Privacy Policy

Overview

Astra AI is an AI study assistant. You can ask it questions, turn your own notes into flashcards, quizzes and study plans, and rehearse exams before you sit them. This policy explains what personal data we collect when you use astraai.lol or the Astra AI apps, why we collect it, and what you can ask us to do with it.

Privacy questions and data requests go to support@astraai.lol.

Information we collect

We collect the data we need to run your account and the study features you use:

• Account data: the name, email address and profile picture we receive from the Google account you sign in with.
• Study material you add: the questions you ask, and the notes, slides, PDFs and photos you upload so Astra can explain and practise them with you.
• Generated content: the explanations, flashcards, quizzes, study plans and mock exams produced for your account.
• Subscription data: your plan, its status and its renewal date. Card and bank details are handled by our payment provider and never reach our servers.
• Usage and device data: the pages and features you use, your browser, operating system and device type, and an approximate location derived from your IP address.

Why we use it

We use personal data to provide the service, to run your account and subscription, and to keep Astra AI working properly:

• To generate the explanations, practice and plans you ask for from the material you add.
• To bill your subscription, manage renewals and answer support requests.
• To understand which features help students and which do not, so we can improve them.
• To detect abuse, fraud and attempts to break these terms or our security.
• To meet tax, accounting and other legal obligations.
• We do not sell your personal data.

The bases we rely on

Where the law asks us to name a legal basis: we process your account, study and subscription data to perform our contract with you; we process usage data for our legitimate interest in running and improving the service; and we rely on your consent for anything optional, such as product email, which you can withdraw at any time.

Who we share it with

We share personal data only with the providers that make the service work, and only as far as they need it:

• Google, for sign-in and for aggregate usage measurement through Google Analytics.
• Stripe, for subscription payments, invoices and refunds.
• Our hosting, database and email providers, which run and deliver the service.
• AI model providers, which process your prompts and study material to produce the answers and practice you asked for.
• We may also disclose data where the law requires it, or to protect the rights and safety of our users.

Cookies and local storage

We use a cookie to keep you signed in and to protect your session, and Google Analytics cookies to measure aggregate usage. We also keep small pieces of state in your browser storage, such as the campaign parameters that brought you to the site and a marker so a completed purchase is not counted twice. You can clear cookies and site data in your browser at any time; signing in again recreates the session cookie.

How long we keep data

Account and study data are kept while your account exists, and are deleted within 30 days of an account deletion request. Payment records are kept for as long as tax and accounting rules require. Aggregate analytics data is retained for up to 14 months.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent you gave earlier. Write to support@astraai.lol and we will answer within 30 days. If you believe we have handled your data badly, you can also complain to the data protection authority in your country.

Students and children

Astra AI is a study tool for learners who can hold their own subscription. If you are younger than the age at which you can consent to data processing where you live, use Astra AI together with a parent or guardian, who should read this policy with you. We do not knowingly collect personal data from children under 13.

Security

Data is encrypted in transit, access to production systems is limited to the engineers who need it, and payment card data is never stored on our servers.

Changes to this policy

When this policy changes we update the date at the top of the page. If a change is significant, we also tell account holders by email before it takes effect.