Privacy Policy
Effective September 28, 2026
This policy explains how STEMFlow handles information when you use our website, study tools, and STEMFlow Notes extension. For privacy questions or requests, contact reisenell44@gmail.com.
Information we handle
- Account information: your email address, username, authentication identifiers, and account preferences. If you choose Google sign-in, we receive basic Google account information such as your email, name, profile image, and account identifier. Google sign-in does not give STEMFlow access to your Gmail, Google Drive, or calendar.
- Study content: questions, conversations, uploaded documents and images, notes, generated materials, practice responses, and progress you provide or save.
- Membership information: subscription status, customer and transaction identifiers, and payment-related records. Stripe handles payment details through its checkout; you do not enter full payment-card details into STEMFlow study tools.
- Technical and usage information: request and error logs, device/browser information, page and feature events, referral information, and visitor/session identifiers. Hosting and security services may process IP addresses and other request metadata.
Why we use information
We use information to sign you in, maintain your account and access, provide tutoring and study features, save content you choose to keep, process memberships, answer support requests, understand feature usage, troubleshoot failures, and prevent abuse. Diagnostic and quality-review records may include questions, answers, and the evidence used to generate them.
Promotional emails
We may use your account email address to send STEMFlow study tips, product updates, and membership offers, subject to applicable law and any required consent. This can include an email address provided through Google sign-in when the required notice and consent for that use are in place.
You can stop promotional emails by following the unsubscribe instructions in a message, replying with "unsubscribe", or emailing stemflowstudy@outlook.com. We honor unsubscribe requests within 10 business days. Unsubscribing from promotions does not stop essential account, security, or billing messages.
AI processing and service providers
When you use an AI feature, relevant inputs—including your question, conversation context, and applicable uploaded or selected content—are sent to AI providers such as OpenAI to generate a response. Avoid submitting sensitive personal information that is unnecessary for studying.
STEMFlow uses providers including Supabase for authentication, database and storage services; Vercel for hosting; OpenAI for AI processing; Stripe for payments; and Microsoft Outlook for email communications. They process information needed to perform those services, under their applicable terms and privacy practices. Processing may occur outside your country.
STEMFlow does not sell your personal information.
Google sign-in information
We use basic Google sign-in information to create and manage your STEMFlow account. Promotional use of your account email address is described above. Any use or transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements where applicable.
STEMFlow Notes extension
The extension uses browser permissions to work with a page, selection, or document you ask it to process. Relevant page text, document content, and your instructions may be sent to STEMFlow and its AI provider. For supported PDFs, it may locate a matching downloaded file using its source URL. Browser permissions do not mean that all browsing history or every page is automatically sent for AI processing.
Preferences and task state may be stored locally. Generated notes can be downloaded; saving them into your STEMFlow library is an explicit action. You can remove the extension or revoke its permissions through your browser.
Cookies, browser storage, and sharing
We use cookies and browser storage for sessions, preferences, sign-in return paths, and usage measurement. Clearing storage may sign you out or reset preferences. If you create a share link, people with that link may be able to view the shared material. Only share content you intend others to access.
Retention and your choices
Information is retained as needed to provide the service, maintain records, address security issues, and meet legal obligations. Retention varies by data type and provider; deletion may not immediately remove copies from backups or records that must be kept.
You can manage available account and content settings in the app. To request access, correction, or deletion of personal information or your account, email reisenell44@gmail.com. We may need to verify account ownership. Depending on your location, you may have additional privacy rights. Removing Google access from your Google account does not by itself delete your STEMFlow account or saved content.
Security and younger users
We use authentication and access controls to protect information, but no online service can guarantee absolute security. STEMFlow is intended for students studying college-level material and is not directed to children under 13. Contact us if you believe a child under 13 has provided personal information.
Policy updates
We may update this policy as the service changes. The effective date identifies the current version; material changes will be communicated where required by applicable law. Before using previously collected Google user data for a new purpose, we will notify affected users and obtain their consent to the updated policy as required by Google. Updating this page alone does not authorize that new use.
