Privacy Policy

Last updated: January 24, 2026

Affectly ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our emotion-aware learning platform.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide, including:

  • Name and email address when creating an account
  • Profile information and preferences
  • Payment information for premium services (processed by secure third-party providers)
  • Communications you send to us

1.2 Learning and Emotional Data

To provide our emotion-aware learning services, we collect:

  • Emotional state indicators you voluntarily provide
  • Learning progress, session data, and performance metrics
  • Interaction patterns with our platform
  • Flashcard reviews and study habits

1.3 Automatically Collected Information

We automatically collect certain information, including:

  • Device information (type, operating system, browser)
  • IP address and general location data
  • Usage data and analytics
  • Cookies and similar tracking technologies

2. How We Use Your Information

We use the collected information to:

  • Provide, personalize, and improve our learning services
  • Adapt content based on your emotional state and learning preferences
  • Process transactions and manage your account
  • Communicate with you about updates, features, and support
  • Analyze usage patterns to enhance our platform
  • Ensure security and prevent fraud
  • Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third parties who assist in operating our platform (hosting, analytics, payment processing)
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with mergers, acquisitions, or asset sales
  • With Your Consent: For any other purpose with your explicit consent

4. Data Security

We implement industry-standard security measures to protect your information, including encryption, secure servers, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specific retention periods include:

  • Account data: Retained until you delete your account
  • Learning sessions: Retained for 3 years after last activity, then automatically archived
  • Flashcard data: Retained until you delete them or your account
  • Uploaded documents: Retained for 1 year after upload unless deleted earlier
  • Analytics data: Aggregated and anonymized after 90 days
  • Audit logs: Retained for 7 years for compliance purposes

You may request deletion of your data at any time, subject to legal retention requirements. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal information
  • Object to or restrict certain processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

6.1 Australian Privacy Act Rights

If you are in Australia, you have rights under the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs). You have the right to:

  • Access: Request access to the personal information we hold about you
  • Correction: Request correction of inaccurate, incomplete, or out-of-date information
  • Complaint: Lodge a complaint about our handling of your personal information
  • Anonymity: Choose not to identify yourself in certain circumstances where lawful and practicable
  • Direct marketing opt-out: Opt out of direct marketing communications at any time

Overseas Disclosure: Your data may be processed by our service providers located outside Australia, including in the United States (Supabase, Groq). These providers are subject to contractual obligations to protect your data in accordance with Australian privacy standards.

Complaints: If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone at 1300 363 992.

6.2 GDPR Rights (European Users)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including access, rectification, erasure, restriction, portability, and objection rights.

6.3 CCPA Rights (California Users)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information (note: we do not sell personal information).

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. You can manage cookie preferences through your browser settings.

8. Third-Party Services

Our platform integrates with the following third-party services:

  • Supabase (Database & Authentication): Stores your account data, learning progress, and session history. Supabase processes data in the United States. Supabase Privacy Policy
  • Groq (AI Processing): Powers our AI tutor. Your messages are sent to Groq for processing but are not stored or used for training. Groq Privacy Policy
  • Vercel (Hosting): Hosts our application. May collect basic analytics and performance data. Vercel Privacy Policy

Our platform may also contain links to external websites. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

9. Children's Privacy

Our service is not directed to children under 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Affectly
Email: origae.dev@gmail.com