation history. OpenAI's API data-handling terms apply to data submitted through the API.
Cloudinary
Stores your uploaded files. Files are accessed only through signed, expiring URLs generated by our backend.
Supabase
Manages account data, session metadata, and usage records in a Postgres database. Authentication runs through Supabase Auth with password hashing and secure session tokens.
Qdrant
Stores the vector embeddings generated from your document text. Every query is filtered by owner ID, so a request can only ever return your own content.
Polar
Processes card payments for wallet top-ups on its own hosted checkout page. LearnByAi does not receive or store your full card number. Polar's privacy policy applies to the data you enter there.
How long we keep your data
We keep your data for as long as it is useful to you and no longer.
Anonymous sessions
Documents and chat history tied to an anonymous session token are retained while the session is active and cleaned up automatically once the session goes idle.
Signed-in accounts
Documents and history persist until you delete them or close your account. Nothing is auto-deleted while your account is active.
Usage, billing and operational records
Aggregate usage counts and records needed for billing, refunds, payment disputes and service security may be kept after a deletion request, for as long as needed for those purposes. Aggregate usage counts do not contain document content.
Backups
Where backup copies of our systems exist, deleted data may remain in them for a limited period until they are cycled out on their normal schedule.
What a deletion request triggers
When you delete a document or request account deletion, a cascading removal runs across every system that touched your data.
- Files removed. File deleted from Cloudinary storage
- Vectors wiped. Embeddings deleted from Qdrant
- Records cleared. Database rows removed from Supabase
- Sessions ended. Session data removed; some billing and operational records may remain
What you can ask us to do
Regardless of where you are located, you can exercise the following rights by emailing support@learnbyai.app.
- Access: Ask what data we hold about you and receive a copy of it.
- Correction: Ask us to correct inaccurate information associated with your account.
- Deletion: Request that we permanently delete your data from our systems.
- Portability: Ask for a machine-readable export of your account data where technically feasible.
- Objection: Object to specific uses of your data, such as receiving any communications from us.
- Restriction: Ask us to temporarily stop processing your data while a dispute is being resolved.
Privacy questions
Do you use my documents to train AI models?
Your documents and conversations are sent to OpenAI through its commercial API solely to generate your answer. OpenAI's API data-handling terms apply to data submitted through the API.
Can other users see my documents?
Other users cannot. Every document is indexed with your session token or account ID, and every query is filtered by that identifier at the database level. There is no shared view across sessions or accounts. Authorized LearnByAi administrators can use administrative tools that show account and usage details, uploaded file names and sizes, and previews of chat messages, and that can delete documents. We use this access to operate the service, provide support, investigate abuse and security problems, and handle billing.
What happens to my data if I clear my browser?
If you are using LearnByAi without an account, your session token lives in your browser's local storage. Clearing your browser data removes that token, which means you lose access to your previous documents and chat history. The files remain in storage until automatic cleanup runs. If you have an account, your data persists under your login credentials regardless of browser changes.
How do I delete my data?
You can delete individual documents from within the app at any time. For full account deletion or a broader data removal request, email support@learnbyai.app. We will confirm once the cascading deletion is complete across file storage, the vector index, and the database.
Is this policy compliant with GDPR or CCPA?
We have designed LearnByAi with data minimization and user control in mind: anonymous access, no unnecessary collection, and permanent deletion on request. We have not obtained a formal GDPR or CCPA compliance certification. If you have specific regulatory requirements, email us and we will discuss what we can provide.
Do you use cookies?
We use browser local storage for your session token, your sign-in tokens when you sign in, and functional preferences. We do not use advertising cookies or cross-site tracking. See our Cookie Policy for the full breakdown.
Is my payment information stored on your servers?
Only limited details. Card payments are completed on the hosted checkout page of our payment provider, Polar, and LearnByAi never sees or stores your full card number. Where a manual top-up option is offered at checkout, we also store the payment method, amount, and the reference you submit so we can credit your wallet.
Privacy inquiries
Email: support@learnbyai.app
For data access requests, deletion requests, or any question about this policy. We aim to respond within one business day.
Related pages
See it work with your own document
Upload a file and ask a question. No account required, and your document stays private to your session.