Privacy Policy

1. Information We Collect

We collect only what's needed to run the service:

• Account information: your email address and a securely hashed password, handled by our authentication provider (Supabase).
• Study material: the text extracted from PDFs you provide — either by uploading a file or by pasting a link to a PDF — which is sent to our AI provider to generate quizzes. When you provide a link, our server downloads the PDF over a secure, validated connection, extracts its text, and discards the downloaded file immediately afterwards. We do not keep a copy.
• Usage data: basic technical information such as your browser type and interactions needed to operate and improve the app.
• Feedback you submit: when you send a bug report, feature request, or support message, we store what you write (title and description) together with your account email (if you're signed in), your browser and device type, the page you were on, and a timestamp. This is used solely to investigate and respond. Please don't include passwords or other sensitive information in feedback.

2. How We Use Your Information

• To generate quizzes and AI insights from your uploaded material.
• To create and secure your account and keep you signed in.
• To maintain, debug, and improve the service.

We do not sell your personal data, and your uploaded documents are never used to train AI models.

3. Cookies, Consent & Local Storage

MyLastop uses a small number of cookies and browser storage, grouped into categories:

• Essential cookies (always on): required for the app to work — authentication, session management, security, and CSRF protection. These cannot be disabled because the service cannot function without them.
• Analytics cookies (off by default): reserved for understanding usage and improving the product. They are not active yet and will only ever load after you explicitly opt in.

Your cookie choice is stored locally in your browser (via local storage) — we do not keep your consent preference on our servers. You can review or change your choice at any time using the Cookie Settings link in the footer, which reopens the preferences panel.

4. Analytics (Future)

We do not currently run any analytics. We may introduce privacy-respecting analytics in a future release to help us understand how MyLastop is used and where to improve it. If and when they are added, they will load only after you have given consent for the Analytics category — rejecting non-essential cookies keeps them disabled. The "Last updated" date above will change when analytics is enabled.

5. Third-Party Services

MyLastop relies on trusted providers to operate:

• Supabase — authentication and account management.
• Google (Gemini API) — generating quiz questions and insights from your material. Text you submit is processed under their API data policy and is not used to train their models.
• Render — application hosting.
• Notion — when you submit feedback (a bug report, feature request, or support message), it is stored in our private Notion workspace so the team can track and respond to it. Only the feedback you submit and the metadata described above are sent there.

6. Data Retention

Quiz generation is processed in real time and your document text is not stored long-term on our servers in this version of the product. PDFs downloaded from a link you paste are held in memory only for the moment it takes to extract their text, and are never written to permanent storage. Your account information is retained until you delete your account.

7. Security

We use industry-standard measures including encrypted connections (HTTPS) and secure authentication. No method of transmission over the internet is 100% secure, but we work to protect your information.

8. Your Rights

You can request access to, correction of, or deletion of your personal data at any time by contacting us. You may also delete your account — this removes your account information; contact us to action a deletion request. You can manage your cookie preferences at any time via the Cookie Settings link in the footer.

9. Children's Privacy

MyLastop is not directed to children under 13, and we do not knowingly collect personal information from them.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date at the top of this page.

11. Contact

Questions about this policy? Reach out at hello@mylastop.com.