1. About this policy
Semesty provides a learning platform for creating and studying interactive courses. This policy covers our website, mobile app, learning and AI features, and support. It explains what we collect, how we use and share it, and your choices. For questions or requests, contact [email protected].
2. Personal data we collect
The information we process depends on the features you use, your settings and the information you choose to provide.
Information you provide
- Account information: username, email address, password credentials, preferences and verification details. If you use Apple or Google sign-in, we receive the account information needed to sign you in. Apple may supply a private relay email address. We do not receive your Apple or Google password.
- Study material and content: documents, photos, text, course instructions, chat messages, exercise answers, feedback and other material you upload or enter, together with courses and lessons created from it.
- Support and communications: messages you send us, course reports, and information needed to handle support, verification, password resets and service notifications.
Information recorded through use
- Learning activity: courses, saved content, lesson progress, answers, XP, streaks, planner settings, ratings, likes, dislikes and blocked authors.
- Technical information: IP address, device and operating-system information, app or browser version, timestamps, errors, diagnostic information and security or rate-limit logs.
- Usage analytics: interactions such as screen views and feature use, technical context and identifiers. Analytics can be associated with your Semesty account. In the mobile app, analytics is on by default and you can turn it off at any time in Settings.
Information from providers and generated information
Sign-in providers supply authentication information. Billing providers supply purchase, product, transaction, entitlement and subscription-status information; payment details are handled in their payment flows. Semesty also creates information such as generated courses, exercise feedback, progress summaries and study recommendations.
3. How we use personal data
- Provide and secure your account, synchronize content and save your settings.
- Create courses, deliver lessons and AI assistance, assess answers and support your learning progress.
- Process purchases, manage access and credits, restore purchases and resolve billing issues.
- Send requested reminders and essential account, security and service messages.
- Understand feature use, investigate errors and improve reliability and the learning experience.
- Handle support, content reports and blocking, prevent abuse, and meet legal obligations.
Depending on the activity, our legal basis is providing the service under our contract with you, our legitimate interests in operating and securing it, a legal obligation, or consent where required. Withdrawing consent does not change the lawfulness of earlier processing.
4. AI features and your content
When you request an AI feature, the information needed for that request may be sent to an external AI provider. This can include your uploaded documents or images and extracted text, course instructions, the relevant lesson or conversation, and answers you submit for feedback. The information shared depends on the feature; not every request requires all of this content.
The AI disclosure in the app identifies OpenAI, Google Gemini and Anthropic (Claude) as possible recipients. The provider actually used depends on the feature and available integration; this does not mean every request is sent to every listed provider. We ask for your permission in the mobile app before initiating new AI processing covered by that disclosure.
You can withdraw the app's AI-processing permission in Settings. This prevents new processing covered by that permission until you allow it again. It does not recall a request already sent or automatically delete existing courses or provider records. You can separately request deletion of your data. Uploading material to Semesty's storage and sending it to an external AI provider are separate processing steps.
Only upload material you are entitled to use. Avoid including confidential information or other people's personal data unless you have an appropriate basis to share it.
5. Sharing and service providers
We disclose information when needed to operate the service, carry out your instructions, protect users or meet legal obligations. Depending on the feature, recipients include:
- Apple and Google: authentication and relevant platform or store services.
- RevenueCat, Apple, Google and Stripe: purchases, subscriptions, entitlements, payment processing and billing support, depending on the purchase platform.
- Google Cloud: application hosting, databases, file storage and processing infrastructure.
- AI providers: requested AI processing as described above.
- PostHog: product analytics, unless you have turned analytics off.
- Sentry: error reporting and diagnostics where configured.
- Email and support providers: delivery of service messages and handling requests.
Content you deliberately make public, together with associated public information such as your username, can be viewed by other people, including people who are not signed in. Private courses are not listed as public courses. Sharing or publishing content can allow others to retain copies they have already obtained.
We may disclose information in response to valid legal requirements, to investigate abuse or protect rights and safety, or in connection with a business transfer, subject to applicable protections. We do not sell your uploaded study material.
6. Analytics, cookies and advertising
Our website and app may use local storage, cookies, SDKs and similar technologies for sign-in, preferences, security, diagnostics and analytics. In the mobile app, product analytics through PostHog is on by default. You can turn it off at any time in Settings; we then stop sending new analytics events from that device. We request consent where applicable law requires it; this policy is not a substitute for that choice.
The website may display Google AdSense advertising to non-premium users. Google may process cookie, device and usage information for advertising and measurement according to the applicable settings and permissions. The mobile app does not display AdSense ads. Browser and device settings also provide controls, although disabling storage may affect some features.
7. Retention and deletion
We retain information for the purposes described in this policy, including providing your requested service, maintaining security, resolving disputes and meeting legal obligations. The appropriate retention period depends on the information, its purpose and outstanding operational or legal requirements.
Uploaded material is used to process your request. Some source files are cleaned up after processing, cancellation or failure. Material needed to resume a request, recover from an interruption or extend your first lesson into a full course may remain available for that purpose. Generated courses and learning records are separate from the original source files and are generally retained while needed for your account or until you remove them.
Diagnostic and security records, support correspondence, and billing records may have different retention periods because they serve different purposes. Data in backups can remain until the relevant backups expire or are overwritten. Deleting active data does not necessarily remove it immediately from all backups.
You can request account deletion from account settings. We remove or anonymize associated data that is no longer needed, subject to legitimate retention requirements such as legal obligations, fraud prevention and legal claims. Contact us if you need assistance with deletion or information about retention for a particular category.
8. Your rights and choices
Depending on applicable law, you may request access, correction, deletion, restriction or a portable copy of your personal data, object to certain processing, or withdraw consent. Use the available account and privacy controls or contact [email protected]. We may need to verify your identity before acting on a request.
Available controls include editing account settings, changing course visibility, managing blocked authors, changing analytics preferences, withdrawing AI-processing permission and requesting account deletion. Some features require certain processing to function. Essential security and transactional communications are separate from optional preferences.
You may also complain to your local data-protection authority. In Belgium, this is the Data Protection Authority.
9. International processing and security
Information may be processed outside your country or the European Economic Area by infrastructure and service providers. Where required, applicable transfer safeguards must be in place, such as adequacy decisions or standard contractual clauses. Contact us for information about the arrangements relevant to your request.
We use technical and organizational measures such as authenticated access, access controls, encrypted connections and operational monitoring. No system can guarantee absolute security. Protect your credentials and contact us if you suspect unauthorized use.
10. Changes and contact
We may update this policy as the service, processing or legal requirements change. We update the date above and provide additional notice or request consent for material changes where required.
For privacy questions, requests or complaints, contact Semesty at [email protected].