Privacy Policy

Last updated: 14 October 2026. This is a draft written for the pre-launch version and should be reviewed by a lawyer before public launch.

1. Who is responsible

Feynbot is operated by [OWNER NAME], sole trader (egyéni vállalkozó), [ADDRESS], Hungary, tax number [TAX NUMBER] ("we"). We are the controller of your personal data. Contact: [email protected].

2. What we collect and why

Data	Why	Legal basis (GDPR)
Email address and login details (the password is held by our login provider, never by us in readable form)	Create and secure your account	Contract (Art. 6(1)(b))
Study material you add: files, web pages, YouTube captions, and the text we extract from them	Provide the service: search it, find concepts, let the AI student ask questions	Contract
Things we derive from your material: concepts, key points, connections	Provide the service	Contract
Your teaching conversations, the AI's judgements of them, your progress and reports	Provide the service and show your progress	Contract
Usage and cost records (what each AI call cost, how many sessions you started)	Charge credits correctly, enforce the free-plan limits, prevent abuse, run the business safely	Contract; legitimate interest (Art. 6(1)(f))
Payment records (plan, invoices, amounts). Card details are handled only by Stripe; we never see them	Take payment, issue invoices, meet tax and accounting law	Contract; legal obligation (Art. 6(1)(c))
Technical data (IP address, browser) in server logs	Security, rate limits, fixing errors	Legitimate interest
Support emails you send us	Answer you. We may use AI to help draft replies; a human decides what is sent	Legitimate interest / contract

We do not sell your data and we do not show advertising. We do not use your material to train AI models, and our AI provider's commercial terms do not allow them to train on it either.

3. AI processing of your material

To work, Feynbot sends parts of your study material and your messages to AI providers, who process them on our behalf:

Anthropic (USA) reads your material to extract concepts, writes the AI student's questions, and judges your explanations. Under Anthropic's commercial API terms, content sent through the API is not used to train their models; they keep it for a short period for service operation and abuse monitoring as described in their terms.
Voyage AI (USA) turns text passages into numeric search indexes ("embeddings"). Please see their terms for their handling of data.

Do not upload material that contains other people's sensitive personal data (for example health records) or anything you are not allowed to share. AI can be wrong; Feynbot is a study aid, not professional advice.

4. Who else receives data (processors)

Supabase: database, login and private file storage (servers in the EU/other region chosen for our project).
Render: runs our server software. Cloudflare: serves the website.
Stripe: payments and tax. Resend: sends our administrative emails.
Anthropic and Voyage AI: see above.

Some of these providers are in the USA. Transfers rely on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses, as offered by each provider.

5. How long we keep data

Your account, material, concepts, conversations and progress: until you delete them or your account.
When you delete a document, its file, text and search index are removed. When you delete your account, everything above is deleted immediately.
Payment and invoice records: kept for the period required by Hungarian accounting and tax law (currently 8 years), without your name or email once your account is deleted where the law allows.
Server logs: a few weeks.

6. Your rights

You can download all your data and delete your account yourself in the app (account icon at the top right). You also have the right to access, correct, restrict or object to processing, and to complain to a data protection authority; in Hungary this is the NAIH (naih.hu). Contact us at [email protected] for anything else.

7. Security

Your data is protected by encrypted connections, per-user data separation enforced in our database, private file storage, and limited staff access. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.

8. Children

Feynbot is for people aged 16 and over.

9. Changes

If we change this policy in a way that matters to you we will tell you in the app or by email before it takes effect.