Privacy Policy

• Account: your email, name and a password. Passwords are handled by our authentication provider and stored hashed; we never see them.
• Your materials: the PDFs you upload, the text extracted from them, and images of regions you capture.
• Study data: your goals, plans, highlights, conversations with the tutor, and the tutor's notes on your progress (what you understand, what you're working on).
• Your Groq API key, if you add one (see below).

We don't collect your location, contacts, or browsing activity outside Confu.

If you add your own Groq API key, here is exactly how it is handled:

• Only for your requests. It is used solely to send the AI requests you trigger in Confu: tutor answers, study plans, figure reading, and the progress notes the tutor updates after each answer. Nothing runs on your key in the background or for anyone else.
• Never shared, sold or logged. Your key is not shared with anyone other than Groq, the service it belongs to, and it is never written to our logs.
• Encrypted at rest. It is checked with Groq, then encrypted (AES-256-GCM) on our server before it's stored, and tied to your account so it can't be decrypted for anyone else. We never show it again; you'll only see its last four characters.
• Yours to remove. Replace or delete it any time in Settings. Deleting it removes it from our database.
• Billing. Requests made with your key count toward your Groq account's usage and limits.

• To run the app: store your PDFs, build your plan, answer your questions and remember your progress.
• To keep your account secure and the service working.

That's it. We don't use your data for advertising or sell it to anyone.

Confu relies on a few service providers, who process data only to provide their service to us:

• Supabase: authentication, database and file storage. Your PDFs are kept in private storage that only your account can access.
• Groq: runs the AI models. To answer you, the relevant excerpts of your PDFs, your question, captured images and your study context are sent to Groq. Groq's own privacy policy and terms apply to that processing.
• Vercel: hosts the website.

We use cookies only to keep you signed in. Your browser also stores a few interface preferences, like your panel width and whether you've seen the guide. We don't use advertising or analytics cookies.

• Your data is kept while your account exists.
• Deleting a session permanently removes its PDFs, extracted text, highlights, captured images, plan, conversation and progress notes.
• Removing a PDF from a session deletes that file and its highlights.
• To delete your whole account and everything in it, email us at confuedu.ai@gmail.com.

Every request is tied to your signed-in account, and the database only lets you read and change your own data. Files are private, connections are encrypted, and API keys are encrypted at rest. No system is perfectly secure, but we work to protect your information and keep only what's needed.

Confu isn't intended for children under 13, and we don't knowingly collect their data.

If we change this policy, we'll update the date at the top. Significant changes will be shown in the app.