Privacy Policy

The short version

Architecture

StudyMind is built on a local-first architecture with zero server storage. The application does not operate a backend that stores your documents, notes or personal data. All processing that can happen on your device happens on your device.

The app is a set of static files (HTML, CSS and JavaScript) hosted directly on GitHub Pages and can also be run locally from your own machine. GitHub Pages serves those files as-is; it is not a StudyMind server and it has no database, API or server-side code that could receive your documents, notes or API key. Because no personal user data or document contents ever hit a server owned by us, there is nothing for us to collect, retain or hand over.

The site is split into two static pages: the marketing landing page (index.html), which contains no user data handling at all, and the application itself (app.html), where the behaviour described here applies. Both are served from the same origin and neither talks to any StudyMind-owned service.

Because there is no StudyMind server in the middle, there is no StudyMind database that could be breached, sold or synced. Your study material simply is not ours to hold.

What leaves your device

The only data that ever leaves your device is the text extracted from your PDFs, which is sent directly from your browser to OpenRouter for AI processing. StudyMind itself does not receive, store or log this content.

• The request goes browser → OpenRouter. It is authenticated with your own API key, which you supply and which stays in your browser.
• Nothing is sent while you are only reading, organizing or re-reading content you already generated.
• OpenRouter processes the request to generate your summary, notes, quiz, flashcards or explanation, in line with their policies.

Where your data is stored

Because your API key and notes live in your browser’s local storage, they never leave your device except where you explicitly use them — for example, your API key is used to authenticate requests you initiate to OpenRouter.

Data retention

StudyMind maintains zero server storage. There are no StudyMind servers holding your data to retain or delete. Your data persists only where you store it locally (browser localStorage and IndexedDB). You can delete it at any time with the in-app Settings → Clear All Data button, or by clearing your browser’s site data for this app.

Tracking and analytics

• No tracking. StudyMind does not track your activity across sites or services.
• No analytics. StudyMind does not collect analytics, telemetry, usage statistics or crash reports.
• No cookies. The app uses localStorage and IndexedDB on your device only; there are no advertising or profiling cookies.

In-app consent (why the dialog cannot be skipped)

The first time you open StudyMind — and again whenever this policy changes to a new version — the app shows a Privacy & Data consent dialog. It is deliberately blocking:

1. You must tick the confirmation checkbox. The “Accept & Continue” button stays disabled until you do.
2. There is no close button, clicking the backdrop does nothing, and Esc does not dismiss it.
3. While consent is missing, the entire app is locked — content becomes inert, pointer input is blocked, and keyboard focus is trapped inside the dialog.
4. Your acceptance is stored as a version-stamped, integrity-checked record. If it is deleted, corrupted, or made stale by a policy update, the app re-locks and asks again.
5. The record is re-verified continuously (on an interval and whenever the tab regains focus), not just once at page load.

Technical note: consent enforcement runs entirely in your own browser, as part of the app you are running. It makes accidental or casual bypass impossible. A person who deliberately edits the application source on their own machine can change any front-end behaviour — that is true of any web app.

Compliance

This policy and the StudyMind architecture are designed to comply with:

• DPDP 2023 — India’s Digital Personal Data Protection Act, 2023
• GDPR — the EU General Data Protection Regulation

Because StudyMind practices zero server storage, no tracking and no analytics, it processes a minimal amount of personal data and stores what it does store locally, under your control.

Your controls

• Delete everything: Settings → Clear All Data — one click that wipes your API key, notes, chats, stats and consent record from this browser and restarts the app fresh, like a new user.
• Delete everything (browser-level): clear this site’s data in your browser settings — that removes notes (IndexedDB), your API key and the consent record.
• Remove your API key: Settings → API Key → Clear.
• Review consent again: Settings → Privacy & Legal → Review & Re-accept.
• Use it offline: the app runs locally; you only need the network for AI generation through your own key.

Changes to this policy

Any changes to this privacy policy are posted on this page. When the policy version changes, the in-app consent dialog is shown again before the app can be used.

Contact

Questions about privacy? Open an issue in the project repository and the StudyMind AI maintainers will respond.

This page is the official privacy policy for StudyMind AI.