danesh Privacy Policy

This Privacy Policy describes how danesh processes information for United States consumers. Contact support@danesh.app with privacy questions.

Information collected

danesh may process your email address, optional display name, age band (13–17 or 18+), guardian-permission attestation, study activity, custom classes and flashcards, uploaded documents and extracted text, AI prompts and responses, subscription status, device and security logs, product-analytics events, error diagnostics, privacy-masked session interactions when replay is enabled, and functional browser storage. Birth month and year are used locally to calculate an age band and are not retained.

Why information is used

Information is used to provide accounts and study features, ground AI responses in your materials, process payments, prevent abuse, enforce limits, support users, maintain security, and comply with law. danesh does not sell personal data, use it for targeted advertising, or install third-party advertising trackers.

Service providers

Supabase provides authentication, database, functions, and file storage; OpenAI processes AI inputs and outputs; Stripe processes subscriptions and billing; Cloudflare hosts and protects the web application; PostHog provides product analytics and error diagnostics, with privacy-masked session replay when enabled; HeyCatch provides marketing-site analytics. PostHog and HeyCatch may process page URLs, interaction events, pseudonymous device identifiers, browser and device details, IP-derived location, and the danesh account identifier and email after sign-in. Their processing is governed by their agreements and privacy practices. OpenAI API inputs are not used to train models by default; default abuse-monitoring logs may be retained for up to 30 days unless a different approved retention control applies.

Retention and deletion

User content remains until you delete it or delete your account. Account deletion removes application content and stored files, subject to technical completion and legally required retention of limited billing, fraud-prevention, security, tax, or dispute records. Temporary AI files are configured to expire after one hour and are also deleted after processing when cleanup succeeds.

Choices and security

You may access, correct, export, or delete applicable account data through the service or by contacting support@danesh.app. No system is perfectly secure; danesh uses access controls, encryption in transit, rate limits, monitoring, and least-privilege policies to reduce risk.

Children and scope

danesh is not directed to children under 13 and blocks registration when the neutral age screen indicates an under-13 user. danesh is offered only to United States consumers. School-managed accounts and international availability require separate review.