Privacy policy.

Karob (“we,” “us,” or “our”) operates the website at karob.ai and the Karob study platform (together, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to the collection and use of information in accordance with this policy.

What we collect

Account information. When you create an account we collect your name, email address, and authentication credentials. If you sign in through a third-party provider (e.g. Google) we receive the profile information you authorize that provider to share.

Content you upload. Lecture slides, PDFs, notes, and any other materials you add to Karob. We process this content solely to provide the Service to you.

Usage data. We automatically collect information about how you interact with the Service, including pages visited, features used, study session activity, browser type, operating system, and IP address.

Cookies and similar technologies. We use strictly necessary cookies to keep you signed in and remember your preferences. We may use analytics cookies to understand aggregate usage patterns. You can disable non-essential cookies in your browser settings.

Payment information. If you subscribe to a paid plan, payment details (card number, billing address) are collected and processed by our payment processor. We do not store full payment card numbers on our servers.

How we use it

We use the information we collect to:

• Provide, maintain, and improve the Service, including generating structured notes, flashcards, quizzes, and concept graphs from your uploaded materials.
• Process your uploads through AI models to deliver the core study features you request.
• Communicate with you about your account, respond to support requests, and send service-related notices.
• Detect, prevent, and address technical issues, fraud, or abuse.
• Comply with legal obligations.

We do not use your uploaded content to train machine-learning models. Your materials are processed to generate outputs for you and are not used for any other purpose.

Sharing and third parties

We do not sell your personal information. We share data only in the following circumstances:

• Service providers. We use third-party providers for hosting, analytics, payment processing, and AI inference. These providers process data on our behalf under contractual obligations to protect it and use it only for the purposes we specify.
• AI providers. Portions of your uploaded content are sent to third-party AI providers (such as OpenAI and Anthropic) to generate notes, flashcards, and other study outputs. These providers process data under their API data-use agreements, which prohibit using API inputs and outputs to train their models.
• Legal requirements. We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers. If Karob is acquired, merged, or sells substantially all of its assets, user information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

Data retention

We retain your account information and uploaded content for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or de-identify your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g. resolving disputes or enforcing our agreements).

Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security, but we work to protect your information and promptly address any incidents.

Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data or account.
• Export your data in a portable format.
• Object to or restrict certain processing of your data.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at hello@karob.ai. We will respond within 30 days.

Children’s privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will notify you by email or through a notice on the Service before the change takes effect.

Contact

Questions about this policy? Email hello@karob.ai.