Privacy Policy

What we collect

• Email address — used to sign you in and to send account-related emails (verification, password reset).
• Profile fields you fill in — name, major, semester. Optional.
• Study data you create — courses, tasks, flashcards, quizzes, schedules. Stored against your account.
• Files you upload to AI features — PDFs/images are processed to generate flashcards or quizzes. They are not retained beyond the generation request.

What we don't do

• We don't sell your email or personal data.
• We don't share your study data with other users or with third parties for advertising.
• We don't use your uploaded study materials to train models.

Where your data lives

Account credentials and study data are stored in Supabase (hosted in Singapore). AI generation uses OpenRouter to access multiple model providers and may fall back to Anthropic's Claude API if the free-tier models are unavailable. Content sent to these providers is governed by their commercial terms (no training on customer data).

Payments

Premium credit purchases are processed by Midtrans (PT Midtrans), a licensed Indonesian payment gateway. When you pay, your payment details (card number, e-wallet, bank account) are entered on Midtrans's secure checkout and handled by Midtrans — RealTrack never sees or stores them. We only receive a payment confirmation containing the order ID, amount, status, and your account reference, which we use to add credits to your account. See Refund Policy.

Your rights

You can update your profile or change your password from the navbar. You can delete any course, task, deck, or quiz from its page. To delete your entire account and all associated data, contact us through the GitHub repo.

Security

Passwords are hashed by Supabase (bcrypt). All data access goes through user-scoped Row-Level Security policies on the server. Communication is HTTPS-only.