Privacy Policy
Last updated: January 22, 2026
PREPEUR OÜ ("PREPEUR," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered learning platform at prepeur.com (the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Information You Provide
- •Account Information: When you register, we collect your name, email address, and password (stored securely). If you sign in with Google, we receive your name, email, and Google account ID.
- •User Content: PDF documents you upload to generate study materials.
- •Study Data: Your flashcard reviews, quiz attempts, study session data, and learning progress.
- •Payment Information: If you subscribe to a paid plan, payment is processed by Stripe. We do not store your full credit card number; we only receive a customer ID and subscription status from Stripe.
- •Communications: If you contact us for support, we collect the information you provide.
1.2 Information Collected Automatically
- •Usage Data: We collect information about how you interact with the Service, including pages visited, features used, and general usage patterns.
- •Device Information: Browser type, operating system, and device identifiers.
- •Log Data: IP address, access times, and referring URLs.
2. How We Use Your Information
We use your information to:
- •Provide, maintain, and improve the Service
- •Process your PDF documents and generate AI-powered study materials
- •Track your learning progress and provide a personalized study experience
- •Provide progress indicators, usage insights, and performance trends
- •Process payments and manage your subscription
- •Send transactional emails (account verification, password reset, subscription updates)
- •Respond to your support requests
- •Detect and prevent fraud, abuse, and security issues
- •Comply with legal obligations
3. AI Processing and Third-Party Services
3.1 AI-Generated Content
To generate study materials (summaries, flashcards, quizzes), we may send limited portions of your uploaded PDF content to third-party AI service providers (such as OpenAI) for processing. These providers process the content only to return the requested output.
Important: We only share the minimum content necessary to provide the Service. Third-party providers may retain content for a limited period to operate and secure their services in accordance with their terms. For more details about OpenAI's handling of API data, please review OpenAI's API Data Usage Policy.
3.2 Third-Party Service Providers
We use the following third-party services to operate the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| OpenAI | AI content generation | PDF content excerpts |
| Search/Indexing Provider | Content retrieval and search functionality | Content representations and identifiers necessary to enable search |
| Cloud Storage Provider | Secure storage of uploaded files | Uploaded files and related metadata |
| Stripe | Payment processing | Payment details, email |
| Google OAuth | Authentication (optional) | Name, email (if you choose Google sign-in) |
4. Content Storage and Isolation
We store uploaded documents and generated study materials in a way that is designed to keep your content private. Your account data and study progress are logically separated from other users. Other users cannot access your documents, courses, or study data.
5. Data Retention
- •Active Accounts: We retain your data for as long as your account is active.
- •Account Deletion: If your account has been inactive for an extended period (for example, no login activity for approximately two years), we may notify you via email before deleting the account and associated data. Anonymized, aggregated analytics data may be retained for up to 60 days for service improvement purposes.
- •Inactive Accounts: We may delete accounts that have been inactive for more than 2 years after sending reminder emails.
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- •Encryption of data in transit and, where appropriate, at rest
- •Access controls and authentication safeguards
- •Logical separation of user data
- •Monitoring and abuse prevention measures
- •Regular security reviews and updates
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have the following rights:
- •Access: Request a copy of your personal data.
- •Correction: Update inaccurate or incomplete data.
- •Deletion: Request deletion of your account and associated data.
- •Export: Export your generated study materials in supported formats.
- •Restriction: Request we limit processing of your data.
- •Objection: Object to certain types of processing.
To exercise these rights, contact us at privacy@prepeur.com or use the account settings in the Service.
8. Children's Privacy
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@prepeur.com, and we will delete such information.
For users in the European Union, the minimum age may be higher (up to 16) depending on your country of residence.
9. International Data Transfers
PREPEUR OÜ is based in Estonia (European Union). Your data may be transferred to and processed in countries outside your country of residence, including the United States (where some of our service providers are located).
For transfers outside the EEA, we rely on Standard Contractual Clauses or other legally approved transfer mechanisms to ensure adequate protection of your data.
10. Cookies and Local Storage
We use the following technologies:
- •Authentication Tokens: We use first-party cookies or similar technologies to keep you logged in and to secure your session. These are essential for the Service to function.
- •Preferences: We store your display preferences (e.g., dark mode) in local storage.
We do not use third-party advertising cookies, and we limit analytics to what is necessary to operate the Service.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.
Your continued use of the Service after any changes indicates your acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
13. Additional Information for EEA/UK Residents
13.1 Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
- •Contract: Processing necessary to provide the Service you requested (account management, content generation, study tracking).
- •Legitimate Interest: Processing for analytics, security, and service improvement, where our interests do not override your rights.
- •Consent: Where you have given explicit consent (e.g., marketing communications, if applicable).
- •Legal Obligation: Processing required by law (e.g., tax records for payments).
13.2 Data Controller
PREPEUR OÜ is the data controller for the personal data processed through the Service.
13.3 Supervisory Authority
If you are in the EEA or UK and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority.
This Privacy Policy is effective as of January 22, 2026.