Privacy Policy

Your Privacy Matters

AvaStudy is a personal study app designed for students. We take privacy seriously — especially for younger users — and we are committed to being transparent about how your information is used.

Who This App Is For

AvaStudyis designed for students of all ages, including children. We recommend that parents or guardians be aware of and involved in their child's use of the app, particularly for children under 13.

We do not knowingly collect personal information from children under 13 without parental awareness. If you are a parent or guardian and believe your child has created an account without your knowledge, please contact us and we will promptly delete the account and all associated data.

Parents may also request deletion of a child's account at any time by contacting us or by using the in-app deletion option at Settings → Parents & Safety → Delete Account.

What We Collect

• Your Google account name and email (used only to identify your account)
• Study content you upload — photos of notes, PDF files, or pasted text — used to generate your games. Uploaded files are stored in Firebase Storage and sent to the Claude AI API for processing.
• Your in-app progress: coins, XP, streaks, badges, and game history
• Subscription status — whether you are on the free or paid plan. Payment information is handled entirely by Stripe and is never stored by AvaStudy.
• Push notification preferences and device token — only if you choose to enable push notifications. This is entirely optional and can be turned off at any time in your device settings or in-app Settings.
• Game scores saved to shared-set leaderboards (only when you join a shared set)
• Weak-area tracking: which questions you miss most, stored per study set to personalize practice and daily challenges
• Usage analytics: which features you use, pages you visit, and in-app interactions — collected to help us improve the app

How We Use It

Your data is used only to make the app work for you — to save your progress, generate your study content, and personalize your experience. The only third-party service that receives any of your content is Anthropic's Claude AI API, which processes your uploaded study material to generate games. No personal identifying information is ever included in those requests.

When you are part of a shared study set, your best scores per game type are visible to other members of that set on the leaderboard. Your display name and pet are shown alongside your score — no email address or any other account information is visible to other members. Leaving a shared set removes you from its leaderboard.

Study set creators can see the display names of users who have joined their shared set. Members of a shared set can see each other's display names and scores on the leaderboard. Shared sets are accessible only via a private 5-letter code — they are not publicly searchable or discoverable.

Account Security

Access to your account is authenticated through Google Sign-In. We use Firebase security rules to ensure that only you can read or modify your own account data, study sets, and progress. No other user can access your information.

Data Storage

Your account data and study content are stored securely using Google Firebase. Uploaded photos and PDFs are stored in Firebase Storage; your progress, scores, and game data are stored in Firestore. Only you can see your account data and study sets unless you explicitly share them.

The app also uses your browser's local storage to remember small preferences — such as which challenge nudges you've dismissed and which "how to play" tips you've already seen. This data never leaves your device.

Data Retention

When you delete a study set, it is marked for deletion and removed from your active library immediately. When you delete your account, all associated data is erased immediately and cannot be recovered.

Firebase infrastructure may retain short-term system logs and backups for operational reliability, typically for a period of up to 30 days. These are not accessible toAvaStudy staff and are not tied to your personal account in any identifiable way.

Inactive accounts are not automatically deleted. Your account and data remain stored as long as your account exists. You may delete your account at any time as described in the Deleting Your Data section below.

What You Can Upload

AvaStudy supports the following file types for study guide creation:

• Photos / images — JPG, PNG, or other common image formats
• PDF files — typed or scanned documents
• Pasted text — copy and paste directly from any source

Word documents, PowerPoint files, and other formats are not currently supported. Please do not upload files containing sensitive personal information — only your study material is needed.

Third-Party Services

AvaStudy uses the following third-party services to function. Each provider receives only the minimum data necessary to perform their specific function — none of them receive more information than what is described below.

• Google Sign-In — for authentication. We receive your Google account name and email address.
• Firebase (Google) — for secure data storage, authentication, and push notification delivery.
• Stripe — processes subscription billing for paid accounts. Your payment information (card number, billing address) is sent directly to Stripe and never stored by AvaStudy. Stripe may store a customer ID to manage billing. See stripe.com/privacy.
• Anthropic Claude AI API— converts your uploaded photos, PDFs, or pasted notes into flashcards and games. The content you upload is transmitted to Anthropic's servers for processing. No personal identifying information — such as your name or email — is included in these requests.
  
  Per Anthropic's API usage policies, content submitted via the API is not used to train Anthropic's models and is not retained beyond what is necessary to complete the request. Uploaded content is not permanently stored by Anthropic. For full details, see anthropic.com/privacy.
• Amplitude — collects anonymous usage analytics such as which features you use and how you navigate the app. Your account ID is used to connect events across sessions, but no name, email, or study content is shared.
• Microsoft Clarity — records anonymized session replays, heatmaps, and interaction data (clicks, scrolls, mouse movement) to help us understand how the app is used and identify issues.
  
  The following are explicitly excluded from Clarity's capture: uploaded study content (photos, PDFs, and pasted text), text typed into upload fields, and any other sensitive input areas. Text inputs throughout the app are masked. Uploaded images and PDF content are never part of session replay recordings.
  
  You can opt out of Clarity at any time via clarity.microsoft.com/optout.

Amplitude and Microsoft Clarity may collect standard device and browser information as part of their operation. Neither service receives your name, email, study content, or game data.

Deleting Your Data

You can delete individual study sets at any time from within the app. You also have the right to permanently delete your entire account and all associated data at any time.

To delete your account, go to Settings → Parents & Safety → Delete Account. Confirming will immediately and permanently erase:

• Your profile, name, and all account settings
• All coins, XP, streaks, badges, and game history
• Your pet and all owned accessories
• All study sets you created (including their content and leaderboards)
• Your entries on any shared-set leaderboards you joined
• Your daily challenges, missions, and board progress

This action cannot be undone. Deletion is processed immediately — there is no waiting period or recovery option. As noted in the Data Retention section, Firebase system infrastructure may retain short-term operational logs for up to 30 days, but your account and personal data are removed immediately.

Questions?

If you have any questions about how your data is handled — including requests related to a child's account — contact us and we'll get back to you promptly.