Privacy Policy

1. Information we collect

Information you give us:

• Account details: name, email address, and sign-in identifiers from Google or Apple if you use them.
• Readiness test and lead details: first name, email address, your answers and results, and approximate country.
• Onboarding answers: for example your exam, test date window, study time, areas you want to focus on, and how you heard about us.
• Study content: lecture recordings, uploaded files and PDFs, pasted text, links, notes, flashcards, questions, answers, chat messages with Bubu, and progress.
• Communications: messages you send us, feedback and support requests.

Information collected automatically:

• Usage data: pages and screens viewed, buttons clicked, features used, test and onboarding steps, referring site and campaign tags (such as utm_source), and timestamps.
• Device data: browser and device type, operating system, language, approximate location derived from IP address, and IP address.
• Local storage: we store some settings and progress in your browser (for example theme, onboarding answers and test results) so the Service works and remembers your choices.

Payment information: if you subscribe on the web, payments are handled by Stripe and on iOS by Apple. We receive limited details such as subscription status, plan, trial dates and the last four digits or type of card, but never your full card number.

2. How we use information

• to provide, operate and personalize the Service, including study plans, readiness results and progress;
• to process recordings and content with AI to create notes, questions, flashcards, explanations, audio and chat replies;
• to create and manage accounts, subscriptions, trials and payments;
• to send service messages such as results, account, security and billing notices;
• to send study tips, product updates and offers by email where permitted by law (and only with your consent where the law requires it), which you can stop at any time with the unsubscribe link;
• to measure and improve the Service, fix bugs and understand which features and marketing channels work;
• to protect the Service, prevent fraud and abuse, enforce our Terms, and comply with law.

Legal bases (EEA/UK users): performance of our contract with you; our legitimate interests in running, securing and improving the Service; your consent (for example marketing emails and some analytics), which you can withdraw at any time; and compliance with legal obligations.

3. AI processing

When you use AI features, the content needed to fulfil your request (such as audio, transcripts, text from documents and your messages) is sent to AI providers, which may include OpenAI, Groq, ElevenLabs and Fish Audio, to transcribe, generate study materials, or produce voice. These providers process it to deliver the result under their terms. We do not permit them to use your content to train their models where their business terms allow us to opt out. Do not include patient or other sensitive health information in content you submit.

4. How we share information

We share personal information only as needed to run the Service:

• Service providers that process data for us, such as Supabase (database, authentication and storage), our hosting and network providers (such as Appwrite and Cloudflare), AI providers listed above, PostHog and Amplitude (product analytics), Stripe (web payments), Apple (App Store payments and sign-in), Google (sign-in), and Superwall (in-app paywall).
• For legal reasons: to comply with law, legal process or government requests, or to protect the rights, safety and security of our users, the public or us.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this policy.
• With your consent or at your direction.

We do not sell personal information and do not "share" it for cross-context behavioral advertising, as those terms are defined under California law.

5. Cookies, local storage and analytics

We use browser storage and similar technologies that are needed for the Service to work (for example to keep you signed in and remember your theme and progress) and analytics tools to understand usage. You can clear or block browser storage in your browser settings, though some features may stop working. We do not use advertising cookies. Our analytics are not enabled on development or preview environments.

6. How long we keep information

We keep personal information for as long as your account is active or as needed to provide the Service, and then delete or anonymize it, except where we must keep it for legal, tax, accounting, security or dispute purposes. Leads from the readiness test are kept until you ask us to delete them or unsubscribe and they are no longer needed. Backups are overwritten on a rolling basis.

7. Security

We use reasonable administrative, technical and organizational safeguards, including encryption in transit, access controls and least-privilege access for staff and vendors. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you as required by law.

8. Your choices and rights

• Access, correct, download or delete your personal information.
• Withdraw consent and unsubscribe from marketing emails using the link in any email.
• Object to or restrict certain processing (EEA/UK).
• Appeal a decision we make about your request, where your state law provides this right.
• Lodge a complaint with your local data protection authority (EEA/UK).

To exercise your rights, email getmarsai@gmail.com. We will verify your request and respond within the time required by law (generally 30 days in the EEA/UK and 45 days under U.S. state laws). You may use an authorized agent where the law allows. We will not discriminate against you for exercising your rights.

U.S. state privacy rights. Residents of California and other states with privacy laws (such as Virginia, Colorado, Connecticut, Utah and Texas) have rights to know, access, correct, delete and port their data, and to opt out of sale, targeted advertising and certain profiling. We do not sell or share personal information for targeted advertising, and we do not use it for profiling that produces legal or similarly significant effects. Categories collected in the last 12 months: identifiers, customer records, commercial information (subscriptions), internet or electronic activity, approximate geolocation, audio recordings you choose to submit, and inferences (such as study preferences). We collect and use them for the purposes in Section 2 and disclose them to the service providers in Section 4.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email getmarsai@gmail.com and we will delete it.

10. International transfers

We are based in the United States and process information in the U.S. and other countries where our providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers of personal data from the EEA, UK or Switzerland.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date shows the latest version, and we will give notice of material changes as required by law.

12. Contact us

Nexify Labs LLC (doing business as Mars AI). Email: getmarsai@gmail.com. We aim to reply within a few business days.