OraStudy

Privacy Policy

Last updated: 11 June 2026

OraStudy ("OraStudy", "we", "us") is a study application that lets you upload your own documents (PDFs) and use AI features such as quizzes, summaries, and explanations grounded in those documents. This policy explains what we collect, why, and the choices you have. By using OraStudy you agree to this policy.

1. Information we collect

• Account information. When you create an account with your email and a password, or sign in with Google, we collect your name and email address (and profile picture, if signing in with Google) to create and identify your account. We never see your Google password, and your app password is stored only in hashed form by our authentication provider.
• Documents you upload. The PDFs you add to your library, and text extracted from them, so we can display them and power study features.
• Study activity. Reading progress, highlights, notes, bookmarks, quizzes you generate, and your answers — so the app can show your history and track goals.
• Usage analytics. To run the service reliably and manage quotas, we record reading-session activity (such as time spent and pages viewed) and logs of AI requests (such as which AI provider was used, token counts, and timing). These logs are not used to train AI models.
• Google Drive (optional). If you connect Google Drive, we request the drive.file scope only. This means OraStudy can only access files it creates in your Drive — it cannot see, read, or modify any of your other Drive files. We store an encrypted Google refresh token so we can save your files to your Drive on your behalf.
• Device & technical data. Basic technical information needed to deliver notifications and keep the service reliable, such as a push-notification (FCM) token, crash reports (collected via Firebase Crashlytics), and error/diagnostic logs.

2. How we use your information

• To provide core features: storing and displaying your documents, generating quizzes, summaries, and explanations, and saving your progress.
• To operate AI features. Relevant excerpts of your documents and your questions are sent to AI model providers (see §4) to generate responses. We send only the portions needed to answer — never your entire library by default.
• To sync files to your own Google Drive when you connect it.
• To send notifications you have enabled, and to maintain security, prevent abuse, and fix problems.

3. How your data is stored

Your account data, study activity, and document text are stored using Supabase (database and authentication). Uploaded PDF files are stored using Cloudinary. Access is protected by row-level security so you can only access your own data. Google Drive refresh tokens are encrypted at rest.

4. Third-party services

OraStudy relies on the following processors to deliver the service. Each handles data only as needed to perform its function:

• Google — sign-in and (optionally) Google Drive file sync.
• Supabase — authentication, database, and serverless functions.
• Cloudinary — storage and delivery of your uploaded PDFs.
• AI model providers (which may include Google Gemini, Groq, Mistral, and OpenRouter) — to generate quizzes, summaries, and explanations from the excerpts and questions we send. We send only the text necessary to fulfil your request.

5. Google user data & Limited Use

OraStudy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google account and Drive data only to provide and improve user-facing features in OraStudy; we do not transfer or sell it to third parties except as needed to provide the service or as required by law; and we do not use it for advertising or to train generalized AI models.

6. Data sharing

We share data only with the processors listed in §4, when required by law, or to protect the rights and safety of users and the service. We do not sell personal data.

7. Data retention & deletion

We keep your data while your account is active. You can delete individual documents at any time in the app. To delete your account, open Settings → Privacy → Delete my account — this permanently removes your account and associated data (documents, highlights, notes, quizzes, and activity). You can also email us at the address below to request deletion. To disconnect Google Drive (which revokes our access), use the in-app Drive settings, or revoke OraStudy's access directly from your Google Account permissions page.

8. Security

We use encryption in transit, encrypted storage for sensitive tokens, and access controls to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard measures.

9. Children's privacy

OraStudy is intended for students aged 13 and over. We do not knowingly collect personal information from children under 13.

10. Shared content & copyright

Discover lets you publish a document so other students can find it. Only publish material you own or have the right to share — you confirm this in the app before publishing. Every shared document can be reported in-app ("Report this material"); we review every report and remove material that violates these rules. To report copyright infringement directly (DMCA), email feranmioresajo@gmail.com with the title or link of the material and proof of ownership, and we will remove infringing content promptly.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, an in-app notice.

12. Contact us

For privacy questions or data deletion requests, contact: feranmioresajo@gmail.com