⚠️ Template — not legal advice. Review with a lawyer and fill in every bracketed field. If you serve users in the EU/UK (GDPR) or California (CCPA), confirm this meets those requirements.

Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how [COMPANY NAME] ("we") collects, uses, and protects your information when you use MedDaph.com (the "Service").

1. What we collect

Data	Why
Email & account credentials	To create and secure your account (handled by our auth provider, Supabase).
Study material you upload (text, PDFs, images)	To generate quiz questions. Sent to our AI provider for processing; not used to train models.
Usage data (quizzes generated, plan, timestamps)	To enforce plan limits and understand product usage.
Payment data	Processed by Stripe. We never see or store your full card details.

2. Third-party processors

Supabase — authentication and database hosting.
Anthropic (Claude) — AI processing of your study material to generate questions.
Stripe — subscription payments.
Vercel — application hosting.
[Google AdSense / your ad network] — advertising on the free tier, if enabled.

3. How we use your data

To provide and maintain the Service, enforce usage limits, process payments, communicate with you about your account, and comply with legal obligations. We do not sell your personal data.

4. Cookies & local storage

We use local storage to keep you signed in. If advertising is enabled on the free tier, ad partners may set cookies; see [ad network]'s policy.

5. Data retention

We keep your account data while your account is active. Uploaded study material is processed transiently and [not stored after the quiz is generated / retained for X days].

6. Your rights

You can export or permanently delete your account and data at any time from your account settings. Depending on your location (e.g. GDPR/CCPA), you may have additional rights to access, correct, or restrict processing — contact us to exercise them.

7. Security

We use industry-standard measures to protect your data, including encryption in transit. No method is 100% secure, but we work to safeguard your information.

8. Children

The Service is not directed to children under [13/16]. We do not knowingly collect their data.

9. Changes & contact

We may update this policy; material changes will be notified. Questions or requests? Contact [CONTACT EMAIL].