The short version
We collect only what BranchAI needs to turn your documents into study notes. We never sell your data or use your documents for advertising. Your files are private to your account, you can delete them anytime, and you have full rights over your data under the GDPR.
Who we are
BranchAI (“BranchAI”, “we”, “us”) turns dense documents into calm, colour-coded study notes built for dyslexic students. This policy explains what personal data we collect when you use BranchAI, why we collect it, who helps us process it, and the rights you have over it.
BranchAI is a product of LearningWithBranch Limited, a company registered in Ireland (no. 822234), with its registered office at Abington, 33 York Road, Dún Laoghaire, Dublin, A96 F223. LearningWithBranch Limited is the data controller for the personal data described here. For any privacy question, or to exercise the rights set out below, contact us at hello@learningwithbranch.com.
What we collect
We keep what we collect to what BranchAI actually needs to work:
- Account details. The email address (and, if you choose to provide it, your name) from the Google account you sign in with. There are no BranchAI passwords - signing in happens with Google, and we never see or store a password.
- Documents you upload. The PDFs, images, and Word documents you add, and the study notes, keyword tiles, and quizzes generated from them.
- How you use your notes. Light usage signals such as whether you marked a quiz question easy or hard, used to make your study notes more useful over time.
- Basic technical data. Standard information your browser sends (such as IP address and device type) and aggregate, cookieless metrics about which pages load, used to keep the service secure and fast.
We do not ask for and do not want any special-category data beyond what may incidentally appear in a document you choose to upload. Please upload only material you are comfortable processing for study.
How we use it, and our legal basis
Under the GDPR we only process personal data where we have a lawful basis to do so:
- To provide BranchAI - creating your account, storing your documents, and generating your study notes. Basis: performance of our contract with you.
- To keep the service secure and reliable - preventing abuse, diagnosing faults, and understanding aggregate usage. Basis: our legitimate interests in a safe, working product.
- To improve how notes are presented - using quiz feedback to refine the study experience. Basis: our legitimate interests, balanced against your privacy.
- Where the law requires it - for example, responding to a valid legal request. Basis: compliance with a legal obligation.
We do not sell your personal data, and we do not use your documents to advertise to you.
Who processes it
We use a small set of trusted service providers ( “processors”) to run BranchAI. They act on our instructions under data-processing agreements and may only use your data to provide their service to us:
Supabase
Accounts, database, and file storageYour email and login, the documents you upload, and the study notes generated from them.
EU-hosted data region; safeguarded by EU Standard Contractual Clauses where any transfer applies.
Google (Gemini API)
Turning your documents into study notesThe text and images from the document you upload, sent only to generate your study cards.
Processed via Google's API under contractual data-protection terms; not used to train Google's models.
Microsoft Azure (Speech)
Irish-voice read-aloudThe passage of text you ask to be read aloud, sent only to generate the audio. The audio is cached, so the same passage is not sent twice.
Processed in the EU (Azure North Europe).
Vercel
Hosting and privacy-friendly analyticsStandard request data (such as IP address) and aggregate, cookieless page metrics.
Transfers safeguarded by EU Standard Contractual Clauses.
Resend
Sending service emailsThe email address a message is sent to, and the contents of that message - sign-in and account notices only. We never send marketing email.
Transfers safeguarded by EU Standard Contractual Clauses.
Sentry
Error monitoringTechnical error reports when something goes wrong - what failed, where it happened, and identifiers such as your account or document ID. We do not send your document text or study notes.
EU data region (Germany).
Your document content is sent to Google’s Gemini API solely to generate your study notes. It is processed under Google’s data-protection terms and is not used to train Google’s models.
Where your data is stored
We aim to keep personal data within the European Union wherever possible. Some of our providers may process limited data outside the EU. Where that happens, the transfer is protected by appropriate safeguards - in practice the European Commission’s Standard Contractual Clauses - so your data keeps an equivalent level of protection.
How long we keep it
We keep your account and documents for as long as your account is active, so your study notes are there when you come back.
- You can delete any document at any time. Deleting it removes the uploaded file and the generated notes from our systems.
- You can permanently delete your account yourself at any time from your settings page. It happens immediately: your uploaded files, your study notes, and your account are removed, and there is no restore. We keep limited records only where a legal obligation requires it.
- One thing is deliberately left in place: read-aloud audio. When a passage is read aloud, the resulting audio is stored under a hash of the voice and the text itself, never against your account, and is reused by anyone who asks to hear the same passage. It is not attributable to you and it is not ours alone to delete, so deleting your account leaves it where it is.
Students and children’s privacy
BranchAI is designed for dyslexic students, including those under 18. We take particular care with younger users.
- Where a student is below the age of digital consent in their country (between 13 and 16 across the EU), BranchAI should be set up and supervised by a parent, guardian, or the student’s school, which provides consent on the student’s behalf.
- When a school or teacher uses BranchAI with their students, the school is responsible for having the appropriate basis to do so, and we act as their processor for that student data.
- We collect only what is needed for studying, never more, and we never use a student’s documents for advertising or profiling.
If you believe a child has given us personal data without the proper consent, contact us at hello@learningwithbranch.com and we will delete it promptly.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify data that is inaccurate or incomplete.
- Erase your data (“the right to be forgotten”).
- Restrict or object to certain processing, including anything based on our legitimate interests.
- Port your data - receive it in a portable format.
- Withdraw consent at any time, where processing is based on consent.
You can exercise the right to erasure yourself, straight away, from your settings page - deleting your account removes your documents and study notes immediately, with no waiting period. To exercise any of the others, email hello@learningwithbranch.com and we will respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have mishandled your data.
How we protect it
Security is built into how BranchAI works, not bolted on:
- Every record is scoped to its owner by row-level security, so you can only ever see your own documents and notes.
- Uploaded files live in private storage, reachable only by the account that uploaded them.
- Data is encrypted in transit, and access to our systems is limited to what is needed to operate the service.
No system is perfectly secure, but we work to protect your data and to respond quickly if anything goes wrong.
Changes to this policy
As BranchAI grows we may update this policy. When we make a meaningful change we will update the date at the top of this page and, where appropriate, let you know directly. The version published here is always the current one.
Contact us
For any question about this policy or your personal data, reach us at hello@learningwithbranch.com. We read every message and aim to reply quickly.
