Privacy Policy

1. Information We Collect

Account Information

When you sign in using Google or GitHub OAuth, we receive and store your name, email address, and profile picture. We do not store your OAuth passwords.

Learning Content

We store the learning trees, nodes, questions, and text highlights you create on the platform. This content is associated with your account and is necessary to provide the service.

Usage Data

We collect information about how you use the platform, including page visits, session counts, and interactions with learning trees and nodes. This data is used to improve the service and generate aggregated analytics.

2. How We Use Your Information

• To provide, maintain, and improve the Dendrify platform
• To personalize your learning experience based on your stated interests and persona
• To generate aggregate analytics (retention cohorts, activity statistics) for platform improvement
• To enforce our Terms of Service and protect against abuse

3. Information We Share

We do not sell your personal information. We share information only in the following circumstances:

OAuth Providers (Google, GitHub)

Authentication is handled by Google and GitHub. Their privacy policies govern the information they collect during the sign-in process.

Google Gemini AI

When you create or expand learning nodes, your questions and the chain of ancestor questions (for context) are sent to Google’s Gemini AI service. We do not send your personal identity information (name or email) to the AI service. Google’s privacy policy governs how they handle this data.

Database Hosting

Your data is stored in a PostgreSQL database. Database infrastructure is provided by a third-party hosting provider under confidentiality obligations.

4. Data Retention

We retain your account and learning data for as long as your account is active. Usage events and activity logs are retained for analytics purposes. You may request deletion of your account and associated data by contacting us at the email address below.

5. Security

We implement industry-standard security practices to protect your information. Authentication tokens are secured using JWT encryption, database connections are encrypted in transit, and API endpoints are protected by rate limiting.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data

To exercise these rights, contact us at the email address below.

7. Children

Dendrify is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date at the top of this page. Continued use of the platform after changes constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: [Contact email placeholder]