Privacy Policy

1. Introduction

LearnCenter LLC (“LearnCenter,” “we,” “our,” or “us”) is committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your personal information. This Privacy Policy explains our data practices when you use the LearnCenter application and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Scope of This Policy

This Privacy Policy applies to all users of the LearnCenter web application located at learncenter.dev and any associated services. This policy does not apply to third-party websites, applications, or services that may be linked from our Service, each of which may have their own privacy policies.

3. Information We Collect

We collect several categories of information to provide and improve our Service:

3.1 Account Information

• Email Address: Required for account creation, authentication, and communication.
• Display Name: Optional name you choose to display within the Service.
• Password: Encrypted and stored securely via Firebase Authentication.
• Google Account Data: If you sign up with Google, we receive your email address and basic profile information from Google.

3.2 User-Generated Content

• Subjects and Decks: Organizational structures you create for your study materials.
• Flashcards: The front and back content of flashcards you create, including text, formatting, and LaTeX mathematical expressions.
• Study Materials for AI Processing: Text content you provide to our AI flashcard generation feature.

3.3 Usage and Analytics Data

• Study Session Data: Cards studied, session duration, accuracy rates, and study patterns.
• Feature Usage: Which features you use, button clicks, and navigation patterns.
• Performance Metrics: Learning progress, spaced repetition intervals, and retention statistics.

3.4 Device and Technical Information

• IP Address: For security, fraud prevention, and approximate geographic location.
• Browser Type and Version: To ensure compatibility and troubleshoot issues.
• Device Information: Operating system, screen resolution, and device type.
• Referral Source: How you arrived at our Service.

3.5 Payment Information

Payment processing is handled entirely by Stripe, Inc. We do not store credit card numbers, bank account details, or other financial information on our servers. Stripe may collect and store payment information in accordance with their privacy policy. We receive only:

• Confirmation of successful payments
• Subscription status and billing period
• Transaction history for your account

4. How We Use Your Information

We use collected information for the following purposes:

4.1 Service Provision

• Creating and managing your account
• Storing and displaying your flashcards and study materials
• Powering the spaced repetition learning algorithm
• Processing payments and managing subscriptions
• Providing customer support

4.2 AI-Powered Features

• Processing text you submit to generate flashcards automatically
• Transmitting content to Google Gemini for AI processing (see Section 6)
• Tracking AI credit usage for billing purposes

4.3 Analytics and Improvement

• Understanding how users interact with the Service
• Identifying bugs and performance issues
• Developing new features based on usage patterns
• Generating aggregated, anonymized statistics

4.4 Communication

• Sending email verification and password reset emails
• Notifying you of important account or service changes
• Responding to your support requests

4.5 Security and Fraud Prevention

• Detecting and preventing fraudulent activity
• Protecting against unauthorized access to accounts
• Maintaining the security and integrity of the Service

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you requested when creating an account.
• Consent: Where you have given explicit consent, such as agreeing to this Privacy Policy or opting into certain features.
• Legitimate Interests: For analytics, security, and service improvement, balanced against your privacy rights.
• Legal Obligation: Where required by applicable law or regulation.

6. Third-Party Service Providers

We share information with trusted third-party service providers who help us operate and improve our Service:

7. When We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Service Providers: As described in Section 6, to operate and improve the Service.
• Legal Requirements: When required by law, subpoena, court order, or other legal process.
• Protection of Rights: To protect the rights, property, or safety of LearnCenter, our users, or others.
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or part of our assets, your information may be transferred as part of that transaction.
• With Your Consent: For any other purpose disclosed to you with your consent.

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in Transit: All data transmitted between your browser and our servers uses TLS/HTTPS encryption.
• Encryption at Rest: Data stored in our databases is encrypted using industry-standard encryption.
• Secure Authentication: Passwords are hashed using bcrypt; we support Google OAuth for secure third-party authentication.
• Access Controls: Access to user data is restricted to authorized personnel on a need-to-know basis.
• Firebase App Check: We use Firebase App Check to prevent unauthorized API access.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service while your account is active
• Comply with legal obligations (e.g., tax and accounting requirements)
• Resolve disputes and enforce our agreements

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law. Aggregated, anonymized data may be retained indefinitely for analytics purposes.

10. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

10.1 Rights for All Users

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate information via your account settings.
• Deletion: Delete your account and associated data through Settings → Account → Delete Account.
• Data Portability: Export your flashcards in CSV format via the Export feature.

10.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of personal information collected, used, and disclosed in the past 12 months.
• Right to Delete: Request deletion of personal information, subject to exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: We do not “sell” or “share” personal information as defined by CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond those necessary to provide the Service.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Do Not Sell or Share My Personal Information: LearnCenter does not sell or share your personal information for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals.

10.3 Virginia, Colorado, Connecticut, and Other State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and port their data, as well as the right to opt out of targeted advertising and profiling. Contact us to exercise these rights.

10.4 How to Exercise Your Rights

To exercise your privacy rights, you may:

• Use the account settings at Settings → Account
• Email us at privacy@learncenter.dev

We will respond to verifiable requests within 45 days. We may extend this period by an additional 45 days when reasonably necessary, with prior notice.

11. Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@learncenter.dev. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

12. International Data Transfers

LearnCenter is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers are located. These countries may have different data protection laws than your country of residence. By using the Service, you consent to the transfer of your information to the United States.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy with a new “Last Updated” date
• Sending an email notification for significant changes
• Displaying a notice within the Service

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: