Your data, handled with care.

• Account data — your name, email address, and password (stored only as a bcrypt hash — we cannot see your password).
• Study content — your chats with Stella, flashcards, study plans, uploaded study material, and memory items Stella keeps to personalize your sessions.
• Usage & billing data — plan tier, token/quota usage, payment status and payment IDs. Card, UPI, and bank details never touch our servers — they are handled entirely by Razorpay.
• Referral & promo data — your referral relationships, promo codes used, and any rewards earned.
• Technical data — access logs (endpoint, timestamp, status) and the notification subscription of a device if you enable reminders. Authentication tokens are kept in your browser's local or session storage on your own device.

• To run the Service: generating AI responses, keeping your chats and cards in sync across devices, remembering your context between sessions.
• To meter quotas and process subscription billing.
• To secure the Service: authentication, rate limiting, and abuse prevention.
• To send you things you asked for: verification codes, password resets, and optional study reminders you can switch off at any time.
• To help you when you contact support.

We do not train AI models on your content. Your conversations, flashcards, plans and uploaded study material are used only to run the Service for you — to generate responses and to remember your context between sessions. They are never used to improve or train models for anyone else, and they are never used for advertising. We do not sell or rent your personal data to anyone.

• Razorpay processes payments under its own privacy policy.
• Vercel serves the static website and app files.
• Google — transactional emails are sent via Gmail SMTP; if you install the app and enable reminders, push notifications are delivered through your browser vendor's push service (Google, Apple, or Mozilla).
• Optional web-search features query search providers with your search terms only.

• Your data lives on servers we operate ourselves, with encrypted (HTTPS) transport everywhere.
• Passwords are bcrypt-hashed with per-user salts. Access to accounts requires per-user API credentials.
• We keep daily database backups so your study history survives hardware failure. Backups are rotated automatically and old snapshots are deleted on a schedule; if you delete your account, any residual fragments in backups are removed as the rotation proceeds.
• No system is perfectly secure; if we become aware of a breach affecting your data we will notify you without undue delay.

• We keep your data for as long as your account is active.
• You can delete individual chats and study items in the app at any time.
• You can request full account deletion by emailing us from your registered address; we will delete your account data on request, except minimal billing records we must retain for tax and accounting law.

Email us to access, correct, export, or delete your personal data. We respond to every request. If you are in a jurisdiction with specific data-protection rights (including under India's DPDP Act), we honour those rights.

In the app you can already export much of your data yourself: chats download as Markdown from the message itself, and any deck you build exports to Anki. You can delete individual chats and study items at any time, and you can switch off study reminders from the app.

Stella is intended for users 16 and older. We do not knowingly collect data from children under 16; if you believe a child has created an account, contact us and we will remove it.

If we materially change this policy we will announce it in the app or by email and update the date above.

Privacy questions, data requests, or grievances: stella.cured.my.amnesia@gmail.com. We aim to acknowledge within 72 hours.