Privacy Policy

This policy is published by the operator of TextbookOS ("we", "us") — an individual-run study app currently in private beta, not yet a registered company (a company will take over as publisher once formed, post-traction). Contact: support@textbookos.com.

Plain-English version: this explains what TextbookOS collects, why, and what you (or your parent/guardian) can do about it.

1. Who this is for, and who's in charge of the account

TextbookOS is a study app for students. You can sign up yourself if you meet Google's own minimum age for holding a personal Google Account (13 in many places, sometimes higher depending on local law) — we rely on that gate rather than running a separate age-verification system.

If you're under 13: you can still use TextbookOS, but a parent or legal guardian must create and manage the account. That parent/guardian is the Account Holder — the person responsible for the account, its content, and (once paid plans exist) any payments on it. A parent or guardian is also welcome to manage the account for an older teen if they'd rather handle it themselves.

2. What we collect

In short: your Google sign-in info, what you put into TextbookOS, and basic usage counts to keep the free plan fair.

• Account info — your name, email address, and profile photo, from signing in with Google.
• Your content — the notes you write, PDFs you upload, chats you import, and your conversations with the AI tutor.
• Browser extension activity — if you use the TextbookOS Chrome extension (currently in private developer beta), it only captures content when you actively trigger it — never in the background.
• Usage counts — how many tutor questions, PDF pages, and note approvals you've used today, so we can apply plan limits fairly and honestly.
• Basic technical info — IP address and device/browser details, collected automatically by our infrastructure (Cloudflare) for security and to keep the service running.
• Payment info (only once a paid plan is available) — handled directly by our payment processor, Razorpay. We never see or store your full card number.

We do not collect more than we need to run the app, and we do not buy data about you from anyone else.

3. Who we share it with

We don't sell your data, and we don't share it with advertisers — see Section 5. We use a small number of service providers to run TextbookOS, each only for the job below:

Provider	What they handle
Google	Sign-in (via Supabase Auth)
Supabase	Our database and authentication infrastructure (hosted in Mumbai, India)
OpenAI, Anthropic	Power the AI tutor and note extraction on paid plans. Notes, uploads, and chat prompts sent through these providers are private and not used to train their public AI models, per their commercial API terms.
Google Gemini (AI Studio)	Powers free-tier note extraction. Free-tier requests may use standard API processing that Google may use, in anonymized form, to improve its own services — this is Google's free-tier policy, not something TextbookOS opts you into separately. Paid plans avoid this.
Cloudflare	Domain, content delivery, and security/rate-limiting
Razorpay	Payment processing, once a paid plan is available

4. How long we keep it, and how to delete it

We keep your account and content for as long as your account is active, so your notebook is there when you come back.

Deleting your data: today, deleting your account is a manual process — email support@textbookos.com from the account's sign-in email (or have your parent/guardian do so, if they're the Account Holder), and we'll delete your account and content.

Some records (like payment records, once payments exist) may need to be kept longer to meet legal/tax requirements.

5. Advertising

TextbookOS does not show ads, does not build advertising profiles from your data, and does not share your data with ad networks. If that ever changes, we'll update this policy first and tell you clearly — not bury it in a settings toggle.

6. If you're in the European Union (GDPR)

TextbookOS isn't specifically built for the EU market today, but if you use it from there: the age at which you can consent to an online service on your own varies by country (13 to 16, set by each EU member state). If you're below that age where you live, a parent or guardian needs to consent on your behalf — the same parent-managed-account approach as Section 1. You have the usual GDPR rights (access, correction, deletion, portability) — contact support@textbookos.com to use them.

7. Security

We use industry-standard practices to protect your account (Google-backed sign-in, encrypted connections, access controls on our database) — but no system is perfectly unbreakable, and we can't guarantee absolute security.

8. Changes to this policy

If we make a meaningful change to this policy, we'll post the update here and, where required, let Account Holders know directly.

9. Contact

Questions, deletion requests, or anything else: support@textbookos.com.