Privacy Policy

01Information we collect

We collect information in three ways: what you give us directly, what we collect automatically as you use the Service, and what we receive from third parties you choose to connect.

Information you provide

• Account information: your name and email address, account identifier, profile image, and basic profile information received when you create or access a biu account using Apple or Google.
• Profile and onboarding information: your age range, optional birthday, persona, subjects, learning goals and difficulties, revision preferences, timezone, notification choices, attribution response, and other preferences you choose to provide.
• Your content: the videos, links, PDFs, images, notes, imported decks, manual flashcards, chat attachments, and other study material you upload, import, link, or paste into biu so we can provide the features you request (“Your Content”).
• Learning activity: your quiz answers, flashcard performance, streaks, skip passes, and spaced repetition scheduling data.
• AI tutor conversations: questions you ask biu’s AI tutor and the material you ground those questions on, the responses returned to you, optional web-search queries and results used by the tutor, and any read-only chat snapshot you deliberately publish through a revocable sharing link.
• Voice and AI input: short audio recordings you choose to record for transcription, free-text recall answers sent for AI-assisted grading, and related prompts. Audio is sent for transcription and the temporary recording is removed from the app after transcription or discard; the resulting text may be retained when you use or send it.
• Personal Memory: if you separately enable this Pro feature, selected facts inferred from eligible tutor conversations, the categories they belong to, and your consent and deletion settings.
• Purchase, gift, and referral information:product and transaction identifiers, subscription status, renewal or expiration dates, gift funding and claim status, and referral codes and rewards. We do not receive your full card or bank details.
• Waitlist sign-ups: if you joined our pre-launch waitlist on getbiu.app, we collected the email address you submitted.
• Communications: anything you send us directly, such as support requests to admin@getbiu.app.

Information collected automatically

• Device and log data, such as device model, operating system and version, app version, unique device identifiers, IP address and approximate region inferred from it, network information, and crash or performance logs.
• Usage data, such as which features you open, session length, and general in-app behavior, collected through product analytics tools. When analytics is enabled, this includes selected product events and app lifecycle events; session replay is disabled. In the current app, configured product analytics and enabled referral or gift-link attribution can begin as part of normal app operation; there is not yet a separate in-app switch for these activities.
• A push notification token, if you enable notifications, so we can send you reminders (for example, to protect a quiz streak).

Information from third parties

• If you sign up or sign in using Apple or Google, we receive basic profile information (such as your name and email address) that those providers share with us, subject to your settings on that platform.
• If you purchase a biu Pro subscription, Apple or Google sends us confirmation of your purchase, subscription status, and renewal dates. We never receive or store your card, bank, or full payment details — those are handled entirely by Apple or Google.
• If a friend refers you using their referral link, we associate your sign-up with that referral code so we can credit their account, but we do not receive your contact details from them just because you followed their link.

02How we use your information

We use the information above to:

• Provide the Service — create your account, process Your Content into summaries, flashcards, and quizzes, run the daily spaced-repetition schedule, and power the AI tutor.
• Maintain your streaks, skip passes, and referral bonus days, and credit the correct account when a referral is completed.
• Process and manage your free trial and Pro subscription, including communicating with Apple or Google about your purchase status.
• Send you service-related communications, such as streak reminders, quiz notifications, receipts, and important account or policy updates.
• Monitor, debug, and improve the Service, including diagnosing crashes and understanding which features are used and how.
• Detect, investigate, and prevent fraud, abuse of the referral program, security incidents, and violations of our Terms of Service.
• Comply with legal obligations and respond to lawful requests from public authorities.

We do not use Your Content or learning activity to show you third-party advertising, and we do not sell your personal information.

03How AI processes your content

To provide AI features, biu sends the parts of Your Content and instructions needed for the requested feature to AI processors. Current processing routes include OpenRouter, which routes requests to configured model providers such as Google, OpenAI, DeepSeek, or Anthropic, and direct Google Gemini processing for certain document, image, video, and embedding tasks. Short voice clips are sent through OpenRouter for transcription. The precise provider may vary by feature and may change as models are updated.

If you enable Personal Memory, biu uses an AI model to extract a limited set of allowed facts from eligible tutor conversations and stores those facts with Supermemory so they can personalize later conversations. This is separate from ordinary chat history and can be disabled or permanently deleted from the app. Disabling Personal Memory stops new use but does not delete saved facts unless you choose delete-all.

biu does not use Your Content to train its own general-purpose AI models. AI processors handle information under their commercial terms and the privacy and retention controls available to biu. Provider retention can vary by service and configuration, so do not upload sensitive personal information that is not necessary for your use of the Service.

Because this processing happens for every piece of content you add, please avoid uploading anything you would not want processed by an AI system — for example, sensitive personal information about yourself or others that isn’t necessary for your studies.

04How we share your information

We share information only with the service providers who help us run biu, and only to the extent needed for them to perform their role:

• Supabase — authentication and managed database services used for account data, Your Content, chats, preferences, and learning activity.
• Cloudflare R2 — object storage for uploads and attachments while they are processed or retained for your account.
• OpenRouter and model providers — AI generation and transcription routing. Depending on the feature, a request may be processed by Google, OpenAI, DeepSeek, Anthropic, or another model provider that we configure and vet.
• Google — direct Gemini processing for document, image, video, and embedding features, as well as Google sign-in and Android platform services.
• Supermemory — storage and retrieval of the limited Personal Memory facts you ask biu to remember.
• PostHog — selected product analytics, app-lifecycle events, and crash reporting. Analytics may be linked to your biu account identifier after sign-in; session replay is disabled. PostHog may process IP, device, app-version, event, and diagnostic information on servers in the United States.
• RevenueCat, Apple, and Google — offering, purchase, gift, subscription, entitlement, renewal, and refund administration. Apple and Google also provide sign-in, distribution, and device platform services.
• Expo — app updates and push-notification delivery infrastructure. Expo receives the device push token and technical delivery information needed to send a notification or deliver an update.
• ChottuLink — deep-link and deferred-link resolution for referrals and prepaid gifts. It may process link, device, IP, install, and resolution metadata needed to attribute and deliver the link when the integration is enabled.
• Exa — web-search processing when the AI tutor determines that a user request needs current public web information.
• Qdrant-compatible vector infrastructure — semantic indexes used to retrieve relevant portions of your material and delete them with your account.
• Resend — delivery of transactional and service-related email where enabled.
• Google Sheets / Google Workspace — used to temporarily store email addresses collected through our pre-launch waitlist. New accounts are created and stored directly in Supabase.

We may also share information if required by law, to protect the rights, safety, or property of biu or our users, or as part of a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.

05Data retention

We keep your account information, Your Content, chats, Personal Memory facts, purchase and gift state, and learning activity for as long as your account is active or as needed to provide the feature. A voice recording is used for the requested transcription and is not stored as a chat message by biu. Public chat snapshots remain available until you revoke the link, delete the thread, or delete your account. Analytics and security records are kept only for the period reasonably needed for product analysis, debugging, fraud prevention, and security. Historical waitlist email addresses are deleted when they are no longer needed or when you ask us to delete them, whichever comes first.

When you delete your account, we delete or anonymize your personal information and Your Content within 30 days of a verified request, except where we are required to retain certain records for longer to comply with legal, tax, security, or fraud-prevention obligations, or where data persists briefly in encrypted backups until they are rotated out.

06International data transfers

biu is operated from India, and our service providers host infrastructure in India, the United States, and other countries. Wherever your information is processed, we require our service providers to protect it consistent with this Privacy Policy and applicable law, including through contractual safeguards such as standard contractual clauses where required.

07Your rights and choices

You can review and update your account information, withdraw notification permission, enable or disable Personal Memory, permanently delete Personal Memory, and delete individual pieces of content, directly inside the biu app at any time. You can also permanently delete your account and associated data from within the app’s settings, via our data deletion request page, or by emailing admin@getbiu.app.

The current app does not provide a separate control to opt out of product analytics or referral and gift-link attribution. You may contact admin@getbiu.app with a privacy request. We plan to add an in-app privacy choice before relying on consent for processing that requires it.

If you are in the European Economic Area or United Kingdom

You have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time where processing is based on consent. You may lodge a complaint with your local data protection authority.

If you are in California

You have the right to know what personal information we collect, to request deletion or correction of it, and to opt out of the “sale” or “sharing” of personal information. biu does not sell your personal information or share it for cross-context behavioral advertising. Referral and gift-link attribution is used to resolve biu links and credit the correct accounts, not to serve third-party advertising.

If you are in India

Under the Digital Personal Data Protection Act, 2023, you have the right to access a summary of your personal data and the processing activities involved, request correction or erasure, nominate another individual to exercise your rights in the event of death or incapacity, and file a grievance with us before approaching the relevant Data Protection Board.

Regardless of where you live, you can reach us at admin@getbiu.app to exercise any of these rights, and we will respond within the time required by applicable law.

08Children's privacy

biu is intended for users aged 13 and older, and we do not knowingly allow anyone under 13 to create an account or use the Service. Users aged 13 to 17 may use biu only with the consent and supervision of a parent or legal guardian. If you believe a child under 13 has created an account or provided us with personal information, please contact us at admin@getbiu.app and we will delete it promptly.

09Push notifications

With your permission, biu sends push notifications to help you keep your streak and stay on top of your daily quiz. You can disable notifications at any time in your device settings or inside the app; this won’t affect any other part of the Service.

10Security

We use industry-standard safeguards to protect your information, including encryption in transit, access controls on our backend, and vetted third-party infrastructure providers. No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee its absolute security.

11Third-party services

The Service is distributed through, and billed via, the Apple App Store and Google Play, and links to those platforms are governed by Apple’s and Google’s own privacy policies. If you sign in with Apple or Google, their privacy policies also govern the information they collect during that process.

12Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app, by email, or by posting a notice on getbiu.app before the change takes effect. The “last updated” date at the top of this page always reflects the current version.

13Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at: