Privacy Policy

🧭 Scope of This Policy

This policy covers two separate contexts:

• Website (microstudy.ai pages) — Basic technical logs, optional analytics cookies only after your consent, and optional feedback/contact form submissions you send to us.
• Telegram bot service — Account, subscription, and study-content processing required to deliver the product in Telegram.

References to Google Gemini, AWS, and Telegram below describe service providers used for bot-side processing. They are not website cookie providers for page visits.

📋 Data Controller

The data controller responsible for the processing of your personal data as described in this policy is the operator of microstudy.ai. For any data protection inquiries, please contact us at support@microstudy.ai.

🔒 Data Security & Storage

All your data is stored in secure, encrypted storage using industry-standard practices:

• Encryption at rest - All data stored in our databases and file storage is encrypted using AES-256 encryption
• Encryption in transit - All communications use TLS/HTTPS encryption
• Enterprise-grade infrastructure - We use cloud infrastructure with enterprise-grade security controls
• Secrets Management - Sensitive credentials and API keys are stored in secure vaults, never in code or plain text
• Access Control - Strict policies limit access to data on a need-to-know basis

📊 What Data We Collect

Account Information

• Telegram user ID (for authentication and message delivery)
• Subscription status and payment history
• Account creation date

Review Data

• Topics you create (name, role, difficulty settings)
• Generated review flashcards (questions and answers)
• Your answers to practice prompts (for AI evaluation)
• Custom review materials you upload (used only for your review flashcard generation)
• Review priority and reaction data

Usage Data

• Review cadence preferences
• Command usage patterns
• Error logs (for troubleshooting)

Website Feedback / Interest Forms

• Email address (if you submit it in a website form)
• Requested messenger or messenger suggestion
• Submission metadata (timestamp, page, technical request metadata such as IP/user-agent)

🎯 How We Use Your Data

Primary Uses

• Service Delivery - Generate and deliver your personalized Q&A content
• AI Evaluation - Analyze your answers and provide feedback
• Adaptive Review Cadence - Optimize review scheduling based on your performance
• Account Management - Process subscriptions and manage your access
• User Communication - Respond to website feedback, contact requests, and messenger availability interest

Service Improvement

We use anonymized and aggregated data to improve the user experience:

• Improving AI review flashcard generation quality based on general usage patterns
• Optimizing review cadence and system performance
• Identifying and fixing technical issues
• Understanding which features are most valuable to users

🚫 What We Don't Do

• No selling of data - We never sell your personal data to third parties
• No advertising - We don't use your data for advertising purposes
• No external AI training - Your content is not used to train external AI models
• No unnecessary sharing - We only share data with service providers essential to operate the service (see Third-Party AI Services below)

⚖️ Legal Basis for Processing

We process your personal data on legal grounds applicable in your jurisdiction, including:

• Contract performance — Processing your account data, review content, and subscription information is necessary to provide the microstudy.ai service you signed up for
• Legitimate interest — We process anonymized usage data and error logs to improve service quality, ensure security, and troubleshoot technical issues. Our legitimate interest does not override your fundamental rights
• Consent — Where applicable (e.g., optional analytics), we process data only with your explicit consent, which you may withdraw at any time
• Legal obligation — We may process certain data where required by applicable law (e.g., financial record-keeping for subscription payments)

📝 Website Feedback Forms

When you submit feedback or messenger requests on microstudy.ai, submissions are sent to our own backend endpoint and stored in our AWS account (S3). We currently do not use Formspree for this flow.

• Data minimization — We only collect fields you provide in the form and basic request metadata needed for abuse prevention and troubleshooting.
• Consent capture — Website interest forms require an explicit consent checkbox before submission. You can request deletion at any time.
• Purpose limitation — We use this data only to process your request, respond when relevant, and improve product availability planning.
• Storage — Form submissions are stored in a private S3 bucket with encryption at rest and restricted access.

🤖 Third-Party AI Services (Telegram Bot Processing)

To provide our core service in Telegram — generating review flashcards, evaluating your answers, and delivering personalized feedback — we send relevant portions of your data (such as topics, uploaded materials, and your answers) to Google's Gemini API for AI processing.

What This Means

• Data transmitted to Google — Your review content is sent to Google's servers for AI processing as part of service delivery
• Google's terms apply — Data sent to the Gemini API is subject to Google's Gemini API Terms of Service and Google's Privacy Policy
• Processing only — We use the Gemini API for real-time content generation and evaluation, not for model training purposes on our end
• No additional third-party AI — Google Gemini is the only external AI service we use for content processing

We encourage you to review Google's terms and privacy policies to understand how your data may be handled on their end. We have no control over Google's internal data practices beyond the contractual terms of the API service.

🌍 International Data Transfers (Telegram Bot Service)

Your data may be transferred to and processed in multiple countries depending on the service providers used:

• Google Gemini API — Your review content is sent to Google's servers, which may be located in multiple countries. This transfer is governed by Google's Data Processing Addendum
• Cloud infrastructure (AWS) — Our service infrastructure is hosted on Amazon Web Services across configured regions. We use contractual and technical safeguards for processing by infrastructure providers
• Telegram — Messages are delivered via Telegram's API infrastructure, subject to Telegram's Privacy Policy

Website feedback/contact form submissions are processed in our AWS environment and are intended to remain within our configured AWS regions (currently including eu-west-1), subject to AWS processing terms.

In all cases, we apply appropriate safeguards for cross-border processing as required by applicable law.

⚠️ AI-Generated Content Disclaimer

Our service relies on AI to generate review flashcards, evaluate answers, and provide feedback. While we implement additional checks, validations, and quality controls to ensure accuracy, AI-generated content may occasionally contain errors, inaccuracies, or outdated information.

• No guarantee of accuracy — We do not guarantee that AI-generated flashcards, evaluations, or feedback are fully accurate, complete, or error-free
• Not a substitute for professional advice — Our service is an educational aid and should not be relied upon as the sole source of truth for any subject matter
• User responsibility — You are encouraged to verify important information independently and use your own judgment when reviewing AI-generated content
• Continuous improvement — We continuously refine our validation processes to improve content quality, but limitations inherent to AI technology remain

🗑️ Data Retention & Deletion

• Active accounts - Data is retained while your account is active
• Topic deletion - When you delete a topic, associated review flashcards (questions and answers) are removed
• Account deletion - Upon request, we delete all your personal data within 30 days
• Backup retention - Encrypted backups may be retained for up to 90 days for disaster recovery
• Website feedback forms - Form submissions are retained for a limited operational period and then removed by lifecycle policy

To request account deletion, use the /contact command or email us at support@microstudy.ai.

🍪 Cookies & Tracking

This section applies only to visits on our website pages. We use optional analytics (Google Analytics) only if you consent via the cookie banner.

• Necessary — We store your consent choice in a cookie named ms_analytics_consent.
• Analytics (optional) — If you accept, Google Analytics may set cookies such as _ga / _ga_* to measure website usage.
• No advertising cookies — We do not run ads or marketing/remarketing tags on this website.

You can change your choice anytime using the Cookie settings button on the website.

The Telegram bot operates through Telegram’s API and does not use website cookies.

👤 Your Rights

Depending on applicable law, you may have the following rights regarding your personal data:

• Access — Request a copy of your personal data
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data where applicable
• Restriction — Request restriction of processing in certain circumstances
• Portability — Request your data in a portable, machine-readable format where applicable
• Objection — Object to processing based on legitimate interest where applicable
• Withdraw consent — Where processing is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing

To exercise these rights, contact us at support@microstudy.ai.

🤖 Automated Decision-Making

Our service uses AI-based automated processing in the following ways:

• Answer evaluation — Your answers to review prompts are automatically evaluated by AI to provide feedback and scoring
• Adaptive scheduling — Review frequency is automatically adjusted based on your performance patterns
• Content generation — Review flashcards are automatically generated based on your topics and materials

These automated processes are integral to service delivery and do not produce legal effects or similarly significant effects on you. They are used solely as an educational aid. You may contact us at support@microstudy.ai if you have concerns about automated processing of your data.

💰 Access & Billing Information

Current access and billing terms are presented directly in the bot at the time of purchase. This website does not list binding commercial offers.

• In-bot details — Use /buy to view the latest options and terms
• Current information — Always confirm terms shown in the bot before purchase
• Support — For billing questions, contact support@microstudy.ai

📧 Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

• Email: support@microstudy.ai
• Telegram: Use the /contact command in the bot