Privacy Policy

Learnisim AI ("we", "our", "us") is an AI-powered learning platform operated as an independent, individually-run project. We are the data controller for the personal data described in this policy.

For any privacy matter you can reach us at [email protected]. This Privacy Policy explains what data we collect when you use our website and app at learnisim.com, why we collect it, and how we protect it.

We collect only what we need to provide and improve the service:

• Account information — your name, email address, and hashed password when you register.
• Usage data — roadmaps you generate, topics you study, exam results, interview transcripts, and revision schedules. This data is necessary for core features like spaced revision and progress tracking.
• AI inputs — text you submit to generate roadmaps, ask questions, or take interviews. This is sent to our AI provider to produce a response and is not used to train any model.
• Billing data — your subscription tier and billing history. We never store card numbers — payment is handled entirely by Stripe.
• Technical data — browser type, IP address, and session tokens (stored as signed, short-lived JWT cookies). We use this for security and to keep you signed in.

• To operate the platform — authenticate you, run AI features, track progress, and schedule revisions.
• To manage billing — process payments and enforce credit limits through Stripe.
• To send transactional emails — account verification codes, subscription receipts, and security alerts. We do not send marketing emails unless you opt in.
• To improve the service — aggregate, anonymous analytics about which features are used most. Individual learning content is never shared.

If you are in the UK or EEA, we rely on the following lawful bases under the UK/EU GDPR:

• Performance of a contract — to create your account, run AI features, track progress, and deliver the Service you signed up for.
• Legitimate interests — to secure the platform, prevent abuse, and understand aggregate feature usage, balanced against your rights.
• Legal obligation — to retain billing records and respond to lawful requests.
• Consent — where required, e.g. before sending any marketing email. You may withdraw consent at any time.

We do not sell your data. We share it only with the following service providers, bound by data-processing agreements:

• Neon / PostgreSQL — encrypted database hosting for all account and learning data.
• AI providers (the provider configured in your deployment — e.g. xAI, Anthropic, OpenAI, DeepSeek) — your prompts are sent to generate responses. See each provider's privacy policy for how they handle API data.
• Stripe — payment processing. Stripe's privacy policy governs card and billing data.
• Resend — transactional email delivery.
• Upstash Redis — rate-limit counters (no personal content, only request counts).

Depending on your jurisdiction you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (right to erasure).
• Object to or restrict certain processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email [email protected]. We respond within 30 days.

If you are in the UK or EEA and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office). We'd appreciate the chance to address your concern first.