Aral.ai

Privacy Policy & Data Deletion

Last updated September 4, 2026

1. Overview

Aral.ai ("we", "our", or "the Service") is committed to protecting your privacy. This policy explains what information we collect when you use our AI study companion, how we use it, and how you can manage or request the deletion of your personal data.

2. Information We Collect

  • Account Information: When you sign up via Email, Google OAuth, or Facebook Login, we collect your email address, display name, and avatar URL provided by the identity provider.
  • Study Materials & Notes: Documents (PDFs, images, text files) you upload for AI summary, quiz generation, and chat tutoring.
  • Activity & Focus Metrics: Pomodoro timer sessions, flashcard review history, quiz scores, and study streak counters.
  • Technical Data: Essential session cookies and security tokens to keep you logged in safely.

3. How We Use Your Data

We use your data solely to provide, personalize, and improve your study experience:

  • Extracting study notes, flashcards, and interactive quizzes from your uploaded course materials.
  • Powering your personalized AI study tutor conversations.
  • Synchronizing your study progress across devices.
  • Preventing abuse and enforcing rate limits.

Note: We do not sell your personal data or uploaded academic materials to third parties or data brokers.

4. Third-Party Services & Infrastructure

We integrate with trusted service providers strictly for authentication, database hosting, and AI generation:

  • Supabase: Secure PostgreSQL database, user authentication, session management, and encrypted storage.
  • Google OAuth & Meta / Facebook Login: Optional, secure social single sign-on (SSO).
  • AI Processing Engine: AI processing for study material summarization, flashcards, and quizzes.

5. Google API Services & User Data PolicyGoogle Verification

Aral.ai allows users to sign in using their Google account via Google OAuth. We value your privacy and are transparent about how your Google data is handled:

Google Data Accessed:

When you authenticate with Google, we request access only to your primary Google account email address (email), basic profile information including your display name and profile picture URL (profile), and your unique identifier (openid).

Purpose of Collection:

This data is strictly utilized to authenticate your identity, create and manage your Aral.ai account profile, and safeguard your study materials. We do not access your Google Drive, Gmail, or any other personal Google services.

Data Storage & Protection:

All Google user data is transmitted securely over TLS/SSL encryption and stored in our protected database managed by Supabase, protected with strict row-level security (RLS) policies.

No Selling or AI Training:

We do not sell, rent, or transfer your Google user data to data brokers or advertising networks. We never use your Google user data to train general-purpose artificial intelligence or machine learning models.

Google API Services Limited Use Disclosure:

Aral.ai's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. User Data Deletion & Access RevocationCompliance

According to Google API Policies, Meta/Facebook Platform rules, and data privacy regulations (such as GDPR and the Data Privacy Act), you have full control over your personal data and account records stored on Aral.ai.

Option A: Revoke Google Account Access

  1. Visit your Google Account's Third-party apps & services dashboard at myaccount.google.com/connections.
  2. Locate Aral.ai in your list of connected apps.
  3. Click Delete all connections or Remove Access to immediately revoke permissions.

Option B: Automatic In-App Deletion

  1. Log in to your account at aral-ai-lab.vercel.app.
  2. Navigate to Settings → Account.
  3. Click Delete Account & Data to immediately purge your uploaded files, flashcards, quizzes, and profile.

Option C: Remove Facebook Login App & Data

  1. Go to your Facebook account's Settings & Privacy → Settings.
  2. Select Apps and Websites to view all apps linked to your Facebook profile.
  3. Locate Aral.ai and click Remove.
  4. (Optional) Check the box to delete all posts, videos, or events Aral.ai may have published, and confirm.

Option D: Direct Email Request

You can also email our support team directly at support@aralai.app with the subject line "Data Deletion Request" and the email associated with your account. We will permanently delete all your data within 48 hours.

7. Children's Privacy & Age Limit (COPPA / GDPR Compliance)

Aral.ai is intended for high school, college, and postgraduate students. We do not knowingly collect personal information from children under 13 years of age (or under 16 in the European Union and United Kingdom) without parental or legal guardian consent. If we learn that personal data of a minor under the digital consent age has been collected without verifiable consent, we will promptly delete that data.

8. Contact Us

If you have any questions or feedback regarding this Privacy Policy or your data, reach out to us at:

Email: support@aralai.app

← Back to Aral.ai
Terms•Refund Policy•Data Deletion•Licenses