Privacy Policy

1. Introduction

Cognicat ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials through our authentication provider (Clerk).

2.2 Learning Preferences

We collect information you provide through the chat interface, including your learning goals, preferred topics, learning style preferences, and pace settings. This data is used solely to generate personalized learning plans.

2.3 Usage Data

We collect information about how you interact with the Service, including pages visited, features used, learning plans generated, quizzes taken, and token consumption. This helps us improve the Service and enforce usage quotas.

2.4 Technical Data

We automatically collect technical information such as IP address, browser type, device information, and error logs through our monitoring service (Sentry) for debugging and performance optimization.

3. How We Use Your Information

We use your information to:

• Generate personalized learning plans and resource recommendations.
• Create and deliver AI-generated quizzes tailored to your learning content.
• Manage your account, subscription, and usage quotas.
• Improve and optimize the Service.
• Send important service-related communications.
• Detect and prevent fraud or abuse.

4. Third-Party Services

We use the following third-party services that may process your data:

• Clerk: Authentication and user management.
• Google Gemini: AI model for generating learning plans and quizzes.
• Tavily: Web search API for curating learning resources.
• Sentry: Error tracking and performance monitoring.
• Upstash Redis: Rate limiting and caching.

Each third-party service has its own privacy policy. We encourage you to review their policies. We do not sell your personal data to any third party.

5. Data Storage and Security

Your data is stored in a PostgreSQL database with encryption at rest. We implement industry-standard security measures to protect your information, including secure HTTPS connections, authentication tokens, and rate limiting. However, no method of transmission over the Internet is 100% secure.

6. Data Retention

We retain your account data and learning plans for as long as your account is active. Usage records are retained for billing and analytics purposes. Upon account deletion, your personal data will be removed within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Object to or restrict processing of your data.
• Data portability (export your learning plans in Markdown, PDF, or iCal format).

To exercise these rights, contact us at support@learningassistant.app.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Third-party services may set their own cookies as described in their respective privacy policies.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy and revising the "Last updated" date. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your data rights, contact us at support@learningassistant.app.