Privacy Policy

1. Overview

This Privacy Policy explains what Saul collects when you use our website and app, why we collect it, who we share it with, how long we keep it, and the choices you have. It applies to the Service as defined in our Terms of Service. By using Saul, you agree to this policy.

2. What we collect

We collect only what's needed to run the Service:

• Account data: your email address, name if you provide one, school and semester details you add, your plan, and sign-in method (email/password or Google).
• Content you create: classes, uploaded materials (including images you scan), notes, outlines, chats, tasks, flashcards, quizzes, concept maps and their content.
• Usage and billing data: your plan status, AI credit usage, subscription and payment status, and support messages you send us.
• Technical data: basic logs needed to run and secure the service (such as IP address, device/browser type and error logs), plus optional anonymous usage analytics if you allow them in the cookie banner.
• Payment data: handled entirely by Stripe. We never see or store your card number — only your subscription status and billing history references.

3. How your materials are used

Your uploads and other content exist so Saul can provide the features you ask for. When you ask a question, generate a quiz, create flashcards, summarize material, or use another AI feature, the relevant content may be sent to the AI provider powering the model or feature you selected, solely to provide that functionality.

We do not use your uploads, notes, outlines, chats, flashcards, quizzes or other content to train Saul or any AI model we develop or control. We use third-party AI services under settings and terms that state content sent through their APIs is not used for model training.

We do not sell your data or Your Content.

Text extracted from images you upload is stored with the file so it can be searched and used as context, just like other uploaded material.

4. Who processes data for us

We use a small number of trusted providers, each only for the purpose described:

• Hosting and database infrastructure — stores your account and content securely.
• AI model providers, including OpenAI, Google and Anthropic: process relevant content to generate the answers, quizzes, summaries and other AI output you request. We configure these services and use them under terms that state Your Content is not used for model training.
• Stripe — processes payments and manages subscriptions.
• Google — optional sign-in, and sending transactional emails (welcome, trial reminders, share notifications, task reminders, receipts).
• Analytics (optional) — anonymous usage statistics, only if you opt in via the cookie banner.

5. Emails we send

We send transactional emails needed to run your account: sign-in and security emails, receipts and billing notices, trial status reminders, task reminders you set yourself, and notifications when someone shares an outline or note with you.

If someone shares with an email address that doesn't have a Saul account yet, we send that address one notification naming the person who shared and the item. We don't add those addresses to marketing lists.

We don't send marketing email without a clear way to opt out, and you can control optional notifications in Settings.

6. Sharing you control

Nothing you create is visible to other users unless you deliberately share it. Shared outlines and notes are visible to the audience you choose — specific people, your school, or everyone — and you can unshare at any time.

Certain features surface limited profile information by design: for example, your name may be shown to people you share with, and aggregate or ranked study stats may compare you with other students at your school in an anonymized or percentile form.

7. Cookies

Essential cookies keep you signed in, remember your preferences, and keep the app secure. Optional analytics cookies help us see which features students actually use. You choose in the cookie banner and can change it any time from the Cookie settings link in the footer.

8. Retention and deletion

We keep your content while your account is active. Delete an item and it's removed from active systems. Delete your account from Settings and your content is removed from active systems, then from backups on our normal backup cycle.

Some records we must keep for legal or accounting reasons (such as payment history) are retained for the period required by law and then deleted. Anonymized, aggregated statistics that can no longer identify you may be kept indefinitely.

9. Security

We protect your data with encryption in transit, access controls, and row-level isolation so each account can only reach its own content. No method of storage or transmission is perfectly secure, but we design the Service so that even our own staff can only access content where it's needed to operate or moderate the Service (for example, reviewing reported shared content).

10. Your rights

You can access, correct, export or delete your data at any time — most of it directly in the app. If you're in a region with data-protection rights such as the EU, EEA or UK (GDPR/UK GDPR) or California (CCPA), you also have the right to object to or restrict certain processing, to data portability, and to lodge a complaint with your local authority.

To exercise any of these rights, contact us through the FAQ page. We don't discriminate against you for exercising your rights, and we don't "sell" or "share" personal information as those terms are defined by the CCPA.

11. Children

Saul is not directed at children under 16, and we don't knowingly collect their data. If you believe a child under 16 has created an account, contact us and we'll delete it.

12. Changes and contact

If we make a material change to this policy, we'll let you know in the app or by email before it takes effect.

Questions about privacy, or a request about your data? Use the contact form on the FAQ page — it reaches a human.