Privacy policy

Who operates the service?

The service is offered as NanoStudent at nanostudent.com. For data questions, use the Contact page or email support@nanostudent.com. When your account belongs to a classroom, its teacher may determine how classroom learning data is used within the available permissions.

Information we process

We may process your name, email, role, language, display preference, country and education stage; classes, membership and messages; uploaded materials; exam settings, questions, answers, results and progress; notifications; credit and payment records; support conversation subjects, messages, and status; and security events. Passwords are stored as hashes, not in their original form.

Google sign-in and agreement

If you use Google to create an account or sign in, we receive your Google account’s unique ID, verified email address and display name to identify and link your account. We do not request access to your Google files or contacts. When a new account is created, we record the versions of the Privacy Policy and Terms of Use you accepted, the time and the registration method. You can register with email instead.

Apple sign-in uses your unique identifier and the email you choose to share, including a private relay address. A revocation token is encrypted on the server to revoke Apple access after account deletion.

Files and AI

When you request an exam, NanoStudent sends your selected study files or text and exam settings to OpenAI to generate questions and explanations. Sources may contain personal data and processing may occur outside your country. Share only content you are entitled to share. Storing a source alone does not send it for generation; transmission starts when you request an AI feature. The retention and deletion provisions in this policy apply.

Why we use it

We use information to create accounts and sessions, manage classes and materials, generate and deliver exams, score answers, show results to authorized people, manage credits and payments, respond to inquiries, protect the service and prevent misuse.

Who can access it?

Only the account owner and administrators can view a support conversation. Teachers, learners and administrators see information according to their roles, classroom membership and result-release settings. We may use hosting and email providers, OpenAI for requested AI processing, and Dodo Payments to process payments when enabled. Providers may process information outside Jordan under their operating arrangements and applicable legal requirements. Do not include full card details in support messages.

In-app purchases are processed by Apple or Google Play. We verify the transaction receipt and associate it with your account and balance; we do not store full card details.

Cookies and device storage

The service uses an essential session cookie. Your browser may also store language, theme and display privacy preferences, plus a temporary local backup of answers to an exam in progress for recovery. Clearing site data may sign you out or remove locally recoverable answers.

Retention and deletion

You can delete your account in Settings after confirming your identity, without administrator approval. Sessions and pending jobs end; profile data, private sources, generation text, support content and unshared private exams are erased. Local files and OpenAI copies are cleaned up with automatic retries when unavailable. Shared class assessments and participant results remain under a deleted identity to preserve other users’ records; financial and audit records remain for accounting and disputes. Hosting backups follow the host’s retention cycle and are not immediately erased from within the app.

Younger learners

Minors may use the service in a classroom managed by a teacher or educational organization. Anyone creating an account or uploading a minor's information must have the necessary authority and permissions. Contact us if a minor's information was shared without appropriate authority.

Your choices and security

Subject to applicable law and the nature of the records, you may request access, correction, a copy, deletion or an objection to specific processing. Include your account email and request type, never your password. We use account, session, permission and file controls, but no online service can promise zero risk.

Policy changes

We will review this page when the service, providers or applicable requirements change and display its review date. Contact us for questions about the current version or your choices.

File storage

20 MB per file · 100 MB included. Study files are deleted one year after upload, with notices 30, 7 and 1 days before deletion. Files are protected while a paid storage subscription is active; after expiry there is a 30-day grace period. Exams and results remain.

Temporary files are removed 7 days after the last generation finishes (or after upload if unused). Paid subscriptions do not extend temporary retention.

Preventing repeated welcome credits

We retain a keyed, non-readable email fingerprint to prevent repeated free-trial claims after account deletion. It is not used for marketing.