Study Flow ("us", "we", or "our") operates the https://studyflows.site website (the "Service"). This page informs you of our policies regarding the collection, use, retention, deletion, and disclosure of personal data when you use our Service and the choices you have associated with that data.

1. Information Collection and Use

We collect several different types of information for various purposes to provide and improve our educational Service to you:

• Personal Account Data: Email address, display name, profile photo (via Google/Firebase Auth), and subscription status.
• Educational & Usage Data: Saved playlists, timestamped study notes, quiz attempts, learning progress, and streak analytics.
• Technical Diagnostics: Browser type, IP address, device telemetry, and standard session cookies for authentication.

2. Google API & Workspace Data Usage (Google Drive Integration)

Study Flow offers an optional integration with Google Drive allowing learners to view their educational PDFs/study materials alongside video lectures and upload timestamped study notes directly into their own Google Drive account.

A. Scope of Access

• https://www.googleapis.com/auth/drive.file: Used to allow students to create, save, and upload study notes and flashcard summaries generated within Study Flow directly to their personal Google Drive (with an application identifier), and to open or view study materials specifically selected and shared by the user.

B. Google User Data Retention Policy

No Persistent Server Storage: Study Flow does NOT copy, store, or retain your Google Drive files, document contents, or file metadata on our external databases or backend servers.

All Google Drive file listings and contents are streamed directly to the user's browser client via Google's official REST APIs. Google OAuth access tokens are stored strictly in temporary, client-side session memory (sessionStorage) for the duration of the active session and are immediately purged when the session ends or when the user logs out.

C. Google User Data Deletion & Access Revocation Policy

Users have complete and immediate control over their Google Drive data and permissions at all times:

• In-App Disconnection: Users can disconnect Google Drive at any time by clicking the "Disconnect" / "Log out from Drive" button in the Study Flow Notes panel. This instantly purges all OAuth tokens and cached file listings from client session storage.
• Google Account Permissions Revocation: Users can permanently revoke Study Flow's access to their Google Account at any time by visiting Google Account Security & Third-Party Permissions.
• Account Deletion Request: If a user requests account deletion by contacting studyflows.site@gmail.com, all user records stored in our database (e.g. user profile and quiz history) are permanently erased within 30 days.

D. Limited Use & AI/ML Model Training Restrictions

• No AI/ML Model Training: Under the Google Workspace API User Data and Developer Policy, Study Flow strictly complies with all Limited Use restrictions. We do NOT use, transfer, or sell Google user data—including raw, aggregated, or derived data—to create, train, fine-tune, or improve foundational or generalized artificial intelligence (AI) and machine learning (ML) models.
• No Third-Party Data Transfer: Google Drive user data is never transferred, sold, or shared with third-party advertising platforms, data brokers, or external AI providers.

3. Security of Data

The security of your personal data is essential to us. All API communications between Study Flow, Firebase, and Google APIs are encrypted in transit using industry-standard TLS/HTTPS protocols.

4. Contact Us

If you have questions, privacy inquiries, or data deletion requests regarding this policy, please reach out to us at:
Email: studyflows.site@gmail.com
Website: https://studyflows.site