Privacy Policy

At Nexus Study ("Nexus", "we", "our", or "us"), your privacy matters. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Nexus, you agree to the practices described here.

Information we collect

Account information: when you register, we collect your name, email address, and optionally your university, program, and birthday. Usage data: quiz attempts, answers, scores, study sessions, flashcard interactions, and feature engagement, which powers your personalized analytics and our adaptive learning engine. AI interaction logs: prompts and responses when you use the AI Tutor or other AI-powered features, which may be reviewed by our team to improve quality. Payment information: payments are processed by Stripe — we do not store your full card details, only transaction records (amount, date, plan) for billing and legal compliance. Device and technical data: IP address, browser type, device type, operating system, and page-level analytics. Referral and promotional data: referral codes and promotions you use. Error and diagnostic data: we use Sentry to automatically capture application errors and stack traces, which may include session-state metadata at the time of an error.

How we use your information

We use the information we collect to provide, operate, and improve the Nexus platform; personalize your study experience, including adaptive question selection and progress tracking; process payments and manage your subscription; send transactional emails (account confirmation, password reset, billing receipts) and, where you haven't opted out, occasional product updates; detect and prevent fraud, abuse, and violations of our Terms; comply with legal obligations; and conduct internal research and analytics to improve learning outcomes. We do not sell your personal information to third parties.

How we share your information

Service providers: we use Supabase (database and authentication), Stripe (payments), Sentry (error monitoring), and Anthropic / OpenAI (AI model inference) to operate Nexus, under appropriate data processing agreements. Instructors and institutions: if your institution or instructor has set up a Nexus organization, aggregated or individual performance data may be visible to them for the courses they manage. Legal requirements: we may disclose information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Nexus, its users, or the public. Business transfers: in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction — we'll notify you before your data becomes subject to a different privacy policy.

Data retention

We retain your account and usage data for as long as your account is active or as needed to provide our services. If you request account deletion, we delete or anonymize your personal data within 30 days, except where we're required to retain it for legal or regulatory purposes (for example, billing records for up to 7 years).

Cookies and tracking

Nexus uses essential cookies and browser storage to maintain your session and preferences. We do not currently use third-party advertising cookies or cross-site tracking technologies, though we may use first-party analytics to understand usage patterns in aggregate.

Security

We implement industry-standard security measures including TLS encryption in transit, row-level security in our database, and regular security reviews. No method of transmission or storage is 100% secure — we encourage a strong, unique password for your account.

Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal data, to object to certain processing (including direct marketing), and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at the email below — we respond within 30 days.

Children's privacy

Nexus is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will promptly delete it.

International data transfers

Nexus is hosted on infrastructure primarily located in Canada. If you access Nexus from outside Canada, your information may be transferred to and processed in Canada; by using Nexus, you consent to that transfer, and where required by applicable law we ensure appropriate safeguards are in place.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you in-app and require your re-acknowledgement. The current version and effective date are shown at the top of this page.