Privacy Policy

1. Introduction

Schlr (“we”, “us”, or “our”) operates the Schlr website and study platform (the “Service”). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have over it.

By creating an account or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.

2. Who We Are

Schlr is operated under the trading name “Schlr”. For all privacy-related enquiries, contact us at:

Email: support@schlr.dev

3. Age Requirement

The Service is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you are under 13, please do not create an account. If we become aware that a child under 13 has created an account, we will delete it promptly. Parents or guardians who believe their child has done so may contact us at support@schlr.dev.

4. What Information We Collect

Information you provide directly:

• Your name, email address, and password when you create an account.
• Lecture files you upload (PDF, DOCX, or PPTX) and text you submit for essay checking or chat.
• Billing information, handled directly by Stripe — we do not receive or store your card details.

Information generated through your use of the Service:

• Notes, flashcards, practice tests, and chat history generated from your uploaded content.
• Usage metadata, such as which features you use and how often, used to enforce plan limits.

Information collected automatically:

• Basic device and browser information (browser type, operating system).
• IP address, used for basic rate-limiting and abuse prevention.

5. How We Use Your Information

• To create and maintain your account, and authenticate you when you sign in.
• To process your uploaded files and generate notes, flashcards, practice tests, and chat responses.
• To process payments and manage your subscription.
• To send transactional emails: account verification, password resets, and billing receipts.
• To enforce plan limits and prevent abuse of the Service.
• To monitor Service performance, uptime, and security.
• To comply with applicable legal obligations.

We do not send marketing emails or newsletters without your explicit consent, and we do not sell your personal information.

6. AI Processing of Your Content

When you upload a lecture file or send a chat message, the extracted text is sent to our AI provider, Anthropic, to generate notes, flashcards, practice tests, and chat responses. This processing is necessary to provide the core functionality of the Service.

We do not control Anthropic's infrastructure directly; their handling of data sent via their API is governed by their own terms and privacy policy. We do not upload your raw files to Anthropic — only the extracted text content required to generate your requested output.

7. Legal Basis for Processing

For Australian users, we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

For users in the European Economic Area or United Kingdom, we rely on the following legal bases under the UK/EU GDPR:

• Contract — processing necessary to provide the Service you signed up for.
• Consent — where you have explicitly agreed, such as to receive optional communications.
• Legitimate interests — for security, abuse prevention, and Service performance monitoring.

8. Third-Party Services We Use

We use the following third-party services to operate the Service. Each may process your personal information as described:

Supabase — securely stores your account, uploaded content, and generated materials. Data is hosted on AWS infrastructure and may be stored outside Australia.

Anthropic — processes extracted text from your uploads and chat messages to generate AI content, as described in Section 6.

Stripe — processes subscription payments. We never receive or store your card details.

Resend — sends transactional emails, including account verification, password resets, and receipts.

Vercel — hosts the Service and may collect technical data including IP addresses and access logs as part of standard hosting.

We do not sell, rent, or trade your personal information to any third party, and we do not use your information for targeted advertising.

9. Data Retention

• Your account, uploaded content, and generated materials are retained for as long as your account is active.
• If you delete your account, your uploaded content and generated materials are deleted within 30 days.
• Billing records are retained as required by applicable tax and accounting law.

10. International Data Transfers

Some third-party services we use may store or process your data outside Australia. Where this occurs, we take reasonable steps to ensure those recipients handle your information consistently with the Australian Privacy Principles. For EEA and UK users, transfers are covered by standard contractual clauses or adequacy decisions applicable to each provider.

11. Your Rights

All users:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — delete your account and associated data from your account settings, or by contacting us.

EEA and UK users (additional rights under GDPR):

• Restriction — ask us to restrict processing in certain circumstances.
• Portability — request your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Complaint — lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@schlr.dev. We will respond within 30 days.

12. Security

We take reasonable technical and organisational measures to protect your personal information, including encrypted data transmission (HTTPS), row-level access controls on our database, and rate limiting on sensitive endpoints. However, no method of electronic transmission or storage is completely secure.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this document. For material changes, we will notify users by email where practicable.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information:

Schlr
Email: support@schlr.dev